
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa
File: 3vHw4MqDJkdC5SmWih0k4J7hgwg.roa (raw, json)
Hash identifier: 5hQQ9HE1kETQfw1FVQ6/sNi+hHKi4bl4ZT4B/PazhO4=
Subject key identifier: DE:F1:F0:E0:CA:83:26:47:42:E5:29:96:8A:1D:24:E0:9E:E1:83:08
Certificate issuer: /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial: 2F
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa
Signing time: Tue 31 Mar 2026 08:37:56 +0000
ROA not before: Tue 31 Mar 2026 08:37:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17529
IP address blocks: 2405:7000:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Validity
Not Before: Mar 31 08:37:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DEF1F0E0CA83264742E529968A1D24E09EE18308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:2b:a0:69:f7:3d:59:7f:ca:b0:d1:1d:d7:
b7:e5:ed:77:b0:b1:7b:32:c5:2f:94:94:8d:b8:85:
66:40:52:c7:80:87:07:dc:99:71:29:e3:d8:f6:df:
4e:7c:bb:56:2b:b4:71:29:c7:aa:ea:74:57:fd:a7:
86:f8:48:2c:f4:94:88:90:bd:ca:52:24:3c:e2:10:
45:50:f5:24:44:c7:a1:e9:fa:83:22:fa:5a:c4:6b:
c0:5d:8d:45:05:98:58:7e:02:9b:ee:86:fa:94:09:
56:50:a0:8b:40:93:73:d3:9a:5a:8c:4d:41:e1:01:
9a:48:be:ad:5c:0e:a2:9f:09:cb:22:70:8b:ee:64:
5d:cc:d9:5a:11:e4:61:45:2d:e9:88:1b:12:d1:c7:
fe:e7:49:0d:bb:b8:ad:bf:32:95:2c:0a:25:a5:85:
3c:4e:45:c8:26:d4:9d:e7:c6:58:79:b6:fc:8d:8e:
3e:f8:0b:9e:04:c8:8d:57:56:6d:0e:a7:cc:4a:59:
ab:4c:77:14:ee:9f:7f:78:96:47:cd:29:62:75:59:
d6:7b:f0:c5:05:1a:ae:92:8a:d7:a9:ba:c1:3e:9b:
f4:7b:c9:86:53:7b:6d:dd:a3:07:55:c5:9c:e0:f0:
48:b1:ce:0e:d5:64:7c:73:e3:af:d5:b8:c5:b9:13:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F1:F0:E0:CA:83:26:47:42:E5:29:96:8A:1D:24:E0:9E:E1:83:08
X509v3 Authority Key Identifier:
keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:7000:4000::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c8:6e:a5:23:33:20:4b:59:82:8e:8c:9e:3a:2c:fc:39:7e:
a6:be:05:e0:c0:bf:c8:00:29:da:b9:74:3b:c5:7c:f3:61:b1:
b7:14:41:22:0d:9d:7c:3d:dc:65:54:d3:ea:9c:d8:d6:e2:f6:
fd:a8:51:e4:eb:a2:2b:b5:ba:24:87:81:92:3f:72:a1:c3:66:
27:b8:0f:17:29:dd:d3:39:84:ce:88:e0:17:d1:a5:01:2d:a3:
f3:51:47:72:d6:0f:a5:86:ce:95:ef:d7:ac:62:72:00:ec:25:
70:61:a0:4f:7c:68:f6:36:ab:17:fe:c1:92:e2:77:98:59:33:
56:c3:cb:41:31:4d:f1:22:86:21:cd:c7:8e:bd:85:1a:21:d6:
6f:aa:41:1d:62:b3:21:79:1d:8f:30:f1:8a:0b:51:89:7c:c7:
3c:5f:92:97:99:ed:91:c0:e3:a0:14:b2:61:aa:e3:d7:08:71:
88:7b:13:44:bf:e1:c8:71:8c:d6:17:be:4f:54:5e:87:1f:c3:
b8:da:87:e9:cb:35:be:08:4f:59:a3:92:6c:5d:33:7d:1e:d6:
28:05:42:f8:81:86:34:d2:22:7e:a9:47:a8:d0:af:d9:a3:c8:
b5:da:a7:e2:56:32:d4:3a:9b:26:a4:96:c7:9a:d0:e2:dc:be:
e0:3b:2f:1a
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzA1
MjFBNUY3OEYzODA5QTRDNEYzNENCMzJEMEE2OTREODcxNTQ0MB4XDTI2MDMzMTA4
Mzc1NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREVGMUYwRTBDQTgzMjY0
NzQyRTUyOTk2OEExRDI0RTA5RUUxODMwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJoDK6Bp9z1Zf8qw0R3Xt+Xtd7CxezLFL5SUjbiFZkBSx4CHB9yZ
cSnj2PbfTny7Viu0cSnHqup0V/2nhvhILPSUiJC9ylIkPOIQRVD1JETHoen6gyL6
WsRrwF2NRQWYWH4Cm+6G+pQJVlCgi0CTc9OaWoxNQeEBmki+rVwOop8JyyJwi+5k
XczZWhHkYUUt6YgbEtHH/udJDbu4rb8ylSwKJaWFPE5FyCbUnefGWHm2/I2OPvgL
ngTIjVdWbQ6nzEpZq0x3FO6ff3iWR80pYnVZ1nvwxQUarpKK16m6wT6b9HvJhlN7
bd2jB1XFnODwSLHODtVkfHPjr9W4xbkTwvcCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBTe8fDgyoMmR0LlKZaKHSTgnuGDCDAfBgNVHSMEGDAWgBRTBSGl9484CaTE80yz
LQppTYcVRDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwODUvVXdVaHBmZVBPQW1reFBOTXN5MEthVTJIRlVRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVXdVaHBmZVBPQW1reFBOTXN5MEth
VTJIRlVRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDg1LzN2SHc0TXFESmtkQzVTbVdpaDBrNEo3aGd3Zy5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBXAAQAAwDQYJKoZIhvcNAQEL
BQADggEBAG7IbqUjMyBLWYKOjJ46LPw5fqa+BeDAv8gAKdq5dDvFfPNhsbcUQSIN
nXw93GVU0+qc2Nbi9v2oUeTroiu1uiSHgZI/cqHDZie4Dxcp3dM5hM6I4BfRpQEt
o/NRR3LWD6WGzpXv16xicgDsJXBhoE98aPY2qxf+wZLid5hZM1bDy0ExTfEihiHN
x469hRoh1m+qQR1isyF5HY8w8YoLUYl8xzxfkpeZ7ZHA46AUsmGq49cIcYh7E0S/
4chxjNYXvk9UXocfw7jah+nLNb4IT1mjkmxdM30e1igFQviBhjTSIn6pR6jQr9mj
yLXap+JWMtQ6myaklsea0OLcvuA7Lxo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:12 2026 by rpki-client