
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/OU3c0WVQxv5nunJ8uM7CUVyn6vk.roa
File: OU3c0WVQxv5nunJ8uM7CUVyn6vk.roa (raw, json)
Hash identifier: joY6Py478P4REnZVX+o6GhXzLfFVuTV/u9WNRk4Qnmo=
Subject key identifier: 39:4D:DC:D1:65:50:C6:FE:67:BA:72:7C:B8:CE:C2:51:5C:A7:EA:F9
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: AF
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/OU3c0WVQxv5nunJ8uM7CUVyn6vk.roa
Signing time: Tue 31 Mar 2026 07:38:52 +0000
ROA not before: Tue 31 Mar 2026 07:38:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9621
IP address blocks: 125.2.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Mar 31 07:38:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=394DDCD16550C6FE67BA727CB8CEC2515CA7EAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:9f:18:dd:68:af:e2:98:a9:ad:e0:26:91:
60:11:47:fa:17:2c:af:67:23:4f:83:17:d8:88:1b:
73:d5:5f:92:0a:48:06:6e:e8:96:f8:87:dc:f6:1f:
f7:b0:65:c6:de:fc:5a:20:fc:95:af:02:e6:65:c6:
c5:e4:df:73:cf:69:77:f7:4d:09:eb:59:fe:67:e0:
42:fc:1e:a2:a2:9e:52:8d:a6:b1:b2:f5:b9:85:11:
c6:0b:f1:38:e8:cf:12:bc:bc:24:91:27:3a:08:74:
52:5e:ee:d2:0e:46:38:1c:26:10:96:43:2e:3e:70:
9b:c9:95:f4:46:b2:84:11:3a:19:87:69:fc:52:ad:
1b:7c:87:ce:98:99:98:c0:95:7d:76:aa:ff:d8:4b:
79:ed:b0:31:f1:89:54:3c:43:1d:0d:22:a3:0f:41:
a1:35:b2:10:28:f4:58:12:13:81:0c:6a:34:80:36:
f5:92:2b:46:b1:ba:9f:88:ea:d8:4d:6e:90:3e:8d:
fe:03:3d:32:b9:27:54:04:83:fd:53:da:04:7b:cc:
c0:da:fc:37:77:b9:b6:c3:34:a7:ff:90:02:c9:8c:
5c:01:45:07:62:93:2e:1a:54:1f:c0:b8:ff:10:ef:
12:3a:4d:15:47:50:8f:4b:cf:e4:63:fc:3b:bf:04:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:DC:D1:65:50:C6:FE:67:BA:72:7C:B8:CE:C2:51:5C:A7:EA:F9
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/OU3c0WVQxv5nunJ8uM7CUVyn6vk.roa
sbgp-ipAddrBlock: critical
IPv4:
125.2.224.0/19
Signature Algorithm: sha256WithRSAEncryption
32:3d:ec:d1:d7:3f:da:f2:05:b7:80:1f:fb:15:81:a8:bf:5c:
c3:fd:8f:ee:67:43:5f:ae:01:59:75:5f:e4:a4:83:88:d3:1a:
d1:bc:ba:a5:43:fd:43:51:ed:ab:35:14:48:d6:8f:1c:14:77:
19:a7:15:50:94:36:d3:18:f0:93:26:9a:26:76:20:1d:e1:41:
ab:2c:5f:df:47:01:87:8d:14:99:4c:f2:3a:62:84:0e:f6:e0:
0d:da:6f:22:cd:be:14:a7:f9:d6:dd:2d:5c:87:1b:39:78:a4:
d1:b4:ba:ac:91:33:f8:94:6b:06:0e:70:2a:e2:44:f2:bd:a6:
fa:d8:b2:a1:36:28:97:02:ed:5a:0d:a9:39:cd:c4:2e:3c:1f:
47:1c:5d:a2:10:4c:d1:7b:df:8d:97:a1:2b:1f:31:44:c3:73:
41:0f:0d:3f:fa:be:af:eb:93:26:4f:d7:8e:0f:4c:00:12:30:
76:b0:df:1a:ce:db:77:4d:68:08:83:6b:4b:06:9f:71:77:63:
44:8b:ec:09:3e:87:62:1b:1f:65:6c:f9:0b:c8:32:30:df:b6:
43:dc:3c:d8:77:31:05:ae:c5:84:d5:f2:97:1a:f3:e2:fb:5c:
1e:8c:dd:24:c1:58:06:15:42:7b:87:26:72:27:f3:28:9a:28:
22:44:f2:53
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw
ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNjAzMzEw
NzM4NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5NEREQ0QxNjU1MEM2
RkU2N0JBNzI3Q0I4Q0VDMjUxNUNBN0VBRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF558Y3Wiv4pipreAmkWARR/oXLK9nI0+DF9iIG3PVX5IKSAZu
6Jb4h9z2H/ewZcbe/Fog/JWvAuZlxsXk33PPaXf3TQnrWf5n4EL8HqKinlKNprGy
9bmFEcYL8TjozxK8vCSRJzoIdFJe7tIORjgcJhCWQy4+cJvJlfRGsoQROhmHafxS
rRt8h86YmZjAlX12qv/YS3ntsDHxiVQ8Qx0NIqMPQaE1shAo9FgSE4EMajSANvWS
K0axup+I6thNbpA+jf4DPTK5J1QEg/1T2gR7zMDa/Dd3ubbDNKf/kALJjFwBRQdi
ky4aVB/AuP8Q7xI6TRVHUI9Lz+Rj/Du/BIo3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOU3c0WVQxv5nunJ8uM7CUVyn6vkwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk
5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4
UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvODk3L09VM2MwV1ZReHY1bnVuSjh1TTdDVVZ5bjZ2ay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV9AuAwDQYJKoZIhvcNAQELBQADggEB
ADI97NHXP9ryBbeAH/sVgai/XMP9j+5nQ1+uAVl1X+Skg4jTGtG8uqVD/UNR7as1
FEjWjxwUdxmnFVCUNtMY8JMmmiZ2IB3hQassX99HAYeNFJlM8jpihA724A3abyLN
vhSn+dbdLVyHGzl4pNG0uqyRM/iUawYOcCriRPK9pvrYsqE2KJcC7VoNqTnNxC48
H0ccXaIQTNF7342XoSsfMUTDc0EPDT/6vq/rkyZP144PTAASMHaw3xrO23dNaAiD
a0sGn3F3Y0SL7Ak+h2IbH2Vs+QvIMjDftkPcPNh3MQWuxYTV8pca8+L7XB6M3STB
WAYVQnuHJnIn8yiaKCJE8lM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:42 2026 by rpki-client