
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa
File: 3opZNEPOksg2S6VKYDZVQRgjA0Q.roa (raw, json)
Hash identifier: hP8MTdHU9yAk19lfa6B9spiHZ8NcMQ7+tH2uaC3Ywds=
Subject key identifier: DE:8A:59:34:43:CE:92:C8:36:4B:A5:4A:60:36:55:41:18:23:03:44
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: B2
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa
Signing time: Tue 31 Mar 2026 07:55:21 +0000
ROA not before: Tue 31 Mar 2026 07:55:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DE8A593443CE92C8364BA54A6036554118230344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:a9:52:c2:74:20:11:48:92:0c:92:b3:a2:
b5:d4:cf:91:20:8d:64:79:d5:0d:8c:1b:85:a2:d6:
07:f5:7d:06:41:4d:b9:9f:2d:cc:6f:5f:af:3d:ff:
45:41:52:02:d3:1c:ec:50:8f:77:50:88:5b:63:d7:
d0:5d:c7:39:1b:d1:df:20:a6:e5:f0:53:b1:96:c8:
56:b3:58:ec:ce:96:e9:bb:92:1a:3f:bd:c4:c9:02:
6b:9a:90:69:a0:b3:2a:7e:21:38:62:2f:0e:0e:36:
5d:b0:4f:71:ce:e5:54:dd:09:11:f8:ff:ec:d1:3f:
35:8a:f8:1f:c9:90:c1:cc:e0:68:6f:35:71:af:dc:
45:81:b6:72:e1:d1:9c:e2:69:03:28:14:07:c3:9a:
44:a6:5f:70:9a:fc:93:6a:82:fb:32:5a:6c:52:2d:
c3:44:65:fc:97:01:f6:1e:c1:ed:6e:ce:95:55:df:
29:87:fd:7f:35:cc:fd:31:6c:93:eb:af:d0:e0:ab:
d9:76:df:08:7a:a2:45:9c:81:63:59:d9:a1:ad:3f:
38:9c:c2:2d:2c:0d:d0:cf:8f:a2:9d:2f:d6:c0:95:
07:49:27:b8:1c:86:1e:25:1c:b0:63:04:bb:f5:23:
96:05:10:b5:bb:b4:d3:b2:2a:e9:a3:4c:b6:b2:81:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:59:34:43:CE:92:C8:36:4B:A5:4A:60:36:55:41:18:23:03:44
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa
sbgp-ipAddrBlock: critical
IPv4:
160.249.94.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:32:d1:9c:65:fa:d2:76:7a:a2:1f:ca:7c:57:25:22:8b:
42:ab:e1:2a:5c:13:0d:c8:55:04:28:fb:e6:cb:97:7a:14:e5:
7a:a3:06:b1:77:c7:ba:11:64:c3:7b:cf:d8:f6:11:65:6a:9b:
bb:e0:44:aa:8a:4a:fa:6e:43:69:ea:b9:c6:6c:64:22:0a:32:
42:08:7c:c4:27:39:fc:0d:ca:ad:57:63:6d:69:36:b4:a5:40:
2d:71:59:c0:d0:c3:a2:5b:a5:6f:4a:72:34:7d:79:2a:0d:03:
20:57:13:77:10:3c:f7:7e:12:6b:57:25:f5:17:c8:f5:90:67:
4d:db:e5:4d:ff:ba:d0:f3:0b:92:30:c4:ea:80:38:44:de:05:
8d:27:ab:a5:b8:7e:9c:56:c6:a3:55:49:41:7a:0f:e5:68:76:
c3:b6:dd:17:7d:9e:2b:b4:13:f0:dc:96:58:25:1f:8e:24:40:
2e:49:ea:e3:88:1f:f9:e7:b5:08:10:f0:06:bc:1c:53:c7:fb:
7f:0e:1f:b6:d3:c2:28:f4:bb:96:7d:51:21:b9:c2:de:0b:cf:
e6:16:e1:72:76:53:68:0f:01:c6:3d:46:2c:36:4f:f3:21:9d:
62:ce:3e:ed:1f:02:07:7e:06:d0:cc:4f:73:c3:f5:cc:7e:95:
83:5c:09:ab
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw
NzU1MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFOEE1OTM0NDNDRTky
QzgzNjRCQTU0QTYwMzY1NTQxMTgyMzAzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE7qlSwnQgEUiSDJKzorXUz5EgjWR51Q2MG4Wi1gf1fQZBTbmf
LcxvX689/0VBUgLTHOxQj3dQiFtj19Bdxzkb0d8gpuXwU7GWyFazWOzOlum7kho/
vcTJAmuakGmgsyp+IThiLw4ONl2wT3HO5VTdCRH4/+zRPzWK+B/JkMHM4GhvNXGv
3EWBtnLh0ZziaQMoFAfDmkSmX3Ca/JNqgvsyWmxSLcNEZfyXAfYewe1uzpVV3ymH
/X81zP0xbJPrr9Dgq9l23wh6okWcgWNZ2aGtPzicwi0sDdDPj6KdL9bAlQdJJ7gc
hh4lHLBjBLv1I5YFELW7tNOyKumjTLaygfVBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU3opZNEPOksg2S6VKYDZVQRgjA0QwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzNvcFpORVBPa3NnMlM2VktZRFpWUVJnakEwUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg+V4wDQYJKoZIhvcNAQELBQADggEB
AFeBMtGcZfrSdnqiH8p8VyUii0Kr4SpcEw3IVQQo++bLl3oU5XqjBrF3x7oRZMN7
z9j2EWVqm7vgRKqKSvpuQ2nqucZsZCIKMkIIfMQnOfwNyq1XY21pNrSlQC1xWcDQ
w6JbpW9KcjR9eSoNAyBXE3cQPPd+EmtXJfUXyPWQZ03b5U3/utDzC5IwxOqAOETe
BY0nq6W4fpxWxqNVSUF6D+VodsO23Rd9niu0E/DcllglH44kQC5J6uOIH/nntQgQ
8Aa8HFPH+38OH7bTwij0u5Z9USG5wt4Lz+YW4XJ2U2gPAcY9Riw2T/MhnWLOPu0f
Agd+BtDMT3PD9cx+lYNcCas=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:30:28 2026 by rpki-client