
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/OgYvF2eIn4ldB7cgV3ii2TXIPso.roa
File: OgYvF2eIn4ldB7cgV3ii2TXIPso.roa (raw, json)
Hash identifier: TzigAE6qvZGHoefPZw2afRAAY4Jzjguu4xzmUDxdlMQ=
Subject key identifier: 3A:06:2F:17:67:88:9F:89:5D:07:B7:20:57:78:A2:D9:35:C8:3E:CA
Certificate issuer: /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
Certificate serial: 41
Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/OgYvF2eIn4ldB7cgV3ii2TXIPso.roa
Signing time: Tue 31 Mar 2026 08:23:23 +0000
ROA not before: Tue 31 Mar 2026 08:23:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24257
IP address blocks: 2400:3000:72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
Validity
Not Before: Mar 31 08:23:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3A062F1767889F895D07B7205778A2D935C83ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:2a:4f:a5:ea:70:40:7a:46:3e:f8:fb:9a:
ac:d2:54:bc:97:0a:15:2b:81:88:89:c1:9f:33:dd:
78:11:4c:ec:ae:77:c1:e6:5c:e4:5c:9d:c3:ee:f1:
08:a1:51:84:e7:f3:41:30:c5:34:fb:40:2b:8e:56:
ea:9f:4c:10:e4:fe:92:b4:ae:66:20:ca:e8:52:46:
13:09:16:76:df:e6:da:8c:eb:7c:26:11:b9:b3:fc:
d4:86:fd:50:75:20:69:e4:c5:53:1a:b5:62:ad:7f:
e5:a4:ce:ff:35:4e:61:52:f5:18:41:e1:47:ae:9d:
d4:ae:ae:14:dd:4c:3d:eb:4d:11:ee:39:11:13:28:
6a:2e:41:81:66:82:85:f2:c5:e1:00:69:ba:cf:c8:
28:3f:d3:40:7a:54:21:33:d1:ed:ee:bd:26:7e:d5:
fb:01:e1:b2:60:75:e9:9e:b1:5c:e9:69:2a:d9:e6:
d3:fb:53:32:89:a2:67:8e:80:08:b4:b7:6d:ee:d3:
d3:be:6e:a1:98:14:b8:4b:8d:75:b7:ae:a8:86:31:
21:0b:5e:79:bc:c7:d9:17:38:fd:aa:dc:8d:08:f0:
44:f2:c1:ad:70:64:36:f8:57:02:51:13:bd:34:a7:
13:ad:56:e5:db:71:69:f2:5d:8e:c8:d5:0d:00:ed:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:2F:17:67:88:9F:89:5D:07:B7:20:57:78:A2:D9:35:C8:3E:CA
X509v3 Authority Key Identifier:
keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/OgYvF2eIn4ldB7cgV3ii2TXIPso.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3000:72::/48
Signature Algorithm: sha256WithRSAEncryption
43:f9:7a:22:14:57:14:5e:77:f1:ac:ba:55:3d:fd:b9:08:24:
f0:10:48:61:57:95:47:a5:2d:30:a3:27:02:37:05:94:3c:8f:
67:77:ba:c6:36:b8:1b:ee:7a:49:0c:44:e7:8c:bc:f9:f7:21:
cc:16:0b:61:12:df:ab:5b:b3:81:1f:43:ea:27:82:3e:b2:9f:
10:76:25:0b:fb:3d:fc:5e:0f:6c:d2:d2:fa:b6:d5:3b:72:c8:
8c:34:5b:cb:69:61:dd:2a:ae:de:42:0a:bf:71:65:4a:35:56:
82:74:de:d7:3c:d2:92:95:49:8b:7a:f8:3e:10:f0:03:75:19:
9b:c7:a9:c1:37:65:d5:19:9a:83:c9:e6:dd:26:bf:5b:72:43:
e5:ea:7a:63:ea:9d:a6:bc:3d:9e:cb:72:84:98:a4:8a:01:47:
c7:cb:dc:b8:de:2f:f0:c4:64:46:09:51:ac:41:85:1f:a9:2d:
d1:8c:6e:20:84:3d:de:66:59:65:67:1d:c7:a3:a9:9a:52:5f:
87:b2:66:e1:fb:c0:a9:2a:86:44:5f:a4:69:a5:e2:fd:db:01:
dc:2b:51:4c:47:45:b5:72:81:5f:10:75:d3:9a:50:38:5e:b7:
5e:03:6e:ba:32:95:e9:0b:3d:69:87:c1:65:52:53:fe:ee:95:
1d:b5:18:fe
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDRC
NzhGMEMyMTI4MzIxN0UwQTkxNDBENDY3OEQ5NzRCM0NFNkJFMB4XDTI2MDMzMTA4
MjMyM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0EwNjJGMTc2Nzg4OUY4
OTVEMDdCNzIwNTc3OEEyRDkzNUM4M0VDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALk+Kk+l6nBAekY++PuarNJUvJcKFSuBiInBnzPdeBFM7K53weZc
5Fydw+7xCKFRhOfzQTDFNPtAK45W6p9MEOT+krSuZiDK6FJGEwkWdt/m2ozrfCYR
ubP81Ib9UHUgaeTFUxq1Yq1/5aTO/zVOYVL1GEHhR66d1K6uFN1MPetNEe45ERMo
ai5BgWaChfLF4QBpus/IKD/TQHpUITPR7e69Jn7V+wHhsmB16Z6xXOlpKtnm0/tT
MomiZ46ACLS3be7T075uoZgUuEuNdbeuqIYxIQteebzH2Rc4/arcjQjwRPLBrXBk
NvhXAlETvTSnE61W5dtxafJdjsjVDQDt1DUCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQ6Bi8XZ4ifiV0HtyBXeKLZNcg+yjAfBgNVHSMEGDAWgBTwS3jwwhKDIX4KkUDU
Z42XSzzmvjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5sMHM4NXI0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5s
MHM4NXI0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTAwL09nWXZGMmVJbjRsZEI3Y2dWM2lpMlRYSVBzby5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkADAAAHIwDQYJKoZIhvcNAQEL
BQADggEBAEP5eiIUVxRed/GsulU9/bkIJPAQSGFXlUelLTCjJwI3BZQ8j2d3usY2
uBvuekkMROeMvPn3IcwWC2ES36tbs4EfQ+ongj6ynxB2JQv7PfxeD2zS0vq21Tty
yIw0W8tpYd0qrt5CCr9xZUo1VoJ03tc80pKVSYt6+D4Q8AN1GZvHqcE3ZdUZmoPJ
5t0mv1tyQ+XqemPqnaa8PZ7LcoSYpIoBR8fL3LjeL/DEZEYJUaxBhR+pLdGMbiCE
Pd5mWWVnHcejqZpSX4eyZuH7wKkqhkRfpGml4v3bAdwrUUxHRbVygV8QddOaUDhe
t14DbroylekLPWmHwWVSU/7ulR21GP4=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:25:29 2026 by rpki-client