
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa
File: 3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa (raw, json)
Hash identifier: 345ggwgJit0ja4NRKqSoSXoRWUM3VK162wRLNb637mo=
Subject key identifier: DC:97:BE:BB:E2:75:CC:99:5E:1B:A4:2B:F9:40:5F:93:C5:65:45:DF
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01F2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa
Signing time: Tue 31 Mar 2026 07:39:59 +0000
ROA not before: Tue 31 Mar 2026 07:39:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 198.144.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DC97BEBBE275CC995E1BA42BF9405F93C56545DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:3c:cc:88:24:d2:2c:7a:85:9a:24:06:bd:
ba:26:2f:ab:1e:3b:bb:6e:0f:cf:1e:92:22:d6:2b:
8d:7a:ac:30:bc:5a:ae:55:e4:f2:11:bb:27:95:83:
44:83:3e:3e:e7:6e:c3:3d:0b:d7:bc:a1:b3:15:f3:
8d:cb:c2:48:c3:7b:53:95:fc:79:b1:40:3e:5e:0d:
a3:7f:6b:ab:03:6d:82:85:dd:ba:e3:89:34:95:50:
36:5e:8d:b4:27:c5:5c:23:f4:5f:58:a3:51:96:32:
0a:07:d7:d6:3b:d9:3c:da:ae:a0:dc:44:e4:c6:d6:
c2:db:78:e2:16:a4:8b:83:84:8d:54:3f:8c:13:cf:
50:64:c5:94:f1:af:ce:60:97:c2:55:df:ec:b2:be:
0a:13:26:df:5d:0a:13:d1:06:19:20:b8:04:84:57:
de:10:61:d6:7f:28:9a:dd:0d:64:94:0e:f9:da:71:
df:58:6f:f0:c5:46:9c:62:a8:69:fc:08:19:3e:34:
82:00:51:03:27:f7:a7:b1:52:f5:2c:58:a6:32:74:
78:e7:d9:45:95:09:d0:b2:90:48:71:7f:38:c0:c5:
7e:71:bf:11:99:8b:f9:2b:00:59:66:c4:cc:fb:81:
d4:ab:28:e5:ec:c2:cf:56:58:8e:5a:8b:c8:98:23:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:BE:BB:E2:75:CC:99:5E:1B:A4:2B:F9:40:5F:93:C5:65:45:DF
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa
sbgp-ipAddrBlock: critical
IPv4:
198.144.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:dd:51:1f:91:ab:18:a1:55:2b:e3:d5:dc:2b:e1:ca:48:aa:
5a:43:68:f9:3f:9c:e4:6a:f6:48:6e:e2:fd:92:0d:d2:12:69:
0a:62:ed:69:3d:38:c7:2f:85:c9:bf:b9:37:f2:3f:55:35:aa:
87:fc:5d:df:31:5e:c4:8b:6d:6d:43:1b:ae:b1:24:9f:ab:6e:
9e:16:70:97:c4:3d:b6:d5:33:3e:1e:bc:37:1c:50:05:ca:b1:
a9:88:e3:9d:45:c8:dd:39:61:82:35:da:b6:ed:d6:8d:c4:3f:
da:b2:6c:3a:8b:4c:70:c3:86:c8:87:07:ec:ea:34:1d:9d:8f:
95:ff:f1:07:61:c6:26:2e:f0:bc:7b:c1:13:c0:88:fa:68:45:
1b:02:98:c3:3f:fd:20:36:35:42:e7:17:53:57:f4:53:3f:2a:
89:0a:b1:54:a9:4f:63:c5:11:39:21:65:47:4f:00:f1:f5:bc:
2d:b6:97:ae:49:35:90:58:cd:a3:9d:dc:6a:86:2a:d7:ce:33:
fe:d5:ce:f9:52:fe:de:a2:d7:30:33:6d:69:79:41:0e:f1:08:
1f:29:0a:20:32:49:94:6b:37:92:96:1b:02:98:b0:fd:1c:97:
0e:46:93:1e:a1:dd:11:0e:30:ae:28:07:a0:dc:f2:b4:67:e4:
92:09:74:8d
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDOTdCRUJCRTI3NUND
OTk1RTFCQTQyQkY5NDA1RjkzQzU2NTQ1REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfLTzMiCTSLHqFmiQGvbomL6seO7tuD88ekiLWK416rDC8Wq5V
5PIRuyeVg0SDPj7nbsM9C9e8obMV843LwkjDe1OV/HmxQD5eDaN/a6sDbYKF3brj
iTSVUDZejbQnxVwj9F9Yo1GWMgoH19Y72TzarqDcROTG1sLbeOIWpIuDhI1UP4wT
z1BkxZTxr85gl8JV3+yyvgoTJt9dChPRBhkguASEV94QYdZ/KJrdDWSUDvnacd9Y
b/DFRpxiqGn8CBk+NIIAUQMn96exUvUsWKYydHjn2UWVCdCykEhxfzjAxX5xvxGZ
i/krAFlmxMz7gdSrKOXsws9WWI5ai8iYI8wTAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU3Je+u+J1zJleG6Qr+UBfk8VlRd8wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My8zSmUtdS1KMXpKbGVHNlFyLVVCZms4VmxSZDgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExpCgMA0GCSqGSIb3DQEBCwUAA4IBAQCK
3VEfkasYoVUr49XcK+HKSKpaQ2j5P5zkavZIbuL9kg3SEmkKYu1pPTjHL4XJv7k3
8j9VNaqH/F3fMV7Ei21tQxuusSSfq26eFnCXxD221TM+Hrw3HFAFyrGpiOOdRcjd
OWGCNdq27daNxD/asmw6i0xww4bIhwfs6jQdnY+V//EHYcYmLvC8e8ETwIj6aEUb
ApjDP/0gNjVC5xdTV/RTPyqJCrFUqU9jxRE5IWVHTwDx9bwttpeuSTWQWM2jndxq
hirXzjP+1c75Uv7eotcwM21peUEO8QgfKQogMkmUazeSlhsCmLD9HJcORpMeod0R
DjCuKAeg3PK0Z+SSCXSN
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:00 2026 by rpki-client