
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5515/3AK8oI84yJeM41uiXmxnEOA2mjE.roa
File: 3AK8oI84yJeM41uiXmxnEOA2mjE.roa (raw, json)
Hash identifier: 3u3oZFpPMgId5OrkPkcvz3Rijwc1mZpL3omrfxGzdrw=
Subject key identifier: DC:02:BC:A0:8F:38:C8:97:8C:E3:5B:A2:5E:6C:67:10:E0:36:9A:31
Certificate issuer: /CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
Certificate serial: 3C
Authority key identifier: 52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/3AK8oI84yJeM41uiXmxnEOA2mjE.roa
Signing time: Tue 31 Mar 2026 08:18:17 +0000
ROA not before: Tue 31 Mar 2026 08:18:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131948
IP address blocks: 103.177.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
Validity
Not Before: Mar 31 08:18:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DC02BCA08F38C8978CE35BA25E6C6710E0369A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:d4:13:da:01:ac:23:05:ac:a5:31:b3:03:
1e:4a:d7:2e:a6:65:13:41:2c:2e:36:14:c9:19:66:
8b:41:dd:12:f5:8d:4f:63:0f:a5:6e:d2:6b:4c:dd:
4e:51:e7:c7:f5:44:36:83:16:85:2a:f8:79:b8:1b:
25:c4:2a:4f:a7:11:3e:41:65:45:27:69:4e:5b:8f:
74:4e:df:5b:06:95:35:ec:e9:30:30:6f:c6:f4:b2:
f8:73:79:a9:d6:4b:4e:bd:7d:e8:bf:8c:ab:f1:ec:
8d:b4:51:59:70:97:3f:6e:68:2b:7b:83:de:62:58:
79:14:97:71:d5:ee:6b:28:06:b4:ab:d1:9f:25:da:
bc:22:b1:4c:13:70:a5:79:db:8e:e4:93:11:27:fc:
28:94:42:c6:68:b0:99:39:34:e9:d6:92:09:8d:f9:
c8:de:33:ff:7b:65:86:bb:5e:97:e1:61:11:fb:07:
3c:4f:73:a9:9e:ec:b6:52:5b:8f:9f:35:69:53:35:
a1:e6:2b:52:4f:41:71:51:b8:cc:36:a0:31:47:63:
7a:af:41:eb:88:72:74:e6:7c:22:6a:7f:4d:c3:a6:
71:3e:c8:90:5f:89:c9:1e:af:f2:cf:02:d5:8a:3e:
0a:0a:ce:23:2b:9b:65:83:fe:73:40:95:d0:bf:ea:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:BC:A0:8F:38:C8:97:8C:E3:5B:A2:5E:6C:67:10:E0:36:9A:31
X509v3 Authority Key Identifier:
keyid:52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/3AK8oI84yJeM41uiXmxnEOA2mjE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.117.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b5:15:b6:15:12:2c:f5:94:fe:4b:50:ff:2f:91:71:3d:fb:
f8:7a:ed:b2:72:f7:77:b1:89:a0:1d:5c:f0:f2:00:83:a5:c7:
09:02:11:f0:4e:8e:97:28:e5:6f:00:88:8a:b1:69:cd:6a:cd:
cd:27:98:5f:70:a6:90:60:24:ef:c8:90:46:b3:10:71:ec:26:
1a:c2:c9:ce:e8:ba:46:cc:c8:48:49:88:2c:2b:4c:3b:7d:c1:
81:26:8b:ef:e9:e6:b9:21:07:9f:fb:dc:7b:35:f2:f1:95:38:
70:18:8a:90:0e:52:48:f2:92:e3:5a:6e:fc:9d:ad:09:52:70:
54:5b:23:98:90:b2:87:e7:b8:c3:e6:0d:0a:e1:d4:ce:46:d9:
be:c2:53:76:55:45:68:7b:6a:b8:05:e1:28:a1:72:39:09:4c:
6d:a1:59:3e:33:8a:31:b5:f2:f2:0a:74:17:48:38:e8:78:17:
99:a3:f8:fb:00:46:95:67:72:de:c1:fb:07:0d:6a:30:ed:61:
f0:72:66:d2:b1:b0:96:a7:66:9f:5e:1d:9a:5d:94:8f:9a:9e:
bb:2b:16:97:d1:07:46:f2:be:7f:57:9d:c7:42:6f:62:51:38:
13:f5:11:9b:92:c6:94:1b:77:e5:43:60:ae:39:48:18:7c:70:
91:55:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:12 2026 by rpki-client