
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa
File: 3r_gZlZwMoqvSouCk2aQAdsrZyo.roa (raw, json)
Hash identifier: XSZLFQJAHx2+syV7X7opTGOOgcoeNZ9WqcuKbMuL+4Y=
Subject key identifier: DE:BF:E0:66:56:70:32:8A:AF:4A:8B:82:93:66:90:01:DB:2B:67:2A
Certificate issuer: /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial: 15
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa
Signing time: Mon 03 Aug 2026 06:34:46 +0000
ROA not before: Mon 03 Aug 2026 06:34:46 +0000
ROA not after: Tue 03 Aug 2027 00:26:42 +0000
asID: 131965
IP address blocks: 202.237.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Validity
Not Before: Aug 3 06:34:46 2026 GMT
Not After : Aug 3 00:26:42 2027 GMT
Subject: CN=DEBFE0665670328AAF4A8B8293669001DB2B672A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:4a:7f:be:ef:3b:8b:0e:cd:06:1c:32:5c:
7a:bd:5b:ab:84:e4:85:64:d0:ec:d0:c8:32:4f:6b:
91:85:da:01:1a:6a:96:cc:c1:11:7c:12:8a:da:a9:
06:30:2f:d7:98:86:35:af:fa:c9:68:ca:9c:e1:19:
20:14:2c:db:43:4a:fc:d8:83:b9:f4:be:90:51:ec:
f1:09:ca:2f:ca:4e:bf:fa:2e:63:fd:ad:d9:f4:c0:
42:7e:21:31:9f:d3:2f:04:b9:06:b2:c9:02:24:e3:
5f:8d:ff:75:ae:d2:69:49:fd:8a:03:63:85:00:6d:
fc:93:85:17:75:7d:6e:6b:95:65:98:c8:9c:a8:85:
18:26:b4:4e:0a:49:9d:8d:9e:81:96:56:50:b2:cd:
ac:2d:4c:77:ef:ea:65:87:e1:bb:42:fe:2a:a3:5f:
69:4f:80:84:ba:68:5a:82:8b:fc:38:61:a3:26:62:
d7:76:c6:49:d5:42:8b:ec:eb:3e:19:2d:a5:5c:30:
9c:e3:b3:4f:c6:07:00:91:7c:f4:31:a7:f9:34:c8:
5c:c3:32:d4:fb:92:34:da:36:18:ff:ea:5a:9d:e8:
39:aa:4b:99:fd:3a:fb:a2:f4:49:24:8f:1d:b8:65:
7a:c5:5f:ae:e6:4c:b4:f1:f3:dd:76:c2:66:54:3a:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:E0:66:56:70:32:8A:AF:4A:8B:82:93:66:90:01:DB:2B:67:2A
X509v3 Authority Key Identifier:
keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.237.154.0/24
Signature Algorithm: sha256WithRSAEncryption
44:89:91:05:1d:0e:6a:bc:8e:15:27:58:35:ce:78:2c:f8:e9:
7d:1f:c7:bd:d8:22:9a:9f:94:cc:86:87:e3:6d:e2:cf:78:8f:
b9:d6:13:7a:89:d7:ff:e6:ca:6d:52:ae:08:a6:6a:e7:e0:f2:
a3:93:aa:92:10:c9:20:85:13:c1:86:af:e2:cd:09:f6:43:14:
00:38:ab:b3:ea:62:90:06:7f:0d:ce:93:5b:c7:ea:4e:19:b6:
c4:98:b5:30:ce:76:0e:97:62:5e:61:5f:a3:fa:82:a3:26:f4:
ab:6d:f8:b8:9f:b9:26:2f:54:48:cd:46:9d:b8:f2:60:93:0c:
0f:57:2e:d0:7f:8a:55:d0:b6:84:f9:fa:0d:59:19:23:3e:9c:
47:11:36:3b:22:ed:1c:33:b6:31:19:46:e0:c8:90:00:b3:e9:
85:05:28:3f:63:4f:e1:ea:1a:1d:5c:f4:0b:8f:ee:02:fe:bb:
51:3c:11:2d:cf:85:c3:c0:d1:f2:02:bf:4d:af:10:9e:05:51:
13:0e:d1:98:72:9d:37:48:03:c0:bd:63:ca:c2:f2:f9:fc:c5:
e8:2a:43:6d:cb:12:1c:94:a6:39:56:f5:7e:98:2c:e1:68:b8:
e5:bc:e1:2e:e4:f1:1b:41:d4:14:6c:8d:30:75:a3:d7:26:67:
9e:d1:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:27:31 2026 by rpki-client