
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa
File: 3UL6h774xNCR-PrZS8-E3y_qKq4.roa (raw, json)
Hash identifier: NNgP0iDJsq8fgYNaAUZtCe8xjUjlpRH63t7E5Q3M73w=
Subject key identifier: DD:42:FA:87:BE:F8:C4:D0:91:F8:FA:D9:4B:CF:84:DF:2F:EA:2A:AE
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 3A
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa
Signing time: Tue 31 Mar 2026 08:38:19 +0000
ROA not before: Tue 31 Mar 2026 08:38:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23831
IP address blocks: 103.6.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Mar 31 08:38:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DD42FA87BEF8C4D091F8FAD94BCF84DF2FEA2AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:9b:a8:1c:dc:00:77:fd:aa:d1:c6:a6:dd:
64:66:3c:4b:6f:48:5e:5d:4c:a1:80:b5:40:f4:e3:
c1:00:dd:48:31:f6:b8:8e:4d:65:a8:a3:8b:16:4e:
47:b8:13:45:71:e5:9e:2f:ac:2d:9d:25:b4:6e:5e:
27:ba:01:79:1f:8b:71:ef:7b:e8:88:4b:a2:c7:be:
69:36:7d:e5:9a:90:15:39:dc:35:77:f2:e8:cd:42:
1a:80:77:89:27:5a:e6:ee:a8:85:cb:94:ea:83:36:
3d:fc:1f:ab:14:3f:13:f8:35:1d:c1:bf:5c:c3:8f:
28:aa:6b:a6:47:cf:31:b1:d3:87:5e:ba:db:8c:47:
6b:ca:36:d3:31:6c:08:1c:e3:4a:3e:14:fa:80:34:
33:e2:51:1a:6f:9c:3c:a4:ba:af:79:d3:a5:7b:f5:
45:e8:85:b7:25:a0:8b:e8:44:d0:7f:60:d7:ed:b1:
f4:9c:94:af:25:03:ea:dd:cf:59:e6:e4:99:37:93:
ab:d5:dc:11:cd:ca:2a:92:c2:02:8d:26:f3:6a:5f:
de:d3:e7:fd:d9:6e:2e:d1:08:18:3b:a4:63:0a:80:
b6:0c:e3:dc:93:6a:f5:dd:40:c6:e3:47:37:9c:1e:
b9:d9:72:61:9c:24:d8:e8:fe:1e:b1:c7:8b:85:b1:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:FA:87:BE:F8:C4:D0:91:F8:FA:D9:4B:CF:84:DF:2F:EA:2A:AE
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
98:bf:2f:7f:6c:1b:0b:d6:17:22:d3:55:0c:9a:8f:68:ae:56:
39:87:38:d3:52:2c:db:01:d2:bf:26:d6:d1:be:55:e0:ed:a3:
0c:60:ab:de:a6:19:2e:75:58:00:1c:02:ae:67:97:d6:92:3c:
b5:96:55:cc:e9:e2:a9:bc:ac:48:55:e0:26:2d:9c:29:cd:b7:
62:7f:b9:24:e9:f4:a5:dc:63:1c:d3:6c:3b:bf:a1:28:fa:cd:
66:10:1e:de:b9:35:3c:3c:2e:be:3a:92:26:8b:44:68:3b:40:
be:90:22:38:c8:79:2d:5d:41:66:1e:00:7f:d0:87:ba:31:01:
0e:1e:90:e2:b1:49:0d:de:3b:bb:58:71:b5:95:c3:c9:c7:f8:
6a:82:f2:71:e6:8d:67:57:8d:e1:95:f5:71:bb:06:3f:4e:94:
11:c6:60:4c:7a:e3:19:50:42:da:e4:43:0c:06:98:a2:bd:42:
13:1e:b8:83:f2:90:c6:20:8f:4f:92:79:04:e7:25:8d:ef:06:
6a:8e:7d:cb:79:ea:71:78:d0:fe:3f:2f:0e:04:45:9b:74:f4:
e6:09:30:b9:d7:80:23:53:99:7a:44:89:70:7b:69:b1:16:5c:
ea:a4:08:92:95:ba:42:cd:7b:14:a7:08:95:2d:72:36:4b:cf:
c2:08:fa:31
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI2MDMzMTA4
MzgxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREQ0MkZBODdCRUY4QzRE
MDkxRjhGQUQ5NEJDRjg0REYyRkVBMkFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMESm6gc3AB3/arRxqbdZGY8S29IXl1MoYC1QPTjwQDdSDH2uI5N
ZaijixZOR7gTRXHlni+sLZ0ltG5eJ7oBeR+Lce976IhLose+aTZ95ZqQFTncNXfy
6M1CGoB3iSda5u6ohcuU6oM2PfwfqxQ/E/g1HcG/XMOPKKprpkfPMbHTh16624xH
a8o20zFsCBzjSj4U+oA0M+JRGm+cPKS6r3nTpXv1ReiFtyWgi+hE0H9g1+2x9JyU
ryUD6t3PWebkmTeTq9XcEc3KKpLCAo0m82pf3tPn/dluLtEIGDukYwqAtgzj3JNq
9d1AxuNHN5weudlyYZwk2Oj+HrHHi4WxmzECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTdQvqHvvjE0JH4+tlLz4TfL+oqrjAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84NzMvM1VMNmg3NzR4TkNSLVByWlM4LUUzeV9xS3E0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcGEDANBgkqhkiG9w0BAQsFAAOCAQEA
mL8vf2wbC9YXItNVDJqPaK5WOYc401Is2wHSvybW0b5V4O2jDGCr3qYZLnVYABwC
rmeX1pI8tZZVzOniqbysSFXgJi2cKc23Yn+5JOn0pdxjHNNsO7+hKPrNZhAe3rk1
PDwuvjqSJotEaDtAvpAiOMh5LV1BZh4Af9CHujEBDh6Q4rFJDd47u1hxtZXDycf4
aoLyceaNZ1eN4ZX1cbsGP06UEcZgTHrjGVBC2uRDDAaYor1CEx64g/KQxiCPT5J5
BOclje8Gao59y3nqcXjQ/j8vDgRFm3T05gkwudeAI1OZekSJcHtpsRZc6qQIkpW6
Qs17FKcIlS1yNkvPwgj6MQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client