
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
File: 3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa (raw, json)
Hash identifier: 2z3DDTejfkMZMxlCaai8jNOqf3jE1ETZmwr0hqlsaOM=
Subject key identifier: DD:4E:95:FD:D3:8D:DE:1B:C9:B3:CC:07:E3:38:EF:44:FD:59:2F:4A
Certificate issuer: /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial: 2B
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
Signing time: Sun 01 Mar 2026 01:36:24 +0000
ROA not before: Sun 01 Mar 2026 01:36:24 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 131931
IP address blocks: 110.4.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Validity
Not Before: Mar 1 01:36:24 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DD4E95FDD38DDE1BC9B3CC07E338EF44FD592F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:59:0f:6a:4f:37:3d:9d:5f:c7:32:63:60:
4c:a8:bf:86:0a:2a:45:74:36:57:80:47:26:b7:e1:
08:0f:83:2c:23:5c:be:d2:cd:c0:f9:b4:1c:a7:6e:
2a:66:a6:95:cb:1e:4f:9d:70:98:99:0d:0b:ba:97:
d4:1b:ea:cd:5b:0f:1e:bc:74:d5:75:c7:26:c8:be:
6e:0e:6b:22:76:e8:88:ab:06:b6:3c:52:db:34:c8:
81:7b:75:f1:bc:03:6b:2a:41:d6:84:40:84:b6:2b:
2e:a8:8a:4f:f7:38:da:72:6b:88:32:af:36:3d:bd:
e2:ca:97:4e:79:13:b7:5f:2d:ca:ce:f4:72:28:da:
4c:30:66:3a:54:6e:1e:f9:19:bd:58:63:3f:3f:3f:
66:32:06:4e:e9:90:e6:07:03:b0:70:c7:aa:4e:c0:
97:c6:06:cb:0c:16:8f:a4:98:a9:31:46:06:cb:6d:
1a:15:86:36:f8:60:d4:17:57:74:89:7f:53:69:70:
d4:4b:4e:15:2b:98:61:7b:c5:2c:ee:e2:68:9b:11:
36:37:b6:eb:ed:3f:06:db:55:75:41:32:34:4b:1b:
c9:b7:0b:54:97:49:6e:db:1b:39:7d:33:f4:bd:57:
8f:95:ce:67:aa:f3:b8:93:36:93:7b:06:77:c3:af:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:95:FD:D3:8D:DE:1B:C9:B3:CC:07:E3:38:EF:44:FD:59:2F:4A
X509v3 Authority Key Identifier:
keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.4.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:5d:1e:92:06:81:ac:31:a8:81:2e:13:d1:c1:d7:f4:d7:79:
e2:8e:30:c4:68:da:f8:ff:31:fd:b0:38:1f:87:c5:28:d5:41:
14:7f:2e:14:50:39:bb:48:7c:1b:0c:33:64:09:98:1c:07:4b:
3f:56:6a:10:d2:fa:f2:b7:0c:f2:33:09:06:ab:05:8e:01:0f:
8f:4a:7a:ef:ff:2f:5a:ea:ec:58:9f:a9:91:f1:a2:6b:09:59:
45:5c:ab:43:b5:84:82:fc:87:e3:e4:dc:ce:e1:80:f9:97:c4:
a9:76:97:62:01:62:ed:db:f6:97:9c:50:c9:a3:bc:56:b4:5b:
75:6a:21:e6:21:ed:fa:67:50:02:57:3c:b5:a9:12:af:40:d9:
0a:44:4d:90:31:03:25:cb:74:97:df:77:64:57:e3:8c:3e:6f:
a6:ff:3e:cf:1c:59:33:39:0e:b6:2a:15:fa:0a:9e:e5:30:f9:
e7:15:00:87:25:9b:ce:d6:28:89:0d:1a:6c:0f:81:3c:02:6a:
b4:77:a5:60:3a:ea:8d:52:64:36:5e:b9:f7:b7:b6:25:8e:1a:
3a:a6:6b:38:12:e4:47:94:a2:16:0a:10:ef:30:3c:f7:e9:20:
89:b1:3c:97:d1:82:03:78:22:2d:d8:ed:0d:95:e5:c4:1e:73:
a7:04:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:45 2026 by rpki-client