
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3CaBn3U0Wt3vqmtvFc1QFEuCPMk.roa
File: 3CaBn3U0Wt3vqmtvFc1QFEuCPMk.roa (raw, json)
Hash identifier: GWL2tuU59WZYHVSeccD1W31QLBGwqYNmaUpg0bhuFOM=
Subject key identifier: DC:26:81:9F:75:34:5A:DD:EF:AA:6B:6F:15:CD:50:14:4B:82:3C:C9
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: A3
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3CaBn3U0Wt3vqmtvFc1QFEuCPMk.roa
Signing time: Tue 31 Mar 2026 07:48:52 +0000
ROA not before: Tue 31 Mar 2026 07:48:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23816
IP address blocks: 103.2.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Mar 31 07:48:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DC26819F75345ADDEFAA6B6F15CD50144B823CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:15:a4:b8:e3:c1:be:47:72:31:4c:d3:83:
3b:ec:35:1f:4b:6f:ef:fd:3c:5c:96:42:b6:f9:fe:
93:9f:f1:c9:b7:4c:9a:76:45:91:95:e8:09:9b:04:
ad:92:79:a6:0d:8a:30:50:16:33:af:95:a3:70:58:
ee:3a:43:d7:25:82:39:b5:47:6f:9c:9d:ba:86:f4:
68:a5:4b:ad:3b:5e:0f:5b:f4:74:11:ec:0a:cf:24:
a1:59:a8:fd:18:03:84:77:d5:e2:44:7b:58:be:df:
c2:4a:54:2a:61:98:27:9a:0a:aa:41:3a:95:65:af:
3e:88:77:22:c6:3b:4a:08:53:96:7d:9c:60:34:d0:
35:12:99:95:5d:2b:12:db:f3:8e:5f:96:3e:6a:9f:
11:c1:59:ae:de:3d:9f:64:ad:a4:b2:fa:61:94:68:
1f:6f:24:93:59:be:94:43:72:03:53:84:a8:5a:10:
95:9e:72:ea:ed:11:4b:3f:8d:46:4e:f4:5a:7d:04:
4e:f1:eb:12:13:a4:e7:e8:6d:bc:9f:91:84:c1:58:
b7:a2:ab:ac:73:cf:32:e0:9b:31:7b:b2:38:60:da:
80:18:63:37:3f:6f:c7:0b:9e:64:54:a5:ac:0f:30:
98:3a:6b:67:e7:e5:b6:db:f6:84:b6:35:6e:8c:cb:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:81:9F:75:34:5A:DD:EF:AA:6B:6F:15:CD:50:14:4B:82:3C:C9
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/3CaBn3U0Wt3vqmtvFc1QFEuCPMk.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.12.0/22
Signature Algorithm: sha256WithRSAEncryption
82:28:be:a9:3c:a2:02:0f:cf:4c:01:04:f5:9b:f0:bb:1b:22:
19:c1:79:85:99:c7:29:25:0c:dd:79:8f:ab:ec:4e:54:3c:cb:
c6:e5:03:c9:47:4a:a5:30:b2:55:45:3e:84:97:01:db:2e:0f:
45:be:2f:ec:d3:52:35:27:56:24:01:41:9c:8c:41:5a:bf:17:
8b:c3:9f:d1:14:c3:9d:ae:48:28:ed:c0:95:73:60:14:2f:34:
bc:a0:c3:98:d9:b5:9d:f9:24:68:06:3d:b9:4e:1c:33:6b:51:
a4:bb:66:8c:7a:72:01:ef:ad:d0:9a:b6:2f:af:ec:9e:14:44:
fd:f7:98:f8:1d:ee:84:e5:30:5c:0f:16:75:16:a3:72:8e:61:
12:9c:86:16:b3:31:e8:02:b9:67:30:13:e8:a5:17:22:36:31:
cc:3f:25:aa:b0:c9:55:77:49:19:62:78:13:f0:75:35:31:2c:
b6:cc:d9:33:f4:58:18:06:58:69:51:9b:68:80:c8:72:fd:8a:
ec:f3:3e:bb:ab:2f:85:6b:00:54:35:ad:a6:9d:3b:13:ac:f2:
15:2c:13:eb:47:51:3b:db:6a:b9:68:6a:da:90:29:dc:85:7c:
e9:de:31:90:e2:d1:23:f4:10:67:0d:2e:cc:61:54:ef:da:30:
cc:2b:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 23:09:39 2026 by rpki-client