
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa
File: A3gaKL0kTtqM1heSYf71sqGvCRI.roa (raw, json)
Hash identifier: bziBQQyO9W1fAvII7/mK9zIuJxmS1cUG7kQCNnIkDrM=
Subject key identifier: 03:78:1A:28:BD:24:4E:DA:8C:D6:17:92:61:FE:F5:B2:A1:AF:09:12
Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial: 4A
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa
Signing time: Tue 31 Mar 2026 08:15:16 +0000
ROA not before: Tue 31 Mar 2026 08:15:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17676
IP address blocks: 2403:9900::/24 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Validity
Not Before: Mar 31 08:15:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=03781A28BD244EDA8CD6179261FEF5B2A1AF0912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:ab:63:c0:be:2b:54:57:2d:f2:78:4e:20:
f3:e3:3e:51:7b:f4:77:5f:f1:a9:eb:fd:67:50:70:
82:63:b2:eb:8a:16:bf:61:0f:91:41:9a:72:ef:98:
11:64:b2:09:c7:87:5d:b3:3f:dd:78:02:78:83:e1:
a6:a1:86:6b:da:80:4a:54:dc:a4:f1:58:9e:36:1d:
89:6d:11:ce:31:1e:66:ee:28:0d:49:64:5a:fa:88:
c5:17:e0:ac:f4:01:ab:b0:18:d7:72:3c:52:a3:09:
1c:e9:a4:b4:41:f9:3e:81:2e:e2:f4:67:e6:50:3d:
b7:94:1d:76:69:df:98:35:dd:8f:60:08:45:ad:8a:
2d:da:5d:91:7d:30:ff:82:ad:11:83:bd:64:e2:2e:
16:55:bb:c1:34:81:c9:c1:d4:a0:6f:88:49:18:69:
77:3f:f6:83:78:f9:02:ec:5b:ce:94:5b:7a:71:00:
eb:c1:bd:88:8a:a1:1d:3d:a3:94:47:b5:7f:9f:fd:
42:c5:0a:a5:2f:cf:c1:03:68:09:e2:6b:b0:bb:f3:
12:6a:30:67:71:15:b3:23:4a:33:2e:e9:54:f4:16:
58:7b:8b:21:8e:c1:0a:ae:04:81:70:0a:7a:bd:93:
cf:0a:6a:7e:82:d1:f6:87:a8:88:06:c6:c7:9c:a8:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:1A:28:BD:24:4E:DA:8C:D6:17:92:61:FE:F5:B2:A1:AF:09:12
X509v3 Authority Key Identifier:
keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:9900::/24
Signature Algorithm: sha256WithRSAEncryption
a3:5b:d1:f5:d8:88:3f:24:a0:7d:b9:bc:f0:e3:f2:73:48:14:
94:40:0a:aa:bc:0f:3f:27:e9:e3:ac:41:ef:98:c6:1f:cc:16:
42:4d:8a:9a:fc:16:16:a8:67:32:3c:0f:95:75:d8:8a:d2:23:
68:22:44:90:0d:04:75:b9:4a:c2:02:18:dc:60:92:6a:6d:15:
81:e1:f7:ac:37:75:91:83:20:4a:d1:84:28:4e:8a:b4:3d:f6:
5f:52:5d:e7:00:43:2e:40:72:26:c3:cd:bc:6b:17:05:55:d6:
c8:f1:f2:07:2d:4e:71:c3:c9:b0:3c:6c:6a:7c:ba:83:ab:15:
e0:d5:9d:12:82:fe:44:f7:3e:43:3a:ed:bc:7a:ff:47:02:e9:
d1:07:bc:ff:ec:43:55:b1:6c:43:6d:5b:f6:79:f1:8c:6d:ad:
76:92:9d:e8:ad:b2:8b:19:c9:52:40:3c:df:c3:d2:1e:a9:ad:
a0:dd:d2:4b:dd:f0:63:db:af:55:c2:82:c3:49:8b:2a:85:d5:
31:99:ff:80:e6:ee:67:d4:1c:f0:96:19:02:e4:15:c5:8f:91:
0d:29:8f:e2:54:27:da:b6:32:d6:06:6f:de:7c:75:4d:ca:fe:
6b:e5:c8:aa:77:40:53:d7:3c:88:7d:f8:7e:64:e5:03:a4:4d:
b7:99:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:23 2026 by rpki-client