
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rCenaHUpQig4RSSrESZAEH3lUw.roa
File: 3rCenaHUpQig4RSSrESZAEH3lUw.roa (raw, json)
Hash identifier: eK0PqpPYdIHB3mxlHpPb28zI6Hw3UVLuWT0CQ6TyEqs=
Subject key identifier: DE:B0:9E:9D:A1:D4:A5:08:A0:E1:14:92:AC:44:99:00:41:F7:95:4C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 141C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rCenaHUpQig4RSSrESZAEH3lUw.roa
Signing time: Tue 31 Mar 2026 07:56:52 +0000
ROA not before: Tue 31 Mar 2026 07:56:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5148 (0x141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DEB09E9DA1D4A508A0E11492AC44990041F7954C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:eb:5f:7b:8c:ef:fc:0e:44:1f:2b:5d:bf:
2f:49:fb:19:bf:6b:40:54:62:5d:89:4d:31:ae:8d:
30:59:c5:68:d6:7a:8a:c8:22:f3:a3:92:83:2a:94:
c1:49:2e:83:c9:32:8e:31:29:17:93:5b:26:08:e5:
07:56:54:40:4e:a3:4b:58:db:6c:98:cb:f2:b5:20:
24:32:90:82:47:35:cd:43:58:66:ee:99:03:99:6a:
11:e1:a9:7b:1d:9f:79:bd:ed:c1:01:e4:eb:cc:1b:
0c:2e:f7:2a:de:5b:8d:5f:69:89:2f:45:0b:79:33:
d0:d9:4e:18:10:26:74:0e:54:20:79:a0:b7:83:5c:
c9:29:c4:72:7e:09:b9:8c:de:fb:c9:08:1a:6f:e9:
41:05:13:82:76:72:b7:d6:58:53:e0:b1:60:3e:41:
6a:56:c5:0b:df:72:14:ed:d3:3e:16:5c:f3:72:e2:
19:60:94:7a:8f:3a:ef:7d:6d:d0:6a:28:38:e1:b9:
9d:da:05:83:c2:0d:96:b7:ff:ac:cc:d6:54:6e:2e:
2c:a9:e8:ee:86:19:2e:70:9b:cd:96:4d:46:c8:ba:
44:3d:33:8f:4e:ab:72:94:47:50:42:22:92:0b:ee:
7f:2f:de:6f:d1:5b:d2:cb:37:39:32:9b:75:98:7c:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:9E:9D:A1:D4:A5:08:A0:E1:14:92:AC:44:99:00:41:F7:95:4C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rCenaHUpQig4RSSrESZAEH3lUw.roa
sbgp-ipAddrBlock: critical
IPv4:
27.230.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:82:d4:38:b6:80:5d:be:31:ba:a3:ff:47:1e:3b:11:ff:9d:
59:f0:08:68:75:11:4f:a3:9a:a5:71:92:d3:72:19:98:ab:cb:
14:f7:89:f2:f2:cd:6a:21:5d:9b:3a:f1:9a:ac:68:31:a4:3d:
57:b9:8a:0b:dd:09:35:a1:20:67:2d:c6:5a:04:ce:a8:4b:2d:
d3:1d:ed:c2:c3:86:0b:e2:1f:08:62:13:89:e3:d6:55:92:89:
b9:3b:1a:7d:24:f7:cc:cd:5b:d6:b5:21:db:c1:bb:c4:c7:50:
57:a6:4b:67:3c:e0:26:56:f4:e3:de:61:d6:0f:e1:cf:68:d1:
7b:c2:b4:f1:0b:6b:cc:3d:ea:c0:9c:9d:ca:43:9a:e2:32:01:
0d:8d:64:eb:b2:bb:25:96:ea:21:77:53:3b:8e:1a:1a:ba:72:
09:bd:f6:f2:ce:21:a8:02:3d:64:65:aa:3c:35:a6:a4:39:70:
06:1d:f5:11:3b:28:de:47:75:8f:bd:85:b2:a8:8c:26:e9:cf:
18:4f:c5:c6:28:7a:cf:96:d9:13:98:aa:ec:8b:a9:19:2d:fc:
44:d1:01:f2:23:8e:b1:1c:b2:bd:ea:b8:72:58:70:08:f0:97:
ef:d1:f2:35:b7:e1:36:06:bc:23:18:69:11:d3:c1:4a:4e:db:
f6:64:48:17
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFQjA5RTlEQTFENEE1
MDhBMEUxMTQ5MkFDNDQ5OTAwNDFGNzk1NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+I+tfe4zv/A5EHytdvy9J+xm/a0BUYl2JTTGujTBZxWjWeorI
IvOjkoMqlMFJLoPJMo4xKReTWyYI5QdWVEBOo0tY22yYy/K1ICQykIJHNc1DWGbu
mQOZahHhqXsdn3m97cEB5OvMGwwu9yreW41faYkvRQt5M9DZThgQJnQOVCB5oLeD
XMkpxHJ+CbmM3vvJCBpv6UEFE4J2crfWWFPgsWA+QWpWxQvfchTt0z4WXPNy4hlg
lHqPOu99bdBqKDjhuZ3aBYPCDZa3/6zM1lRuLiyp6O6GGS5wm82WTUbIukQ9M49O
q3KUR1BCIpIL7n8v3m/RW9LLNzkym3WYfI6JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU3rCenaHUpQig4RSSrESZAEH3lUwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzNyQ2VuYUhVcFFpZzRSU1NyRVNaQUVIM2xVdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEb5mAwDQYJKoZIhvcNAQELBQADggEB
AD6C1Di2gF2+Mbqj/0ceOxH/nVnwCGh1EU+jmqVxktNyGZiryxT3ifLyzWohXZs6
8ZqsaDGkPVe5igvdCTWhIGctxloEzqhLLdMd7cLDhgviHwhiE4nj1lWSibk7Gn0k
98zNW9a1IdvBu8THUFemS2c84CZW9OPeYdYP4c9o0XvCtPELa8w96sCcncpDmuIy
AQ2NZOuyuyWW6iF3UzuOGhq6cgm99vLOIagCPWRlqjw1pqQ5cAYd9RE7KN5HdY+9
hbKojCbpzxhPxcYoes+W2ROYquyLqRkt/ETRAfIjjrEcsr3quHJYcAjwl+/R8jW3
4TYGvCMYaRHTwUpO2/ZkSBc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:12 2026 by rpki-client