
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3tVBvUGpkMFepH_9W8bNsnXkI6k.roa
File: 3tVBvUGpkMFepH_9W8bNsnXkI6k.roa (raw, json)
Hash identifier: 3JWN1tQ6v+gQ4mcVWmQL9vedSfP8vjTZJHLJzeVr0sg=
Subject key identifier: DE:D5:41:BD:41:A9:90:C1:5E:A4:7F:FD:5B:C6:CD:B2:75:E4:23:A9
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0415
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3tVBvUGpkMFepH_9W8bNsnXkI6k.roa
Signing time: Tue 01 Apr 2025 01:35:32 +0000
ROA not before: Tue 01 Apr 2025 01:35:32 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:f100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:35:32 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=DED541BD41A990C15EA47FFD5BC6CDB275E423A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:1c:9a:d9:88:75:04:6d:cf:d7:aa:8f:f5:
2e:61:e8:1a:a3:ca:2a:e9:87:7d:31:11:11:8a:80:
1c:63:57:76:5f:e0:4f:f2:88:2b:07:40:95:8c:22:
a7:ef:9f:24:c5:27:92:18:f4:1e:4b:a0:12:76:8e:
06:df:f9:8d:df:6e:92:52:6f:34:e7:60:d4:1c:5a:
e4:50:83:c0:f4:dc:5d:90:5b:6e:16:2a:0b:e8:61:
d4:e7:4a:0d:e1:86:b3:99:ae:ee:02:67:67:eb:95:
fe:f4:7f:69:8e:ec:af:a8:dd:4a:41:02:70:35:aa:
2b:3b:05:f9:65:b4:76:e8:db:2a:4b:23:d4:d0:97:
19:2f:70:6a:88:32:37:e6:1d:62:75:07:1b:20:cc:
b4:54:18:43:d3:60:2a:5e:e7:d0:8e:fa:3c:e8:83:
84:f8:a4:2f:0d:79:14:8d:9e:0d:85:68:e4:ed:74:
67:13:60:f2:fe:08:3b:b8:ba:66:c2:3f:1b:c2:a4:
ff:da:4d:9e:0c:f1:0d:8b:0e:4f:3b:b3:97:94:6c:
c5:d8:59:83:0c:de:77:d9:0c:de:cb:c6:7a:b7:0a:
b5:60:3c:e0:66:30:fe:d1:5c:c8:22:30:33:8a:1a:
24:9f:f4:18:4b:95:38:4b:98:87:eb:81:3a:3f:37:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:41:BD:41:A9:90:C1:5E:A4:7F:FD:5B:C6:CD:B2:75:E4:23:A9
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3tVBvUGpkMFepH_9W8bNsnXkI6k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:f100::/40
Signature Algorithm: sha256WithRSAEncryption
b3:f6:d3:08:0b:29:b5:d4:21:af:ea:8c:fb:bf:76:23:f3:ce:
3a:ce:79:44:00:7c:7e:2e:19:35:e1:08:89:40:4d:2d:8d:f8:
a8:d7:ca:4f:57:87:ab:db:3b:9e:87:20:84:90:f3:8b:e9:6c:
96:d5:93:93:35:0e:f4:f4:c6:d0:1d:29:e4:10:c6:e2:dc:b3:
68:31:2a:4f:f4:44:ed:1d:99:70:78:4f:c4:05:e6:f6:3f:11:
6b:53:34:d6:ce:aa:20:c5:41:4d:bd:24:44:93:e7:19:66:50:
d8:de:f3:7d:ef:84:0f:23:f0:b2:ee:9d:d8:10:1b:e0:99:c4:
d8:6d:d6:f1:c7:1e:53:8d:bd:1b:e6:40:6b:73:e4:93:4f:77:
37:a7:4c:69:bc:df:2e:6a:8f:d4:83:fe:f8:1f:9c:d6:b9:5e:
8b:95:8a:05:95:33:41:a5:fa:28:d6:01:a2:8e:76:71:6c:09:
5a:61:4d:51:75:1e:ce:b1:14:22:e1:73:49:13:03:28:c6:90:
5b:32:c2:fb:32:8d:eb:eb:f5:a7:8a:6d:fa:02:ca:05:98:e4:
c9:88:23:d2:e4:3f:3a:26:6e:d6:ce:51:2d:97:32:c5:ef:f8:
d5:4e:82:31:c9:ed:e3:50:39:81:37:79:b1:e6:c4:fe:50:b3:
ab:10:57:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1MzJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERFRDU0MUJENDFBOTkw
QzE1RUE0N0ZGRDVCQzZDREIyNzVFNDIzQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOChya2Yh1BG3P16qP9S5h6Bqjyirph30xERGKgBxjV3Zf4E/y
iCsHQJWMIqfvnyTFJ5IY9B5LoBJ2jgbf+Y3fbpJSbzTnYNQcWuRQg8D03F2QW24W
KgvoYdTnSg3hhrOZru4CZ2frlf70f2mO7K+o3UpBAnA1qis7BflltHbo2ypLI9TQ
lxkvcGqIMjfmHWJ1BxsgzLRUGEPTYCpe59CO+jzog4T4pC8NeRSNng2FaOTtdGcT
YPL+CDu4umbCPxvCpP/aTZ4M8Q2LDk87s5eUbMXYWYMM3nfZDN7Lxnq3CrVgPOBm
MP7RXMgiMDOKGiSf9BhLlThLmIfrgTo/NwLLAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU3tVBvUGpkMFepH/9W8bNsnXkI6kwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zdFZCdlVHcGtNRmVwSF85VzhiTnNuWGtJNmsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/EwDQYJKoZIhvcNAQELBQADggEBALP20wgLKbXUIa/qjPu/
diPzzjrOeUQAfH4uGTXhCIlATS2N+KjXyk9Xh6vbO56HIISQ84vpbJbVk5M1DvT0
xtAdKeQQxuLcs2gxKk/0RO0dmXB4T8QF5vY/EWtTNNbOqiDFQU29JEST5xlmUNje
833vhA8j8LLundgQG+CZxNht1vHHHlONvRvmQGtz5JNPdzenTGm83y5qj9SD/vgf
nNa5XouVigWVM0Gl+ijWAaKOdnFsCVphTVF1Hs6xFCLhc0kTAyjGkFsywvsyjevr
9aeKbfoCygWY5MmII9LkPzombtbOUS2XMsXv+NVOgjHJ7eNQOYE3ebHmxP5Qs6sQ
V4Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:17:24 2025 by rpki-client