
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/lf3HvYedaku3WAYB5h2dL_d_e84.roa
File: lf3HvYedaku3WAYB5h2dL_d_e84.roa (raw, json)
Hash identifier: Vsu/sgMLJZTinbGkYXtI0Rta/sSpUCLYEfDH6eiMBbg=
Subject key identifier: 95:FD:C7:BD:87:9D:6A:4B:B7:58:06:01:E6:1D:9D:2F:F7:7F:7B:CE
Certificate issuer: /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial: 2F
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/lf3HvYedaku3WAYB5h2dL_d_e84.roa
Signing time: Tue 31 Mar 2026 08:36:25 +0000
ROA not before: Tue 31 Mar 2026 08:36:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 45679
IP address blocks: 103.167.46.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
Validity
Not Before: Mar 31 08:36:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=95FDC7BD879D6A4BB7580601E61D9D2FF77F7BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:aa:9f:68:c9:41:8a:49:f8:37:51:17:8c:
37:20:73:b0:63:b2:86:ba:a5:1c:19:80:bb:fe:35:
57:10:13:3e:eb:40:aa:b3:68:2d:0c:ad:50:69:19:
1e:3d:61:b0:c7:41:3e:68:91:03:3d:de:6c:1b:63:
96:cc:e0:81:ed:08:0b:26:f0:95:23:7c:a5:64:63:
4d:dd:10:cb:ee:6a:98:a5:a5:63:ea:4d:11:ef:ed:
d3:71:d2:17:cc:a9:fe:d8:1b:34:ab:c9:8d:2a:b3:
65:c8:f2:2f:29:73:70:99:a4:aa:40:ab:08:31:ff:
ae:bc:56:ae:79:c8:3f:93:b7:a3:86:be:8c:50:a9:
6f:a7:5f:49:47:d7:2f:b4:af:f9:a6:56:a2:f2:5c:
d3:c3:69:68:f5:af:1b:69:ed:22:4d:42:fb:e7:bb:
d2:40:38:a8:96:a5:a1:3f:44:81:22:5a:65:bd:6c:
88:09:20:c7:65:0b:68:46:2c:55:0c:10:5d:1b:1c:
78:a4:fe:b6:a7:f9:f3:0e:2e:ab:57:23:37:be:55:
37:44:a6:ba:65:c9:d0:b2:f8:4f:8d:5b:99:3a:4d:
64:94:1c:86:69:dd:91:12:a4:f2:7c:03:07:8e:d8:
ec:1f:2e:24:d7:79:61:78:2e:44:41:08:ea:e8:0b:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:C7:BD:87:9D:6A:4B:B7:58:06:01:E6:1D:9D:2F:F7:7F:7B:CE
X509v3 Authority Key Identifier:
keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/lf3HvYedaku3WAYB5h2dL_d_e84.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.46.0/24
Signature Algorithm: sha256WithRSAEncryption
64:48:bd:12:e9:f2:e0:16:cb:de:99:9f:72:f0:28:5a:dd:6f:
57:b6:f6:69:81:d7:17:37:c0:24:92:c8:68:09:58:3e:5c:77:
fb:26:bf:d1:8f:dd:4a:6b:07:0f:9c:b0:47:2a:10:c4:38:69:
2d:19:a8:76:ee:ed:3b:34:79:1e:4e:7c:6f:46:de:8d:1d:ac:
4e:83:29:62:d6:56:53:07:4e:c9:67:89:20:df:fe:4c:02:64:
0e:1f:37:cb:f1:f2:7d:61:1d:1d:a9:b3:80:fb:e4:c1:cb:39:
d5:49:09:12:96:a4:86:43:66:2d:65:3f:d2:83:10:f0:79:88:
ff:5b:ad:b6:ae:88:eb:68:81:6e:f9:67:58:70:0d:6f:c4:45:
be:2e:0f:0a:0a:bc:c3:55:62:00:60:60:69:18:60:bb:e4:6c:
b6:15:5c:7c:a8:81:ce:c8:69:39:34:c9:c8:5d:59:b5:0a:fe:
d7:2e:b1:58:1f:b1:c0:25:84:da:0f:ee:d2:a6:83:b8:70:a7:
ce:7f:0b:08:46:e3:53:58:e0:c4:fa:27:26:de:38:e7:21:10:
0f:00:0a:65:a0:f4:81:c6:99:b2:aa:d0:07:95:65:2d:22:74:
49:ab:0e:a8:aa:79:9a:b3:b1:a5:1d:c0:30:2c:97:7b:ec:17:
a9:31:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:16 2026 by rpki-client