
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30427/3EmWAlWO5GB5KkoJyIcL4hXbXkY.roa
File: 3EmWAlWO5GB5KkoJyIcL4hXbXkY.roa (raw, json)
Hash identifier: C1xqbGF6wwyxKqqunNl1fHrYXL0SeNXluMfl+10GgxY=
Subject key identifier: DC:49:96:02:55:8E:E4:60:79:2A:4A:09:C8:87:0B:E2:15:DB:5E:46
Certificate issuer: /CN=EB9438A78EABAD9DFF5E2AE21ACDDF5810291CBF
Certificate serial: 2A
Authority key identifier: EB:94:38:A7:8E:AB:AD:9D:FF:5E:2A:E2:1A:CD:DF:58:10:29:1C:BF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/3EmWAlWO5GB5KkoJyIcL4hXbXkY.roa
Signing time: Tue 31 Mar 2026 08:35:32 +0000
ROA not before: Tue 31 Mar 2026 08:35:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 150369
IP address blocks: 2401:2d60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB9438A78EABAD9DFF5E2AE21ACDDF5810291CBF
Validity
Not Before: Mar 31 08:35:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DC499602558EE460792A4A09C8870BE215DB5E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:28:2e:2f:85:d6:29:6e:80:88:5b:0a:40:
90:90:b7:d9:f1:a6:d3:8e:29:f1:64:ba:0a:79:53:
6b:77:9b:38:bd:ae:11:da:61:c8:9e:b6:6b:f2:e0:
79:1e:39:a5:8d:1d:56:f7:0f:f6:96:ea:87:e3:7c:
26:3e:e8:3e:b8:75:24:02:bc:2f:dc:2a:61:e4:8e:
a5:c3:b5:78:d9:c5:f3:74:18:27:f0:c6:33:ee:32:
21:64:f0:ac:15:0a:2f:4b:aa:8e:90:d2:48:54:f8:
63:86:9e:54:7c:ac:94:8b:d7:40:fe:5f:79:1c:65:
b5:01:e6:be:0f:42:08:0c:5e:af:5e:b2:c3:3c:48:
4a:7f:fb:22:34:87:2b:05:f9:59:2d:62:ce:1a:4f:
e3:e3:4a:b4:66:13:ee:7b:ba:a5:86:3e:aa:63:c5:
95:8a:e3:ac:a1:bb:6b:22:19:cb:0f:45:13:bd:22:
1e:54:6c:7b:42:ed:15:46:c3:55:06:64:c1:80:e5:
27:e3:a3:f1:c4:d2:5b:2b:99:da:0d:9f:15:0d:e5:
46:3e:01:88:de:81:f6:c7:bc:a1:fc:5b:4a:4e:8b:
18:30:e6:47:bb:5e:4f:82:2c:68:a0:32:f1:20:5c:
ac:91:66:99:20:e6:82:e3:76:c6:77:ed:8a:81:93:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:96:02:55:8E:E4:60:79:2A:4A:09:C8:87:0B:E2:15:DB:5E:46
X509v3 Authority Key Identifier:
keyid:EB:94:38:A7:8E:AB:AD:9D:FF:5E:2A:E2:1A:CD:DF:58:10:29:1C:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/3EmWAlWO5GB5KkoJyIcL4hXbXkY.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:2d60::/32
Signature Algorithm: sha256WithRSAEncryption
2c:30:92:41:36:32:42:a4:62:b3:55:12:87:0e:53:df:cb:3f:
ef:80:ee:78:1a:61:93:68:32:db:b8:a5:61:b7:33:83:1d:18:
97:4a:a4:b7:c2:70:4c:68:4e:e3:3a:8e:e4:28:59:2d:88:07:
58:9f:dc:94:55:05:e3:2c:66:64:b9:6f:1b:d0:e2:65:a8:e2:
40:3a:65:19:0c:99:54:97:a3:32:cd:1f:06:0a:0f:a8:ae:60:
d0:d2:9b:eb:06:f3:43:31:8e:c9:95:84:2c:a9:97:22:74:b7:
ac:8e:67:85:4c:28:de:81:00:0c:85:8e:9b:03:ac:8f:97:f0:
8c:2a:95:a9:7e:db:07:f4:e1:2b:b9:5e:c5:eb:16:fd:9c:5b:
93:58:ea:ad:6e:d4:df:c4:55:1e:a7:86:15:97:ed:1c:21:a0:
53:fc:ea:bc:f2:57:8d:ba:51:46:cc:cc:f3:f0:61:7a:e4:67:
1d:3b:ea:c5:2d:4c:7b:ea:68:95:79:58:2b:f9:fe:90:98:56:
70:17:7d:25:f4:90:d3:ca:a5:c0:75:f1:d3:13:c3:fb:0b:a2:
21:de:c4:b4:63:d7:b6:62:54:35:27:80:6f:39:31:36:4b:69:
ae:97:57:06:23:0c:ea:47:d7:6a:64:fd:bd:de:07:69:d6:62:
6d:2f:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:39 2026 by rpki-client