
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa
File: 3WVjC5G4YGChmiQH3qpb-MxuBz4.roa (raw, json)
Hash identifier: 9y53IEkAuPDEiLVpxJzHt/bCNBmCe4WSxmV/A/7JMpg=
Subject key identifier: DD:65:63:0B:91:B8:60:60:A1:9A:24:07:DE:AA:5B:F8:CC:6E:07:3E
Certificate issuer: /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Certificate serial: 03
Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa
Signing time: Thu 25 Jun 2026 02:47:51 +0000
ROA not before: Thu 25 Jun 2026 02:47:51 +0000
ROA not after: Thu 24 Jun 2027 01:12:55 +0000
asID: 16509
IP address blocks: 219.97.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Validity
Not Before: Jun 25 02:47:51 2026 GMT
Not After : Jun 24 01:12:55 2027 GMT
Subject: CN=DD65630B91B86060A19A2407DEAA5BF8CC6E073E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:ae:8e:03:aa:94:22:57:0b:03:6e:8e:69:
5c:8a:4e:ad:97:7e:b1:12:b2:fc:bd:1b:64:d0:aa:
a0:26:64:1d:6b:de:93:4b:91:ab:4f:29:16:93:eb:
dc:1e:1b:0e:48:fd:7b:67:ef:4f:c8:76:97:24:f2:
8b:03:80:c0:3d:38:a6:b7:3f:f3:b6:f0:b4:e6:e1:
c0:ad:de:ba:64:43:02:69:86:45:c8:77:78:e6:06:
e9:0e:4b:de:fc:c0:9d:ec:c4:c1:9c:7e:11:6c:a7:
1f:d9:7c:9b:8b:a1:3a:65:dd:bf:e4:e4:c0:eb:63:
6b:f4:d6:f9:f5:9a:c4:dc:75:f8:14:fb:2b:88:a2:
8b:ae:97:c6:0f:dd:f4:2c:1a:7e:22:81:a1:77:bf:
31:aa:a6:d2:42:8d:db:64:61:de:92:21:cc:fb:c8:
b8:1e:37:5e:ea:bd:6d:de:ab:86:d0:dc:c8:8b:fe:
8d:db:77:1b:d5:03:66:60:33:1b:da:bc:86:a6:59:
18:34:b6:3c:5c:61:e4:0e:f6:ea:d3:14:66:42:1f:
ce:77:28:24:f9:2a:7f:41:66:cc:02:c4:9c:32:b8:
ed:af:b3:01:c5:33:c6:09:74:95:64:c7:79:66:e4:
61:9e:a8:69:da:13:3a:67:cf:89:97:91:ae:f7:2d:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:63:0B:91:B8:60:60:A1:9A:24:07:DE:AA:5B:F8:CC:6E:07:3E
X509v3 Authority Key Identifier:
keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa
sbgp-ipAddrBlock: critical
IPv4:
219.97.104.0/21
Signature Algorithm: sha256WithRSAEncryption
77:d4:18:4c:5b:3c:1b:44:de:2e:58:90:15:d1:45:f9:2a:39:
33:c0:ac:fb:d6:d1:74:ad:5e:99:e9:b0:5d:af:38:94:fa:ba:
d7:3e:4c:bc:63:68:95:e4:0b:84:be:9a:8b:7a:00:44:5c:6c:
33:16:4e:85:b4:cf:8e:89:0e:a2:39:ad:7a:fe:09:79:40:13:
a6:b6:06:37:2b:1e:3f:e9:b0:09:c9:be:bc:29:bc:7f:90:a6:
49:97:ed:0d:76:75:63:af:45:8b:2c:10:20:34:e3:41:40:c6:
c8:76:86:48:79:b0:5b:70:10:83:7d:45:3d:a8:db:72:3b:4f:
2c:1d:5e:c7:44:f9:50:a1:69:f1:4c:fb:11:a7:4c:f4:ba:6c:
a5:28:39:6b:73:ea:2d:be:b0:c9:0e:e8:2a:93:5a:47:e8:34:
31:17:af:6a:79:f0:ba:6b:2d:6a:03:c7:39:69:06:5a:10:fb:
21:96:9b:16:56:10:43:0f:e9:17:c5:90:b0:a2:1a:d5:1b:4c:
13:b5:b1:92:c1:e3:86:eb:62:55:93:29:e1:0e:41:b4:2f:4b:
c3:f7:91:28:c1:75:cb:ff:22:0d:8d:e5:41:7f:57:18:08:8f:
1c:1d:af:28:67:5d:9c:b2:c2:7d:68:a4:30:d2:8d:41:8d:43:
8f:1b:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:19:49 2026 by rpki-client