
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa
File: 3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa (raw, json)
Hash identifier: c9T9esH5GGIETqEBcHA+SYoCIht+d1rnGhAHa46V7Uk=
Subject key identifier: DE:8E:22:E8:AC:FF:76:C1:9A:79:7A:E9:15:98:E4:02:07:F3:C4:44
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 070A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa
Signing time: Tue 31 Mar 2026 08:27:05 +0000
ROA not before: Tue 31 Mar 2026 08:27:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:3:b90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DE8E22E8ACFF76C19A797AE91598E40207F3C444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:af:bb:76:56:3c:68:3d:8d:85:f2:de:90:
ae:ac:49:7a:5e:cb:80:5c:47:8d:bf:9f:d3:22:bc:
c6:bf:df:ae:06:6b:ec:b5:fc:a2:73:38:c1:8b:68:
17:f0:9b:76:86:94:4b:7d:9a:d9:cd:54:4a:a0:61:
1a:15:5d:2f:c6:0b:a3:16:b2:3c:fe:f8:64:d2:55:
f2:55:7d:dd:3a:4c:b5:ed:a3:85:5c:e7:47:26:e8:
93:e1:c6:1a:2f:6d:9b:73:d8:32:37:44:1f:3b:5d:
75:96:50:93:94:2f:ad:79:82:07:5f:0f:54:88:25:
72:c5:d6:b8:98:ee:7c:d5:8c:d5:17:5a:d1:e8:4c:
8b:c6:89:d6:4e:f0:9e:7d:79:2c:9b:37:9f:b8:2e:
50:89:b7:24:9b:ed:8a:dd:f3:0b:f1:d7:99:bd:89:
59:07:1f:5e:0a:90:c1:72:95:5d:91:a0:46:23:0c:
87:be:bf:1d:ff:20:7d:40:6a:23:eb:67:15:82:68:
ce:e3:c1:31:dd:c4:4f:9f:d0:be:4e:b1:0c:2b:9b:
57:11:0b:df:31:6b:54:62:72:75:42:0b:d4:da:a8:
4d:35:5c:58:33:3a:c3:1b:74:f3:4e:7e:cc:35:70:
d0:bc:6a:84:04:02:09:a0:2f:be:7f:0b:9c:eb:d2:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:22:E8:AC:FF:76:C1:9A:79:7A:E9:15:98:E4:02:07:F3:C4:44
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:3:b90::/44
Signature Algorithm: sha256WithRSAEncryption
27:d3:76:f5:62:de:b1:1d:58:23:57:00:36:c8:51:4f:fa:4c:
be:7e:02:57:b0:2f:1c:2f:6a:1e:e9:e9:72:72:c3:0a:43:8f:
b1:bd:a5:cf:21:e6:11:fe:ba:4c:59:56:12:b3:99:db:ac:a7:
df:2c:90:ff:69:f9:c6:6b:ad:d6:bb:c8:7d:2d:f7:34:b2:69:
6b:e4:b1:58:99:dc:af:e3:38:9e:bd:ba:55:cf:98:82:13:d9:
fb:f1:af:a6:ad:68:d9:f4:de:f8:c6:26:42:7b:7a:20:47:8f:
79:e7:02:fd:6a:c0:24:13:f2:6a:d7:7e:d7:ae:5f:43:a6:c0:
93:7e:63:e5:67:97:51:d5:d9:b3:0e:b7:3f:14:88:42:39:e6:
fa:49:74:24:5b:2f:f7:da:d2:ad:a8:c7:36:79:49:ae:a4:f4:
4d:3a:ef:0a:37:e8:e8:4e:03:30:c5:a7:95:66:4f:57:fa:60:
e4:df:cc:3b:e5:54:b2:df:ac:e5:78:1a:ad:4c:ff:5e:5e:c6:
01:cb:23:60:7c:d5:51:c4:b3:53:e0:dd:8c:e7:eb:da:1e:7a:
64:a9:ec:97:56:3d:2b:0d:4c:d6:a6:74:77:4c:00:e8:de:18:
52:b6:29:47:f3:d2:46:06:6d:91:69:2a:4d:28:f7:0e:40:1e:
cd:6a:c2:dc
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFOEUyMkU4QUNGRjc2
QzE5QTc5N0FFOTE1OThFNDAyMDdGM0M0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkya+7dlY8aD2NhfLekK6sSXpey4BcR42/n9MivMa/364Ga+y1
/KJzOMGLaBfwm3aGlEt9mtnNVEqgYRoVXS/GC6MWsjz++GTSVfJVfd06TLXto4Vc
50cm6JPhxhovbZtz2DI3RB87XXWWUJOUL615ggdfD1SIJXLF1riY7nzVjNUXWtHo
TIvGidZO8J59eSybN5+4LlCJtySb7Yrd8wvx15m9iVkHH14KkMFylV2RoEYjDIe+
vx3/IH1AaiPrZxWCaM7jwTHdxE+f0L5OsQwrm1cRC98xa1RicnVCC9TaqE01XFgz
OsMbdPNOfsw1cNC8aoQEAgmgL75/C5zr0nbBAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQU3o4i6Kz/dsGaeXrpFZjkAgfzxEQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS8zbzRpNkt6X2RzR2FlWHJwRlpqa0FnZnp4RVEucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAoAAwuQMA0GCSqGSIb3DQEB
CwUAA4IBAQAn03b1Yt6xHVgjVwA2yFFP+ky+fgJXsC8cL2oe6elycsMKQ4+xvaXP
IeYR/rpMWVYSs5nbrKffLJD/afnGa63Wu8h9Lfc0smlr5LFYmdyv4zievbpVz5iC
E9n78a+mrWjZ9N74xiZCe3ogR4955wL9asAkE/Jq137Xrl9DpsCTfmPlZ5dR1dmz
Drc/FIhCOeb6SXQkWy/32tKtqMc2eUmupPRNOu8KN+joTgMwxaeVZk9X+mDk38w7
5VSy36zleBqtTP9eXsYByyNgfNVRxLNT4N2M5+vaHnpkqeyXVj0rDUzWpnR3TADo
3hhStilH89JGBm2RaSpNKPcOQB7NasLc
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client