
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa
File: PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa (raw, json)
Hash identifier: cgs9MWWnuZ/m7YKIj72fP+27Rs2ZtSc4GVHCYKCkyy8=
Subject key identifier: 3C:A7:EC:DC:56:E9:24:50:EE:2B:80:98:5E:53:22:28:E4:88:62:3D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 021B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa
Signing time: Tue 31 Mar 2026 07:35:43 +0000
ROA not before: Tue 31 Mar 2026 07:35:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 220.156.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3CA7ECDC56E92450EE2B80985E532228E488623D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:81:90:89:1c:14:6f:3b:b5:97:3a:2b:b1:
45:dd:25:f8:d2:02:3c:27:08:34:5f:c8:70:23:d2:
fe:a5:a8:7b:21:46:2c:a8:d3:e7:94:ae:de:67:45:
56:7d:c0:a8:29:fe:e0:65:0b:5b:9a:b8:18:4a:52:
87:e6:19:5d:98:26:e6:cb:7a:86:d0:d2:3b:fb:64:
c2:f8:4a:4a:97:f0:9e:31:15:e5:c1:5b:5d:91:4c:
80:19:62:e9:ce:db:32:d5:20:c8:08:eb:e2:08:36:
82:09:7b:ef:a8:c1:a7:e0:6f:3f:09:fe:93:ad:ad:
e6:cb:27:c5:a4:53:c2:bc:0b:01:fb:5e:e4:c2:81:
4d:1c:36:c4:fe:d5:12:66:87:45:6f:b1:56:d7:21:
93:cd:6b:e7:64:bd:83:cd:9f:27:af:ad:2d:4c:5f:
6e:d1:1e:b6:0c:09:b0:10:a0:ab:2b:3a:1a:c8:c0:
d0:94:c8:7f:2f:9e:c0:cc:fe:f8:95:70:4c:48:ac:
bb:0f:f0:6b:17:a0:b5:f2:ea:36:af:69:2f:b7:43:
a7:df:07:50:07:79:61:bc:ea:8b:30:46:f0:06:18:
ef:43:b2:f1:df:5d:7e:88:67:3c:d5:13:28:e5:55:
dc:74:78:24:92:48:6c:10:c8:55:55:5c:45:4c:d6:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:EC:DC:56:E9:24:50:EE:2B:80:98:5E:53:22:28:E4:88:62:3D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.156.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:c7:52:eb:f9:03:17:4c:3e:93:b5:9d:c6:bb:31:69:77:7e:
e8:74:1c:e5:5b:c1:32:b4:f4:ec:e3:24:9d:5d:72:f2:9c:35:
76:7a:37:e4:05:98:b7:c6:49:c3:c9:32:40:f9:16:00:f1:cf:
67:71:b1:56:d0:1a:77:03:93:8c:68:44:aa:6f:77:7f:d5:b9:
31:42:3e:fb:23:aa:98:aa:d5:45:f1:02:5b:24:1f:62:02:c5:
75:32:21:3a:b0:83:a9:f8:6b:f2:26:0c:f0:0d:ba:ec:8e:74:
43:37:c8:59:e1:69:e3:b8:bb:9a:77:4b:f7:07:f8:09:e0:6f:
20:99:48:3c:87:a9:24:1a:69:f7:a0:ac:c6:87:53:69:e1:bd:
44:d8:ae:ac:51:eb:f7:11:ec:a4:7d:c8:9c:c2:0e:08:ce:e1:
f4:3d:a8:42:8d:18:5f:24:3d:96:cf:9e:e8:ea:9b:2a:42:5a:
f3:47:90:aa:75:63:b6:9d:c6:34:02:e0:75:01:87:ed:34:43:
fe:bd:18:3a:26:b2:bf:f4:72:71:4a:d9:5f:59:da:7a:ec:3d:
0e:0a:80:0a:71:9a:8f:38:90:3a:b2:bc:44:39:d5:10:32:5b:
c5:02:cd:44:ad:41:63:56:6d:cb:75:56:2c:63:16:46:80:4e:
66:23:93:10
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM1NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDQTdFQ0RDNTZFOTI0
NTBFRTJCODA5ODVFNTMyMjI4RTQ4ODYyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpPYGQiRwUbzu1lzorsUXdJfjSAjwnCDRfyHAj0v6lqHshRiyo
0+eUrt5nRVZ9wKgp/uBlC1uauBhKUofmGV2YJubLeobQ0jv7ZML4SkqX8J4xFeXB
W12RTIAZYunO2zLVIMgI6+IINoIJe++owafgbz8J/pOtrebLJ8WkU8K8CwH7XuTC
gU0cNsT+1RJmh0VvsVbXIZPNa+dkvYPNnyevrS1MX27RHrYMCbAQoKsrOhrIwNCU
yH8vnsDM/viVcExIrLsP8GsXoLXy6javaS+3Q6ffB1AHeWG86oswRvAGGO9DsvHf
XX6IZzzVEyjlVdx0eCSSSGwQyFVVXEVM1ih3AgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUPKfs3FbpJFDuK4CYXlMiKOSIYj0wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvUEtmczNGYnBKRkR1SzRDWVhsTWlLT1NJWWowLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBdycgDANBgkqhkiG9w0BAQsFAAOCAQEAX8dS
6/kDF0w+k7WdxrsxaXd+6HQc5VvBMrT07OMknV1y8pw1dno35AWYt8ZJw8kyQPkW
APHPZ3GxVtAadwOTjGhEqm93f9W5MUI++yOqmKrVRfECWyQfYgLFdTIhOrCDqfhr
8iYM8A267I50QzfIWeFp47i7mndL9wf4CeBvIJlIPIepJBpp96CsxodTaeG9RNiu
rFHr9xHspH3InMIOCM7h9D2oQo0YXyQ9ls+e6OqbKkJa80eQqnVjtp3GNALgdQGH
7TRD/r0YOiayv/RycUrZX1naeuw9DgqACnGajziQOrK8RDnVEDJbxQLNRK1BY1Zt
y3VWLGMWRoBOZiOTEA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:04 2026 by rpki-client