
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa
File: Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa (raw, json)
Hash identifier: NeDecKwPiyoE9gbO7hxr02/ylvnjUUPJfG0AMjbgarc=
Subject key identifier: 36:2D:E6:2B:39:B4:23:86:E7:3C:54:95:F3:65:2F:56:CE:AD:6D:43
Certificate issuer: /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial: 23
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa
Signing time: Tue 31 Mar 2026 08:41:55 +0000
ROA not before: Tue 31 Mar 2026 08:41:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63790
IP address blocks: 2407:a6c0::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Validity
Not Before: Mar 31 08:41:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=362DE62B39B42386E73C5495F3652F56CEAD6D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:9c:90:a6:16:d7:80:50:60:21:f0:ec:2a:
ee:96:0b:d7:80:90:15:9d:be:fb:60:d5:e4:fe:0b:
b7:9e:11:03:c7:6b:bf:5e:38:d6:0a:1f:c1:09:a5:
ba:b2:6a:19:1b:ef:0f:a6:30:c8:14:86:2d:7a:22:
b6:cd:a6:c8:03:b1:3f:19:0a:08:72:54:26:2e:07:
ec:2a:ea:8b:2c:3e:00:8a:c2:a3:fd:e7:90:5c:5b:
4a:0a:3e:2c:55:72:76:cd:4d:cc:29:f9:92:2d:71:
68:e1:17:81:8e:03:e0:a1:0b:bf:61:3b:2c:ad:ef:
09:86:71:e8:a4:34:60:d2:44:ba:23:ae:4f:fe:2d:
c6:b3:18:84:22:a9:58:f4:fe:38:4d:6e:de:94:db:
65:8b:20:46:62:e7:6d:f7:93:8e:e5:5c:ac:65:bd:
16:c6:37:23:57:6c:7e:68:be:e5:66:7f:01:86:4c:
b2:68:0e:ef:53:fc:bf:45:06:dc:e6:84:72:e2:06:
2e:fc:7a:a0:e6:d9:09:ea:5f:2f:dc:bf:94:4d:6e:
44:a5:c3:81:77:75:38:72:ac:bc:68:f8:85:2f:dc:
77:94:5a:26:67:e7:60:b5:7c:d5:d5:28:71:f7:56:
22:4a:c1:8b:52:ae:57:9f:bb:3c:30:cb:b0:64:80:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:E6:2B:39:B4:23:86:E7:3C:54:95:F3:65:2F:56:CE:AD:6D:43
X509v3 Authority Key Identifier:
keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:82:71:dd:76:d1:6f:36:be:33:f1:33:dd:87:dc:81:88:c2:
be:9d:2f:bc:9e:17:8a:0a:ae:f8:ed:c0:7d:06:98:59:e4:1c:
35:cc:8d:c3:f0:6a:98:e2:03:98:14:2b:29:61:46:cb:60:88:
02:00:3e:fe:d5:ce:c1:c0:ff:27:ee:78:99:dd:9e:aa:c5:d6:
b2:03:d6:b9:13:f3:15:ea:a1:0b:dc:b8:2f:0c:81:d3:b6:2d:
28:63:9f:49:7a:23:f9:5d:23:93:8d:33:e0:a0:a1:55:0b:9e:
b3:a9:0a:b0:fb:19:ee:25:1d:2e:66:3c:c7:4a:37:e4:bf:6f:
fe:6c:03:b5:98:3b:f5:1d:5d:c8:31:28:bd:d8:2e:cc:95:8f:
c3:50:88:0f:72:5c:9d:2c:8c:b1:9c:c0:bb:46:77:1c:db:96:
07:70:e4:6d:bd:7a:b2:bb:5a:26:69:f9:92:c0:74:34:45:db:
02:09:82:01:9d:a1:f0:02:1c:fd:0f:84:57:08:f2:53:2f:28:
aa:e3:a5:7f:f7:fe:cd:31:c4:c5:5b:e9:cc:9e:c6:c5:31:61:
d6:92:e2:f3:6c:ee:a4:48:a8:34:82:d9:1c:07:9e:30:27:19:
80:c6:b0:69:2c:70:67:6b:40:f6:61:10:01:43:d8:18:3b:00:
81:0f:9b:04
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRkRB
QTc5MkE1RkUwMjEzQkM0QUM2NEVERjIxREYyRUFDNDBFQjBFMB4XDTI2MDMzMTA4
NDE1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzYyREU2MkIzOUI0MjM4
NkU3M0M1NDk1RjM2NTJGNTZDRUFENkQ0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL2fnJCmFteAUGAh8Owq7pYL14CQFZ2++2DV5P4Lt54RA8drv144
1gofwQmlurJqGRvvD6YwyBSGLXoits2myAOxPxkKCHJUJi4H7Crqiyw+AIrCo/3n
kFxbSgo+LFVyds1NzCn5ki1xaOEXgY4D4KELv2E7LK3vCYZx6KQ0YNJEuiOuT/4t
xrMYhCKpWPT+OE1u3pTbZYsgRmLnbfeTjuVcrGW9FsY3I1dsfmi+5WZ/AYZMsmgO
71P8v0UG3OaEcuIGLvx6oObZCepfL9y/lE1uRKXDgXd1OHKsvGj4hS/cd5RaJmfn
YLV81dUocfdWIkrBi1KuV5+7PDDLsGSAsrUCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQ2LeYrObQjhuc8VJXzZS9Wzq1tQzAfBgNVHSMEGDAWgBQf2qeSpf4CE7xKxk7f
Id8urEDrDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODAvSDlxbmtxWC1BaE84U3NaTzN5SGZMcXhBNnc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSDlxbmtxWC1BaE84U3NaTzN5SGZM
cXhBNnc0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzgwL05pM21Lem0wSTRiblBGU1Y4MlV2VnM2dGJVTS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB6bAMA0GCSqGSIb3DQEBCwUA
A4IBAQAjgnHddtFvNr4z8TPdh9yBiMK+nS+8nheKCq747cB9BphZ5Bw1zI3D8GqY
4gOYFCspYUbLYIgCAD7+1c7BwP8n7niZ3Z6qxdayA9a5E/MV6qEL3LgvDIHTti0o
Y59JeiP5XSOTjTPgoKFVC56zqQqw+xnuJR0uZjzHSjfkv2/+bAO1mDv1HV3IMSi9
2C7MlY/DUIgPclydLIyxnMC7Rncc25YHcORtvXqyu1omafmSwHQ0RdsCCYIBnaHw
Ahz9D4RXCPJTLyiq46V/9/7NMcTFW+nMnsbFMWHWkuLzbO6kSKg0gtkcB54wJxmA
xrBpLHBna0D2YRABQ9gYOwCBD5sE
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:14 2026 by rpki-client