
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3stUyQodIWrnPEePJjDQEIT10Is.roa
File: 3stUyQodIWrnPEePJjDQEIT10Is.roa (raw, json)
Hash identifier: g7NNAOk+OoRmOCFgsfsdpjE1BOL3UauXYnEd280UPdQ=
Subject key identifier: DE:CB:54:C9:0A:1D:21:6A:E7:3C:47:8F:26:30:D0:10:84:F5:D0:8B
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 011D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3stUyQodIWrnPEePJjDQEIT10Is.roa
Signing time: Tue 31 Mar 2026 08:30:22 +0000
ROA not before: Tue 31 Mar 2026 08:30:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 202.224.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DECB54C90A1D216AE73C478F2630D01084F5D08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:d3:03:8f:4b:08:e6:f2:98:c7:83:81:25:
01:0d:f5:e7:a3:5f:e8:46:8f:44:45:66:d1:77:f5:
a9:3c:57:90:f2:81:65:bf:4a:6e:03:b1:cc:2a:43:
33:b3:42:7e:0d:f3:e3:f2:58:0a:73:dd:e5:7a:1c:
d6:c0:f7:73:32:77:60:68:95:23:49:13:81:64:b0:
5b:79:a6:aa:ce:9e:dc:43:a5:3f:59:d1:b2:bd:af:
73:5c:39:13:68:c9:68:75:80:e7:2e:3b:5c:00:c1:
d9:9b:e1:d2:1e:95:a5:2b:fe:b3:29:5a:d2:18:d6:
61:3a:5f:55:71:4a:44:53:e4:83:4f:15:c1:52:8e:
12:07:cf:bf:6a:92:1c:4c:fc:0d:88:7c:b3:97:1c:
68:b6:ab:9f:e8:60:02:cd:97:ba:eb:c6:a4:a0:f7:
96:42:11:8d:1e:8e:d0:24:fd:78:22:49:11:62:e7:
ac:9d:f2:1c:b9:3f:b4:25:fe:f5:f0:54:4d:4c:33:
92:dc:b7:cb:9e:8e:cc:91:04:af:2e:4c:10:4c:7d:
76:69:25:fa:a4:e2:ef:52:f2:d7:26:fd:c6:03:22:
5f:7e:62:8a:4f:59:96:5d:03:af:16:44:06:ae:61:
c8:d3:18:a3:8a:41:49:a1:91:9d:5e:09:80:70:43:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:54:C9:0A:1D:21:6A:E7:3C:47:8F:26:30:D0:10:84:F5:D0:8B
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3stUyQodIWrnPEePJjDQEIT10Is.roa
sbgp-ipAddrBlock: critical
IPv4:
202.224.32.0/19
Signature Algorithm: sha256WithRSAEncryption
99:d8:e4:4c:88:1c:6d:d1:c0:41:24:ed:d6:71:e9:95:23:29:
93:3b:61:c9:dc:55:06:55:e6:92:95:94:5a:06:55:fe:c9:6f:
91:c8:f4:fe:47:d3:27:d2:cd:fe:35:22:48:02:02:72:a3:fa:
b1:94:ee:38:77:c1:35:b7:86:61:a3:48:1a:c5:cf:d3:fb:6b:
30:33:28:f8:85:5c:b5:c4:04:45:da:0d:1e:06:5a:a3:08:da:
4c:6b:91:9c:b0:e7:07:d0:98:92:ab:af:83:74:1b:67:dd:68:
fb:2b:54:96:30:a1:78:f9:fc:3f:28:aa:63:c5:3a:5f:84:d1:
a8:7b:d8:f2:67:8e:a9:46:d5:18:7a:01:68:1c:94:f0:9a:1f:
65:ca:fd:b6:67:00:b9:60:4d:69:c6:b2:98:8d:17:a2:10:3e:
23:aa:97:46:49:da:60:62:57:0d:ce:4f:3c:5f:37:75:98:57:
2b:0d:33:18:ee:24:a3:76:f9:ef:cd:6b:2d:30:7e:be:36:6e:
76:e8:01:93:39:80:8a:2e:0c:67:95:a0:14:8d:d9:61:bc:1d:
83:31:f6:b2:2a:05:49:9b:05:50:4f:ec:ef:03:3a:1a:4b:d8:
e2:0c:23:e0:0a:b6:26:b6:22:ab:60:cf:5d:07:cb:fb:51:f6:
d0:27:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:51 2026 by rpki-client