
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30405/k3rLRldWBPQeYINglc7WrBnfCbs.roa
File: k3rLRldWBPQeYINglc7WrBnfCbs.roa (raw, json)
Hash identifier: fAAjMWGelTwFSi0VIbyjaWjNPWG2SOJmBs2kUeqVNg8=
Subject key identifier: 93:7A:CB:46:57:56:04:F4:1E:60:83:60:95:CE:D6:AC:19:DF:09:BB
Certificate issuer: /CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Certificate serial: 3B
Authority key identifier: 2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/k3rLRldWBPQeYINglc7WrBnfCbs.roa
Signing time: Tue 31 Mar 2026 08:18:37 +0000
ROA not before: Tue 31 Mar 2026 08:18:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 146981
IP address blocks: 2400:8820::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Validity
Not Before: Mar 31 08:18:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=937ACB46575604F41E60836095CED6AC19DF09BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:3e:e6:6b:ad:24:e2:82:3c:5c:33:36:50:
27:9b:95:2c:bf:ca:70:64:c6:6c:92:6f:15:2b:32:
9c:42:b7:73:cc:3e:e6:bc:11:a1:34:30:d1:13:c6:
94:ac:75:6c:21:6a:9f:86:8d:06:59:49:4f:d5:f6:
10:66:a4:11:56:3c:81:f7:5d:6b:b2:24:48:0e:18:
64:ba:94:a2:46:ca:70:0c:04:a4:e0:a2:29:41:b5:
e4:e6:8a:7a:7d:01:6c:f7:b1:d2:a4:ea:db:99:d2:
59:23:e8:ff:ae:43:cf:a2:1c:39:a3:af:b6:90:72:
ce:c1:d4:2b:88:55:ce:b6:5f:ca:34:cf:35:00:28:
ca:99:51:df:5c:f0:3a:91:2b:e2:1d:66:75:f8:24:
d8:d4:f2:b6:34:7f:39:8d:d6:13:f7:8f:91:5d:84:
0a:2c:49:fb:ca:c6:d0:f4:33:a2:5d:d8:84:69:99:
99:e1:96:8e:43:76:da:24:f2:65:58:1e:e8:6d:42:
62:0a:80:1e:a6:44:d2:b0:e6:7f:46:71:24:0f:61:
d4:dc:b5:7c:fd:be:a0:3e:a2:7b:b7:bd:eb:54:31:
0a:42:aa:5d:9b:c6:81:e2:97:29:22:9a:7d:70:dc:
6e:f0:64:82:98:59:3f:0d:0e:0f:f8:eb:77:13:59:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:CB:46:57:56:04:F4:1E:60:83:60:95:CE:D6:AC:19:DF:09:BB
X509v3 Authority Key Identifier:
keyid:2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/k3rLRldWBPQeYINglc7WrBnfCbs.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:8820::/32
Signature Algorithm: sha256WithRSAEncryption
74:4c:af:64:e7:25:6b:fd:de:13:6b:22:55:3d:8a:eb:a3:a2:
c1:7f:34:9e:db:56:e6:f3:fa:e5:56:e1:09:8e:7c:16:72:63:
93:26:8b:d2:3d:65:a4:a7:d9:09:e2:68:ee:0e:87:33:d9:34:
2a:b4:cc:c7:3a:8d:83:46:2a:44:2b:1f:07:15:51:f4:51:b1:
7b:f4:1c:7b:87:32:56:eb:33:2e:4f:36:66:df:84:cd:a1:73:
40:6f:a1:93:48:e3:1c:87:90:f0:c3:40:d6:ec:7f:b9:43:65:
74:57:e4:fa:c3:9d:43:0c:87:38:b2:65:ce:d5:13:d0:b1:ce:
6c:09:29:a4:af:0b:a6:ec:58:c8:d4:38:9c:31:b5:97:d9:9a:
01:e8:53:4f:49:05:1a:f9:27:76:7d:f8:ba:55:0a:f1:5d:a9:
14:2d:f3:e5:e0:25:03:57:73:a5:6f:2a:4a:e7:9b:91:50:41:
68:02:23:84:8e:4e:78:03:d5:fb:e2:60:39:20:c6:7c:71:f2:
1d:2f:00:1a:4f:5d:3e:07:35:52:08:5e:4a:b5:15:75:29:e8:
e0:bb:00:6c:39:c5:dc:7f:6b:16:91:a6:a5:92:e7:e6:98:4a:
8c:4c:02:c9:aa:9e:56:22:b3:cc:69:03:04:7c:dd:77:9d:41:
38:dc:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:41 2026 by rpki-client