
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/3PpYy4AqZudfVYexefSW6oiu3E0.roa
File: 3PpYy4AqZudfVYexefSW6oiu3E0.roa (raw, json)
Hash identifier: ThoSSti/vagt9rV3DzExYxluB+FSiTnLrDPh9UWkaWU=
Subject key identifier: DC:FA:58:CB:80:2A:66:E7:5F:55:87:B1:79:F4:96:EA:88:AE:DC:4D
Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial: 65
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/3PpYy4AqZudfVYexefSW6oiu3E0.roa
Signing time: Tue 31 Mar 2026 07:40:43 +0000
ROA not before: Tue 31 Mar 2026 07:40:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24284
IP address blocks: 203.80.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Validity
Not Before: Mar 31 07:40:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DCFA58CB802A66E75F5587B179F496EA88AEDC4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:c8:be:55:ad:db:5e:70:c8:0a:c0:3f:c4:
dd:49:f0:2b:2c:2a:2d:31:97:29:e3:ec:37:a9:3e:
8a:7e:22:2b:d8:d0:85:45:22:61:3e:dd:e1:d7:76:
bd:22:7f:02:52:ef:cd:8b:ef:d2:5a:40:95:3c:31:
06:68:41:e5:94:04:f6:c7:5b:a9:8c:b1:7c:30:49:
22:a1:fb:04:1f:4d:1d:c3:4f:09:c5:c6:64:54:fa:
98:8a:17:d8:8a:21:dc:0b:b2:f5:b2:32:c0:36:4f:
06:81:99:09:b7:3d:01:f8:ab:19:02:61:cf:c7:62:
2b:31:b6:23:db:6c:e6:75:4d:82:57:b0:77:4a:13:
cc:5a:99:a9:dc:47:7f:89:4b:64:de:89:43:98:5b:
58:97:f7:37:2c:3c:3b:57:04:0d:92:39:9e:a3:b6:
06:54:f6:68:b2:c5:94:8c:e2:41:39:71:41:1d:c1:
16:cf:74:7f:24:8c:8d:d0:c6:ca:13:7d:50:56:73:
15:3e:8d:72:10:54:11:d3:d3:4a:e6:6f:37:e3:67:
36:c1:67:51:09:21:34:b2:2d:80:04:4d:11:88:6d:
9b:91:7f:d9:97:2d:50:b1:fb:4f:83:9a:1c:d2:7c:
12:8a:2d:cf:13:d2:1f:ab:bc:6b:21:02:3e:3e:e0:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:58:CB:80:2A:66:E7:5F:55:87:B1:79:F4:96:EA:88:AE:DC:4D
X509v3 Authority Key Identifier:
keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/3PpYy4AqZudfVYexefSW6oiu3E0.roa
sbgp-ipAddrBlock: critical
IPv4:
203.80.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:30:32:e4:a9:e0:3e:11:fc:54:54:5f:8d:27:b2:29:00:3c:
7e:6b:27:99:15:7b:4f:40:52:78:78:3f:8f:67:33:f6:09:f8:
03:89:ad:1a:5b:49:a3:b0:a8:fd:7e:49:c5:b2:90:19:ec:0e:
77:c5:dc:09:04:97:bd:e0:1a:9d:2f:2f:3f:ba:7f:cd:98:b1:
64:5f:d2:99:21:7a:9a:2a:e1:ab:18:2e:37:43:97:4c:c3:bb:
55:ae:a6:6f:63:e6:c3:ed:36:ba:47:ac:a8:c2:5d:43:be:a0:
7c:c9:85:fc:fd:04:3e:b6:11:06:2c:e1:98:77:07:13:62:8a:
15:86:d5:25:c9:49:97:2b:f6:75:9a:62:62:40:46:4a:5a:cb:
a2:06:4f:d3:e5:92:1c:82:71:81:f9:e0:fc:00:00:b3:81:d4:
47:49:fc:fd:7d:c3:4d:b2:fb:c4:34:13:17:e4:14:95:25:67:
72:70:77:dd:d6:09:92:6b:7b:6e:1d:c3:58:2f:44:31:d3:47:
73:e5:2e:b3:6e:ef:5f:a4:27:b9:9e:57:3e:98:94:0e:cf:e8:
19:81:fd:fc:1c:9d:b1:34:31:73:c2:47:8d:db:1a:00:01:5e:
dc:4c:1f:e4:7f:f7:c2:c7:98:86:35:f1:0d:56:35:81:e5:e9:
04:32:28:5d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4
NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI2MDMzMTA3
NDA0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRENGQTU4Q0I4MDJBNjZF
NzVGNTU4N0IxNzlGNDk2RUE4OEFFREM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMUZyL5VrdtecMgKwD/E3UnwKywqLTGXKePsN6k+in4iK9jQhUUi
YT7d4dd2vSJ/AlLvzYvv0lpAlTwxBmhB5ZQE9sdbqYyxfDBJIqH7BB9NHcNPCcXG
ZFT6mIoX2Ioh3Auy9bIywDZPBoGZCbc9AfirGQJhz8diKzG2I9ts5nVNglewd0oT
zFqZqdxHf4lLZN6JQ5hbWJf3Nyw8O1cEDZI5nqO2BlT2aLLFlIziQTlxQR3BFs90
fySMjdDGyhN9UFZzFT6NchBUEdPTSuZvN+NnNsFnUQkhNLItgARNEYhtm5F/2Zct
ULH7T4OaHNJ8EootzxPSH6u8ayECPj7gBjsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTc+ljLgCpm519Vh7F59JbqiK7cTTAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE
a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn
YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MjQvM1BwWXk0QXFadWRmVllleGVmU1c2b2l1M0UwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tQGDANBgkqhkiG9w0BAQsFAAOCAQEA
mjAy5KngPhH8VFRfjSeyKQA8fmsnmRV7T0BSeHg/j2cz9gn4A4mtGltJo7Co/X5J
xbKQGewOd8XcCQSXveAanS8vP7p/zZixZF/SmSF6mirhqxguN0OXTMO7Va6mb2Pm
w+02ukesqMJdQ76gfMmF/P0EPrYRBizhmHcHE2KKFYbVJclJlyv2dZpiYkBGSlrL
ogZP0+WSHIJxgfng/AAAs4HUR0n8/X3DTbL7xDQTF+QUlSVncnB33dYJkmt7bh3D
WC9EMdNHc+Uus27vX6QnuZ5XPpiUDs/oGYH9/BydsTQxc8JHjdsaAAFe3Ewf5H/3
wseYhjXxDVY1geXpBDIoXQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:56 2026 by rpki-client