
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20295/3qLFDPbJGTCJL64t4pEsSLN90gQ.roa
File: 3qLFDPbJGTCJL64t4pEsSLN90gQ.roa (raw, json)
Hash identifier: /WP7IWsAI8zYwVy99/JxVlA/zpzb7dPVwGMgfG7V4BQ=
Subject key identifier: DE:A2:C5:0C:F6:C9:19:30:89:2F:AE:2D:E2:91:2C:48:B3:7D:D2:04
Certificate issuer: /CN=66E704038D2265B5B15E5BAD196BD9C390F40A17
Certificate serial: 06
Authority key identifier: 66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/3qLFDPbJGTCJL64t4pEsSLN90gQ.roa
Signing time: Sat 06 Jun 2026 11:40:26 +0000
ROA not before: Sat 06 Jun 2026 11:40:26 +0000
ROA not after: Thu 20 May 2027 06:31:08 +0000
asID: 138352
IP address blocks: 162.4.27.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66E704038D2265B5B15E5BAD196BD9C390F40A17
Validity
Not Before: Jun 6 11:40:26 2026 GMT
Not After : May 20 06:31:08 2027 GMT
Subject: CN=DEA2C50CF6C91930892FAE2DE2912C48B37DD204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:35:b0:5b:4e:17:01:81:2d:c0:7a:39:d4:
4f:c4:63:a2:7f:62:39:75:32:7e:8d:5c:ca:a1:00:
52:11:b1:46:9f:f3:4b:d9:d7:3c:29:ee:ff:d8:ee:
e2:13:16:43:98:40:bf:d2:de:50:c0:8d:e5:bb:38:
77:b6:36:4d:7c:b9:2d:a7:75:cb:81:76:d4:1d:08:
0a:91:63:f9:fc:fc:77:8f:22:0e:c1:54:68:da:8d:
5a:00:e9:57:01:3f:da:c3:bf:2c:33:0d:14:e6:9e:
04:85:15:db:88:b8:59:7b:2c:bd:84:3d:e8:7a:26:
93:5e:4e:a6:70:4a:73:50:ad:2c:ef:de:a1:c5:01:
eb:ce:ec:80:a3:33:76:0b:30:cb:1d:af:38:54:49:
42:05:84:97:7f:bc:3f:ec:e6:d0:30:fc:38:6f:29:
33:dc:7a:96:49:2f:02:ab:5e:c2:eb:c8:9d:b1:69:
ab:67:7c:df:fa:df:a8:42:4a:da:a9:8f:61:78:b4:
a2:54:cd:d2:cc:42:5e:d9:0b:f6:fb:6f:7e:b5:aa:
63:25:25:c2:ea:44:5e:22:14:20:6a:d1:57:ef:96:
fb:a3:8a:ac:76:59:0a:30:63:63:4a:bb:d4:ce:bd:
96:39:00:48:04:c6:71:dc:fa:07:67:68:1a:d2:22:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:C5:0C:F6:C9:19:30:89:2F:AE:2D:E2:91:2C:48:B3:7D:D2:04
X509v3 Authority Key Identifier:
keyid:66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/3qLFDPbJGTCJL64t4pEsSLN90gQ.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.27.0/24
Signature Algorithm: sha256WithRSAEncryption
64:32:d3:d3:7a:2f:2b:3b:67:b9:87:e7:1f:f7:66:94:94:99:
f8:91:f6:8a:c9:84:43:26:97:76:d2:79:7d:8f:e5:73:fc:a2:
c7:64:fd:8b:61:e7:d2:d9:a9:0f:36:c7:fb:26:49:f4:4e:ea:
ac:0b:b6:fa:bf:19:09:ac:65:5a:b1:8a:a0:99:28:3b:d7:f9:
8c:59:40:3e:18:47:fb:3b:80:57:52:d8:a5:68:72:e1:bb:33:
7b:ce:85:06:87:7e:77:1b:20:d0:e1:39:55:dc:5b:bb:0f:2e:
99:1b:29:27:04:e2:ec:49:9c:16:6c:5c:ce:95:fd:24:f5:36:
06:07:17:17:33:19:a2:86:1f:27:b9:37:f0:f8:3e:84:77:92:
49:32:f0:38:84:f1:78:37:21:df:24:01:d9:e1:17:44:9f:e8:
1a:35:6b:7a:04:3f:dd:96:48:e0:b3:fc:57:98:ab:fd:e7:bd:
26:36:50:39:ef:f3:ee:f5:50:1f:c8:9c:2b:ae:ae:8a:e0:04:
7e:e5:55:1b:8e:2d:15:51:20:d7:38:38:d2:2c:45:7d:5e:ad:
05:0e:3b:2e:f3:37:0c:08:7b:94:0e:5f:13:11:cd:38:a5:c1:
23:3a:b7:20:55:99:aa:c1:fb:ad:4f:da:4f:f1:c9:63:81:54:
80:45:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:56:03 2026 by rpki-client