
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3qPAa6PgSSgwO0-SmmkGkM4WiEg.roa
File: 3qPAa6PgSSgwO0-SmmkGkM4WiEg.roa (raw, json)
Hash identifier: JconuF4CvbBDVc2v0orjq6cXyYQqu8qM6c9aarbiNdM=
Subject key identifier: DE:A3:C0:6B:A3:E0:49:28:30:3B:4F:92:9A:69:06:90:CE:16:88:48
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 155B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3qPAa6PgSSgwO0-SmmkGkM4WiEg.roa
Signing time: Tue 31 Mar 2026 07:59:30 +0000
ROA not before: Tue 31 Mar 2026 07:59:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5467 (0x155b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DEA3C06BA3E04928303B4F929A690690CE168848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:19:84:33:2e:94:1d:70:8c:e6:c2:de:6c:
88:22:fb:e6:0a:fb:4e:a7:c7:2c:ee:6a:df:a0:0d:
1f:d8:f2:66:24:59:41:a8:d7:57:64:e7:21:fb:fc:
69:0b:96:92:de:ea:ee:cd:a3:94:f9:85:b5:14:eb:
be:40:a2:20:fc:64:14:bd:a5:68:a6:ee:b4:48:7d:
d3:11:a9:75:b9:a4:78:c3:af:2d:3d:6f:9d:b4:bd:
c6:13:d3:9f:2b:bd:85:de:0d:6a:cc:2f:e7:fa:d3:
7e:fe:37:86:06:63:65:f3:b0:d0:d6:30:ef:96:17:
64:20:01:68:62:24:87:91:51:4d:7a:c1:86:7d:a8:
5c:b3:1d:ac:15:1a:15:50:a2:6d:a4:d1:34:2a:0b:
5a:32:b4:4e:ab:02:b6:80:cd:f6:ad:f5:47:31:6b:
f1:4c:09:81:7f:80:09:e2:dd:17:ee:22:e7:15:95:
8b:cb:5c:f7:3c:57:57:a5:3e:b4:bd:70:ba:0f:69:
d1:43:aa:29:2a:63:1c:c0:7c:c6:c0:86:e0:09:89:
7d:f9:98:ec:e7:f2:c8:d6:33:6c:6f:05:b4:1c:84:
4c:47:be:80:b3:c4:fd:3a:66:ec:bd:08:d8:eb:12:
ad:41:e8:b0:8a:cc:4b:53:1b:d5:d5:1c:8e:7c:91:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:C0:6B:A3:E0:49:28:30:3B:4F:92:9A:69:06:90:CE:16:88:48
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3qPAa6PgSSgwO0-SmmkGkM4WiEg.roa
sbgp-ipAddrBlock: critical
IPv4:
1.76.224.0/22
Signature Algorithm: sha256WithRSAEncryption
90:fe:d4:40:0b:46:a7:cc:c9:03:b3:b6:8d:5f:4b:9d:57:8d:
88:ce:41:4f:31:b4:fa:44:55:1f:cf:d2:8e:85:28:47:51:03:
eb:3f:43:f7:c6:3c:7f:08:9a:8e:55:09:57:79:bd:d5:5c:54:
c4:fd:04:9d:d5:1b:42:b4:76:bd:4b:aa:fc:e0:e0:b9:5e:79:
76:d6:ab:94:90:99:d5:a0:19:a0:47:76:40:ab:99:92:ff:b5:
22:a9:5f:3d:3a:6b:90:ff:fe:0a:81:06:12:c0:91:ee:02:ab:
eb:66:ca:68:47:e9:45:01:f6:2d:9e:c7:58:c5:d9:ec:1a:7c:
f4:ca:21:c9:0c:75:89:ad:3d:0f:6d:73:32:cc:9a:8f:4c:b9:
ce:af:19:a1:44:a7:3e:a9:39:65:fc:c6:b2:f2:8d:a3:e1:e4:
30:cb:1e:7d:0e:29:d2:60:fb:e5:b1:d1:70:90:4c:92:e7:fb:
7e:0c:86:56:ee:1e:4c:0b:42:01:be:ca:4d:d6:65:eb:aa:66:
fb:15:b4:74:91:cb:b0:3d:00:5f:93:3a:7d:7c:3a:ee:54:45:
a0:ce:05:2d:98:ed:54:65:c6:c6:b1:4a:e1:70:f0:79:8b:a9:
5b:3b:42:47:ad:be:05:a4:f8:fb:6f:22:e7:08:69:7b:bf:50:
6b:ac:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:55 2026 by rpki-client