
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/3clH9Dq69HvRwDBc0X9JdHKR1uM.roa
File: 3clH9Dq69HvRwDBc0X9JdHKR1uM.roa (raw, json)
Hash identifier: LGNisBZY4odHRsiH+m+UvHx/1StoJDtSqLTCgnbORrs=
Subject key identifier: DD:C9:47:F4:3A:BA:F4:7B:D1:C0:30:5C:D1:7F:49:74:72:91:D6:E3
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 5E
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/3clH9Dq69HvRwDBc0X9JdHKR1uM.roa
Signing time: Tue 31 Mar 2026 08:42:44 +0000
ROA not before: Tue 31 Mar 2026 08:42:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DDC947F43ABAF47BD1C0305CD17F49747291D6E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:95:5a:5c:ca:3f:ec:f4:ca:1b:6b:08:33:
cf:6c:04:a4:38:51:28:82:1b:a5:da:97:f9:36:3d:
38:2b:8a:6f:2e:ce:e6:d2:e4:56:0d:08:92:28:cd:
f8:31:b6:77:f8:f9:aa:6f:8a:97:f9:cc:bd:a4:f0:
94:d0:e1:88:cd:a8:ba:3a:97:d9:1c:0d:4a:c8:0e:
9b:03:a6:57:86:cc:5a:16:d5:03:ac:20:7d:ce:29:
8d:9a:29:14:76:a3:0f:59:d8:34:bd:00:53:9c:9d:
91:ee:05:13:c6:82:c5:c7:9a:1d:d5:e2:e9:a3:e0:
4d:48:b1:ad:98:f5:45:82:9d:05:4c:1b:fe:5e:c7:
f0:1c:d7:4f:39:de:82:1c:98:a4:84:77:9d:f8:89:
5b:ab:e3:74:8e:3f:7b:54:76:9b:4a:55:b5:69:14:
52:62:c0:5c:db:c1:58:4a:e5:0b:c7:4c:8f:7e:8c:
f4:7c:bb:1c:02:a6:37:f4:c3:51:f6:84:69:f8:01:
97:34:b0:21:86:56:24:77:6d:15:28:42:59:cb:50:
32:c5:51:e9:f6:9e:10:a2:bf:e1:8c:dd:ac:ba:38:
46:40:5c:78:72:10:c8:f0:66:a6:35:19:10:db:4c:
84:40:cc:fb:88:be:4c:76:b0:3d:2d:6e:33:62:bc:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:47:F4:3A:BA:F4:7B:D1:C0:30:5C:D1:7F:49:74:72:91:D6:E3
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/3clH9Dq69HvRwDBc0X9JdHKR1uM.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6a:ea:69:81:db:b3:f0:1d:70:c8:83:e3:38:fd:94:a5:68:11:
4f:7c:ae:3b:97:9d:e3:31:ca:9e:1e:41:05:12:bb:a3:ec:b4:
1d:58:ed:9e:51:ca:ed:c0:94:64:88:6a:df:f1:9f:8b:e2:2a:
e8:b3:e0:07:fa:60:bf:be:c9:b7:9a:ef:e9:e7:07:fa:33:40:
d1:65:cb:87:5e:ae:db:8e:00:9c:19:9d:58:5e:08:a0:be:be:
39:1b:30:a1:6d:ab:42:54:c8:bc:5f:63:4c:c8:dc:5b:5b:9f:
84:74:81:c5:64:25:0a:89:ff:c0:7f:11:bd:38:4c:8e:4c:e9:
27:7c:94:90:94:73:4b:60:e9:93:60:4c:e2:9e:c4:fa:84:8b:
53:1f:11:4e:78:a8:1b:53:9a:91:4a:6d:ee:a2:fc:38:c3:18:
d8:96:0d:d2:eb:e0:fe:c8:a2:17:67:7f:56:33:eb:95:5a:0b:
19:aa:12:44:f5:67:92:e8:f8:f7:70:04:88:ab:f2:cb:49:24:
a6:19:3b:7b:0e:db:ae:f6:0e:57:a9:1f:0c:ca:2b:3d:aa:42:
1c:af:01:57:18:d4:8e:2c:9d:36:80:db:11:54:de:3f:45:64:
0f:ea:2f:91:ab:3d:a4:d8:66:2c:ea:c7:3a:dd:0c:b0:b5:0b:
16:c2:a3:10
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI2MDMzMTA4
NDI0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRERDOTQ3RjQzQUJBRjQ3
QkQxQzAzMDVDRDE3RjQ5NzQ3MjkxRDZFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4PlVpcyj/s9Mobawgzz2wEpDhRKIIbpdqX+TY9OCuKby7O5tLk
Vg0IkijN+DG2d/j5qm+Kl/nMvaTwlNDhiM2oujqX2RwNSsgOmwOmV4bMWhbVA6wg
fc4pjZopFHajD1nYNL0AU5ydke4FE8aCxceaHdXi6aPgTUixrZj1RYKdBUwb/l7H
8BzXTzneghyYpIR3nfiJW6vjdI4/e1R2m0pVtWkUUmLAXNvBWErlC8dMj36M9Hy7
HAKmN/TDUfaEafgBlzSwIYZWJHdtFShCWctQMsVR6faeEKK/4YzdrLo4RkBceHIQ
yPBmpjUZENtMhEDM+4i+THawPS1uM2K8NdECAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBTdyUf0Orr0e9HAMFzRf0l0cpHW4zAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzQ5LzNjbEg5RHE2OUh2UndEQmMwWDlKZEhLUjF1TS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBSXAEDANBgkqhkiG9w0BAQsF
AAOCAQEAauppgduz8B1wyIPjOP2UpWgRT3yuO5ed4zHKnh5BBRK7o+y0HVjtnlHK
7cCUZIhq3/Gfi+Iq6LPgB/pgv77Jt5rv6ecH+jNA0WXLh16u244AnBmdWF4IoL6+
ORswoW2rQlTIvF9jTMjcW1ufhHSBxWQlCon/wH8RvThMjkzpJ3yUkJRzS2Dpk2BM
4p7E+oSLUx8RTnioG1OakUpt7qL8OMMY2JYN0uvg/siiF2d/VjPrlVoLGaoSRPVn
kuj493AEiKvyy0kkphk7ew7brvYOV6kfDMorPapCHK8BVxjUjiydNoDbEVTeP0Vk
D+ovkas9pNhmLOrHOt0MsLULFsKjEA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:47 2026 by rpki-client