
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/C3uPIHRI7WFvAQh_u8FOWHArHIU.roa
File: C3uPIHRI7WFvAQh_u8FOWHArHIU.roa (raw, json)
Hash identifier: DMjK/B4RLVF3eXCVSfezQe8M/gWkoZVAMnHPLsKKiJc=
Subject key identifier: 0B:7B:8F:20:74:48:ED:61:6F:01:08:7F:BB:C1:4E:58:70:2B:1C:85
Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial: 59
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/C3uPIHRI7WFvAQh_u8FOWHArHIU.roa
Signing time: Tue 31 Mar 2026 08:31:53 +0000
ROA not before: Tue 31 Mar 2026 08:31:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37899
IP address blocks: 240b:253::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Validity
Not Before: Mar 31 08:31:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0B7B8F207448ED616F01087FBBC14E58702B1C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:05:89:e3:f1:44:e6:f0:c0:8d:fe:53:9b:
6d:2e:ff:fc:c1:d8:54:4f:62:ab:e4:aa:ca:83:85:
a7:04:40:fb:a3:35:6e:30:58:49:d0:dd:90:ab:fc:
b4:86:d7:30:c6:f6:9f:f2:07:15:a1:e7:31:32:be:
24:8b:97:3d:04:22:f9:b2:ef:f7:13:43:b2:3d:0c:
b6:4e:bc:6d:9e:5b:a8:38:9e:36:45:47:37:14:8d:
83:34:03:6a:58:a2:50:bf:53:37:10:15:d0:d6:93:
d8:aa:09:b4:1c:51:26:33:a3:1a:c6:12:a4:6e:77:
46:f4:06:64:91:35:f6:70:36:64:02:c1:1e:0a:9b:
c1:23:3d:f3:f3:6b:08:03:fe:56:c8:ba:79:1a:7a:
aa:1c:3c:e7:58:76:dc:65:1d:f2:b1:89:be:89:6c:
a1:8b:5f:6b:45:85:bf:2f:4c:ca:d0:e1:79:7d:9b:
f2:8c:69:6a:68:71:ee:30:58:70:9a:af:44:59:d8:
ea:96:96:13:9a:2d:28:4b:5b:89:ae:7f:23:b5:a0:
2c:fb:ae:1a:fd:b5:60:54:61:c1:a2:28:ba:1b:4e:
79:40:e6:c0:61:4b:0c:b8:4f:5b:41:49:25:e9:b8:
8c:38:3a:c2:6c:a8:4a:2c:80:0b:82:9d:4f:b1:42:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:8F:20:74:48:ED:61:6F:01:08:7F:BB:C1:4E:58:70:2B:1C:85
X509v3 Authority Key Identifier:
keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/C3uPIHRI7WFvAQh_u8FOWHArHIU.roa
sbgp-ipAddrBlock: critical
IPv6:
240b:253::/32
Signature Algorithm: sha256WithRSAEncryption
11:40:c9:69:e6:90:6c:40:65:93:39:17:d2:44:b7:62:64:bd:
ca:a5:0d:5c:cf:77:ca:d8:c3:a0:f4:7a:49:9f:c8:14:5b:3b:
8a:18:36:d1:77:8a:33:37:10:c1:dd:23:2d:2f:28:ab:c6:e5:
85:5f:5a:ff:7d:77:b6:e1:44:ce:7d:a5:41:16:17:12:98:6e:
e6:bb:1a:ee:f7:0e:55:d5:14:2b:3c:19:23:ef:67:d0:da:60:
8f:53:2e:6b:8c:b7:70:66:7f:9b:89:7a:75:17:47:68:0d:f8:
aa:dc:2a:83:c4:1f:9a:dc:ab:f2:f9:af:28:0f:5e:0b:7a:e9:
31:83:d2:46:4f:09:19:5e:2b:87:24:70:91:6a:3b:30:83:38:
ee:ee:c3:93:03:0b:ce:98:05:47:7c:4f:92:99:a4:1c:14:e4:
72:79:2a:12:0b:ce:2f:f7:8a:ed:0e:0a:4e:bb:67:de:84:8d:
d8:d4:03:df:b5:93:64:06:73:84:70:51:28:e1:29:47:28:76:
1f:e5:6a:05:43:07:a6:ed:d8:eb:f8:44:9a:5d:55:31:c5:52:
01:88:f2:de:2a:c4:aa:f9:af:b6:0c:0b:ff:a9:9c:11:91:79:
1a:f4:de:f0:77:a9:92:3a:ed:47:05:ab:28:bf:c0:8e:83:b0:
01:4c:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:53 2026 by rpki-client