
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/3hLXtEt5niuD4K4NbdaL0Sq1aUU.roa
File: 3hLXtEt5niuD4K4NbdaL0Sq1aUU.roa (raw, json)
Hash identifier: CzsnRpZLCdyBRQF8DiFQMLJz1JvfroiNxdD931vmY94=
Subject key identifier: DE:12:D7:B4:4B:79:9E:2B:83:E0:AE:0D:6D:D6:8B:D1:2A:B5:69:45
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 3C
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/3hLXtEt5niuD4K4NbdaL0Sq1aUU.roa
Signing time: Tue 31 Mar 2026 08:32:36 +0000
ROA not before: Tue 31 Mar 2026 08:32:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18283
IP address blocks: 101.50.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: Mar 31 08:32:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DE12D7B44B799E2B83E0AE0D6DD68BD12AB56945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:06:c7:96:09:61:dc:2a:1b:f0:21:8e:41:
24:a3:27:7f:2c:ca:c6:ff:c2:ad:7a:7f:f9:b5:67:
2a:d5:9d:4b:22:7f:b0:c6:98:a0:ed:43:e4:3d:84:
ac:28:7b:5e:88:78:5c:64:34:71:67:98:97:fe:c8:
57:98:cd:c1:3f:77:21:58:14:4b:6f:9a:84:f5:b5:
e1:01:af:7f:db:27:50:a2:79:4d:7b:b4:ab:24:79:
9b:4b:6a:47:fd:ab:25:26:33:c4:48:60:51:44:7f:
15:af:21:5c:0a:6b:20:cd:8e:b2:37:6d:f6:5d:32:
48:1b:4f:5f:f0:09:d3:6f:80:e5:22:e9:de:d9:a5:
ee:38:81:61:32:9b:c1:42:ca:01:19:f1:ea:70:8f:
0c:2b:74:61:dd:16:e5:b0:4a:49:37:04:66:2f:a8:
b8:ab:65:4c:26:ea:e2:9d:7d:4b:b6:2d:c5:aa:7f:
39:d8:73:df:6d:af:3f:ad:b2:d9:47:88:1a:71:67:
58:23:e4:8f:5f:92:7c:38:85:15:06:f8:04:f0:91:
19:fe:da:a0:44:ac:3b:d4:f2:6d:e4:ef:e0:49:64:
11:56:67:89:68:c8:a2:82:6a:aa:b1:30:11:80:dc:
6d:32:58:68:f7:57:08:9e:e6:7f:3d:2d:65:b1:b5:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:D7:B4:4B:79:9E:2B:83:E0:AE:0D:6D:D6:8B:D1:2A:B5:69:45
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/3hLXtEt5niuD4K4NbdaL0Sq1aUU.roa
sbgp-ipAddrBlock: critical
IPv4:
101.50.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a3:66:6f:e3:90:9a:9a:c1:a6:71:fa:3a:af:42:36:7b:9f:
46:67:14:67:6b:87:18:86:65:52:24:c2:81:2a:b4:19:09:66:
bf:05:05:cb:84:72:77:a0:40:95:b3:42:27:0c:d8:98:4c:06:
db:cf:51:de:c8:52:a9:6c:2f:32:48:25:ad:0e:2a:9c:5d:6f:
e8:00:bf:8d:da:dc:4c:36:d8:59:fe:c4:a7:e3:60:3e:52:00:
1f:b9:18:99:fc:e5:ae:67:e9:d1:d3:7c:4c:b1:76:df:71:98:
11:b7:21:d1:de:00:c2:dd:a9:dd:03:e9:5d:c9:d7:e5:51:09:
7f:fc:a3:1f:98:22:b1:b8:5d:ca:cc:af:e9:8a:a3:64:6b:c2:
99:ee:8f:03:6b:fc:bd:36:96:52:4d:56:0a:e9:d8:3c:b2:f4:
0b:82:cb:08:da:82:2c:8c:fc:b9:6f:d5:cb:f4:fc:31:07:34:
53:2c:29:b5:71:6f:34:6c:97:0f:e1:87:06:bc:b5:84:f1:6d:
b9:5d:da:ff:7a:26:ae:e3:01:90:86:e4:77:01:5c:66:75:58:
54:cc:ab:1a:98:c3:11:5a:d7:96:6c:26:6b:d3:72:8c:76:6d:
5b:b0:14:f5:87:61:bc:9e:d7:ae:b3:e9:ac:6c:eb:c0:82:83:
94:e9:fa:45
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC
QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMzMTA4
MzIzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREUxMkQ3QjQ0Qjc5OUUy
QjgzRTBBRTBENkRENjhCRDEyQUI1Njk0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKuBBseWCWHcKhvwIY5BJKMnfyzKxv/CrXp/+bVnKtWdSyJ/sMaY
oO1D5D2ErCh7Xoh4XGQ0cWeYl/7IV5jNwT93IVgUS2+ahPW14QGvf9snUKJ5TXu0
qyR5m0tqR/2rJSYzxEhgUUR/Fa8hXAprIM2Osjdt9l0ySBtPX/AJ02+A5SLp3tml
7jiBYTKbwULKARnx6nCPDCt0Yd0W5bBKSTcEZi+ouKtlTCbq4p19S7Ytxap/Odhz
322vP62y2UeIGnFnWCPkj1+SfDiFFQb4BPCRGf7aoESsO9TybeTv4ElkEVZniWjI
ooJqqrEwEYDcbTJYaPdXCJ7mfz0tZbG1rQUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTeEte0S3meK4Pgrg1t1ovRKrVpRTAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9
n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4
TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MDcvM2hMWHRFdDVuaXVENEs0TmJkYUwwU3ExYVVVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmUyKDANBgkqhkiG9w0BAQsFAAOCAQEA
W6Nmb+OQmprBpnH6Oq9CNnufRmcUZ2uHGIZlUiTCgSq0GQlmvwUFy4Ryd6BAlbNC
JwzYmEwG289R3shSqWwvMkglrQ4qnF1v6AC/jdrcTDbYWf7Ep+NgPlIAH7kYmfzl
rmfp0dN8TLF233GYEbch0d4Awt2p3QPpXcnX5VEJf/yjH5gisbhdysyv6YqjZGvC
me6PA2v8vTaWUk1WCunYPLL0C4LLCNqCLIz8uW/Vy/T8MQc0UywptXFvNGyXD+GH
Bry1hPFtuV3a/3omruMBkIbkdwFcZnVYVMyrGpjDEVrXlmwma9NyjHZtW7AU9Ydh
vJ7XrrPprGzrwIKDlOn6RQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:37 2026 by rpki-client