
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
File: 3nIikKwnooBcMM8ZtgWH8-gae9o.roa (raw, json)
Hash identifier: U/mgiWgqbTVjflA/eOWV2fA+jWOKv8qANZalHmtKzAM=
Subject key identifier: DE:72:22:90:AC:27:A2:80:5C:30:CF:19:B6:05:87:F3:E8:1A:7B:DA
Certificate issuer: /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial: 16
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
Signing time: Sat 21 Mar 2026 07:46:52 +0000
ROA not before: Sat 21 Mar 2026 07:46:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18077
IP address blocks: 122.250.0.0/15 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 12:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Validity
Not Before: Mar 21 07:46:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DE722290AC27A2805C30CF19B60587F3E81A7BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:de:9c:2c:2d:a8:d3:db:e5:e8:e2:d1:2e:
c7:8f:d7:d4:81:f5:e3:2a:af:24:8a:ca:4f:31:0f:
59:63:bd:d7:26:d8:18:57:1d:0d:69:38:33:d0:e0:
82:30:d4:b3:03:d7:d2:f0:02:18:b0:65:ce:7c:1f:
2a:a5:cf:3e:05:3c:79:97:fa:ec:52:ad:85:7e:37:
9f:a8:ee:f0:20:85:aa:7f:83:13:12:e5:33:6c:93:
7b:75:b6:e2:23:71:af:e3:c0:47:e4:9d:92:81:03:
de:47:22:f7:df:d5:b3:2e:29:8a:04:ca:42:c8:62:
f7:99:bf:fb:54:61:f1:89:27:28:cc:ca:bd:bd:29:
15:f2:c8:5f:ff:56:0a:09:de:9a:5a:c4:78:7b:f0:
88:35:8b:85:83:0c:23:1f:9f:ec:e0:ab:fb:af:72:
43:45:4b:21:0d:16:98:f1:97:aa:3f:af:ed:dc:0f:
38:27:13:69:a7:b0:1d:12:b8:6d:0e:96:b9:bd:e4:
96:13:0d:07:05:02:7b:82:a2:b3:7f:60:d0:87:d0:
5d:dd:e6:77:d4:91:2a:9d:cd:ba:df:53:51:f1:ea:
5b:9f:68:97:77:d1:34:76:e8:07:1c:92:6c:30:ab:
cf:2b:2f:ea:8b:9b:cc:27:8c:11:d4:65:a1:d4:ca:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:22:90:AC:27:A2:80:5C:30:CF:19:B6:05:87:F3:E8:1A:7B:DA
X509v3 Authority Key Identifier:
keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9c:ba:7b:83:88:f2:7e:51:9a:2f:f8:2c:d5:ff:3c:a3:eb:f1:
1d:44:06:10:ff:b8:07:e3:3c:5b:e6:cf:2f:0e:ac:bf:c1:6b:
79:00:11:e2:68:0c:c6:f3:24:2e:76:78:61:56:28:04:4a:2b:
79:71:03:57:ab:51:47:e6:c5:28:ea:4d:aa:a5:03:fc:b5:77:
8c:14:e0:b9:6b:fa:f5:02:0a:39:2f:40:4b:48:e5:b9:6e:d2:
3a:c3:77:8f:c5:4d:d7:32:66:eb:b5:36:c6:ad:56:6c:ca:56:
f0:df:99:42:49:78:58:a0:c1:ad:1f:74:98:fa:d3:23:8b:73:
09:af:0e:c0:a9:c2:65:db:ed:22:d5:9b:b9:e8:88:bd:7f:24:
45:a8:05:56:85:1b:f5:56:22:89:da:93:30:58:ad:b6:c2:1c:
37:50:7f:61:8e:b6:84:48:03:4e:be:a1:5d:38:12:07:60:f9:
0f:d0:bb:3d:3a:97:8c:56:07:5e:79:e2:5b:0f:00:41:dc:8d:
1f:53:be:a6:d2:12:7d:8b:79:c1:ee:92:03:1a:8b:eb:f9:04:
7f:39:ba:48:49:93:5a:c6:7e:9f:e9:17:79:da:43:8b:57:34:
24:2c:48:37:0a:4b:76:d9:99:e2:d9:38:74:13:1a:f1:8a:9f:
1e:f9:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:20 2026 by rpki-client