
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/3WnDpQfFLvAL0g3KP8hm4J4sl80.roa
File: 3WnDpQfFLvAL0g3KP8hm4J4sl80.roa (raw, json)
Hash identifier: 3UzW5PoHDxHKvQHSJyDVV8T/10DlG4zcpLcCNE0t9vs=
Subject key identifier: DD:69:C3:A5:07:C5:2E:F0:0B:D2:0D:CA:3F:C8:66:E0:9E:2C:97:CD
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: F5
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/3WnDpQfFLvAL0g3KP8hm4J4sl80.roa
Signing time: Tue 31 Mar 2026 07:39:01 +0000
ROA not before: Tue 31 Mar 2026 07:39:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2518
IP address blocks: 119.238.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Mar 31 07:39:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DD69C3A507C52EF00BD20DCA3FC866E09E2C97CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:8c:e0:3f:a1:3f:9f:ca:5e:07:8c:2a:ef:
75:85:f7:5a:ee:fb:0c:be:52:7a:d3:7e:96:8e:6e:
5e:61:7e:18:27:8e:bb:8a:52:8e:54:6c:2f:d1:92:
5a:28:9d:7f:55:15:f6:a8:8b:fb:3a:83:be:03:43:
02:f9:3d:99:fb:0c:82:a0:13:07:d0:8c:4d:16:28:
4e:33:b6:1d:be:5a:c2:56:39:60:64:eb:24:53:c2:
b1:5b:d3:6e:8f:0d:9f:fe:a5:42:5f:d3:e7:e1:33:
68:96:1c:fe:e6:c1:86:ad:aa:f0:b5:31:96:1d:df:
13:3a:64:76:8e:e5:72:3b:60:6f:bd:d9:26:8a:b7:
09:0d:cb:f5:e1:32:6a:11:5d:f0:6f:e1:54:81:f0:
bf:4d:f2:8e:6f:6c:90:3b:6b:e8:9a:4c:0f:94:2a:
e8:68:47:60:e6:38:a7:43:fe:1f:2b:e7:19:32:8e:
9c:35:f9:db:c8:66:f9:e9:ea:3d:ef:56:d2:db:2a:
64:2b:d5:80:e9:b0:09:98:94:e8:4c:93:db:77:a0:
fc:7a:1d:68:df:ce:e7:c2:2c:4c:c4:10:bd:d1:63:
0c:d6:d4:9d:83:77:41:9b:62:a1:31:3d:5d:68:68:
e2:bd:a1:76:40:0e:c8:c5:48:1c:cf:de:8a:e2:91:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:C3:A5:07:C5:2E:F0:0B:D2:0D:CA:3F:C8:66:E0:9E:2C:97:CD
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/3WnDpQfFLvAL0g3KP8hm4J4sl80.roa
sbgp-ipAddrBlock: critical
IPv4:
119.238.0.0/15
Signature Algorithm: sha256WithRSAEncryption
77:60:06:66:b2:98:41:83:bf:0d:b7:ba:af:fb:a5:13:cc:41:
72:fa:ba:c0:d3:c9:4a:cc:d7:0c:7b:88:75:86:9d:90:f6:ae:
1f:6e:8f:08:2b:4d:03:16:d1:0e:c3:2d:4c:90:fe:8a:d7:48:
5a:f7:98:cf:49:bc:1b:95:d2:72:8e:37:40:ed:0a:7d:f8:ad:
77:cf:81:11:6c:b9:07:60:b3:88:fe:03:54:ce:28:a2:8a:83:
e2:bf:b8:7e:8c:8e:15:fe:d5:37:d9:44:ca:f2:bc:24:71:71:
45:ae:e1:ca:28:17:f5:03:9d:bd:d5:7d:0f:19:ca:a0:29:b6:
bc:59:ff:14:07:1d:67:60:c9:85:78:63:29:eb:b2:f5:07:b7:
68:75:1a:b2:42:35:1f:44:6d:45:24:a2:07:dd:e9:1b:64:cd:
e4:f7:e5:7e:99:b9:4d:5c:0e:91:bf:34:62:24:c9:35:ed:fe:
fb:b2:20:95:76:3a:df:34:21:ae:03:18:e8:a4:88:74:be:b0:
71:17:48:72:29:d9:f9:91:c1:0f:f1:e7:b8:8c:f7:5d:78:dd:
d5:cb:cf:3c:91:d3:89:dc:0e:c3:73:4c:a9:cf:2b:ba:19:bb:
af:87:54:94:83:69:32:66:98:51:8c:23:00:c6:7c:ca:9d:b0:
18:d6:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:25 2026 by rpki-client