
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/3c162C3oNj3cAjDEx2R942KJepo.roa
File: 3c162C3oNj3cAjDEx2R942KJepo.roa (raw, json)
Hash identifier: JKY4m4DD+ELnmd/6eDKEFAsY5kUbo4YJdBfACDbZ/ro=
Subject key identifier: DD:CD:7A:D8:2D:E8:36:3D:DC:02:30:C4:C7:64:7D:E3:62:89:7A:9A
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 31
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/3c162C3oNj3cAjDEx2R942KJepo.roa
Signing time: Mon 27 Apr 2026 02:53:59 +0000
ROA not before: Mon 27 Apr 2026 02:53:59 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 116.92.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 27 02:53:59 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=DDCD7AD82DE8363DDC0230C4C7647DE362897A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:4f:ac:4b:20:d1:ce:be:d1:2f:b6:ca:c9:
70:dc:82:15:4e:39:0d:89:87:92:a1:c3:89:ee:b0:
db:d6:d8:1d:21:d7:be:05:35:c4:ec:4e:6f:23:26:
e6:8a:ad:43:e1:5a:ed:bb:6b:5b:85:ea:87:5a:e2:
78:db:fd:39:39:9d:2a:65:0c:96:c2:43:3a:ad:ed:
ee:3c:99:f4:4d:b0:03:77:5d:b0:e2:a4:a7:9a:5e:
2c:e8:25:26:b9:67:cc:89:5c:25:d2:7c:64:db:cd:
52:9a:9a:cd:61:b2:ab:57:c6:fa:1f:73:41:08:1c:
bd:87:ba:73:6c:1d:28:97:ab:cd:94:fd:87:6f:6d:
68:f6:01:6f:74:83:f8:c5:70:dd:21:b2:97:2c:97:
0f:47:ad:f8:77:40:6d:d8:12:46:48:ed:4b:a6:27:
c4:1d:eb:91:a5:1e:a7:f0:79:ed:d1:67:f9:ed:cd:
65:dd:05:65:79:1f:b1:0d:18:5e:e1:69:c2:f8:4c:
a4:78:5a:83:40:f4:da:af:f6:1e:1d:ff:fe:5d:75:
30:4e:5d:ae:b8:88:01:c4:36:28:db:0c:77:32:3f:
e4:cf:1e:32:06:9c:21:c7:47:c6:05:9a:ed:d6:7a:
40:b0:a9:dc:e5:fe:9a:2f:c0:ca:9f:df:f0:08:d7:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:7A:D8:2D:E8:36:3D:DC:02:30:C4:C7:64:7D:E3:62:89:7A:9A
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/3c162C3oNj3cAjDEx2R942KJepo.roa
sbgp-ipAddrBlock: critical
IPv4:
116.92.132.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f8:5b:76:8e:86:46:4b:0f:5c:7a:4a:6b:7d:1c:e5:2d:6d:
3d:65:23:2b:97:d4:47:0c:60:72:fd:6c:bd:6e:7f:6e:83:92:
c1:7d:9e:7e:2a:08:38:1d:d6:06:1f:ab:83:65:75:6f:64:a2:
ca:24:29:e6:11:ad:53:a1:e1:b8:ce:bb:93:3c:7e:71:ae:d7:
13:ea:6c:52:47:dc:56:c4:27:33:dc:ef:8e:cd:4e:dd:e6:54:
06:52:1b:5f:50:e8:bc:1a:d3:0c:c3:52:13:a4:00:de:75:c7:
66:bb:29:fe:b9:26:c9:02:46:4a:af:97:09:28:c0:56:9c:ed:
66:02:62:1e:bf:8a:85:99:34:67:5c:10:85:7c:73:72:a1:fd:
84:01:d8:b1:e6:d9:52:f8:90:1d:96:96:7d:bf:17:4d:f3:40:
65:b2:dc:3d:d0:95:db:7c:b4:0b:6f:e7:24:f5:42:33:87:69:
2f:55:37:94:20:b1:b0:3d:4b:38:cb:2f:e8:97:ff:60:04:9a:
f0:42:ff:2f:a6:82:ce:02:08:61:f0:ba:ba:2c:96:95:32:ce:
ff:59:ca:4b:01:ea:41:b3:fa:45:3b:54:73:ea:ac:10:74:70:
15:2c:c3:f0:29:e9:d7:8e:1d:98:63:14:b4:b8:f8:00:54:b3:
84:04:75:47
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDQyNzAy
NTM1OVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRERDRDdBRDgyREU4MzYz
RERDMDIzMEM0Qzc2NDdERTM2Mjg5N0E5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANmZT6xLINHOvtEvtsrJcNyCFU45DYmHkqHDie6w29bYHSHXvgU1
xOxObyMm5oqtQ+Fa7btrW4Xqh1rieNv9OTmdKmUMlsJDOq3t7jyZ9E2wA3ddsOKk
p5peLOglJrlnzIlcJdJ8ZNvNUpqazWGyq1fG+h9zQQgcvYe6c2wdKJerzZT9h29t
aPYBb3SD+MVw3SGylyyXD0et+HdAbdgSRkjtS6YnxB3rkaUep/B57dFn+e3NZd0F
ZXkfsQ0YXuFpwvhMpHhag0D02q/2Hh3//l11ME5drriIAcQ2KNsMdzI/5M8eMgac
IcdHxgWa7dZ6QLCp3OX+mi/Ayp/f8AjXkncCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTdzXrYLeg2PdwCMMTHZH3jYol6mjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvM2MxNjJDM29OajNjQWpERXgyUjk0MktKZXBvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRchDANBgkqhkiG9w0BAQsFAAOCAQEA
Yvhbdo6GRksPXHpKa30c5S1tPWUjK5fURwxgcv1svW5/boOSwX2efioIOB3WBh+r
g2V1b2SiyiQp5hGtU6HhuM67kzx+ca7XE+psUkfcVsQnM9zvjs1O3eZUBlIbX1Do
vBrTDMNSE6QA3nXHZrsp/rkmyQJGSq+XCSjAVpztZgJiHr+KhZk0Z1wQhXxzcqH9
hAHYsebZUviQHZaWfb8XTfNAZbLcPdCV23y0C2/nJPVCM4dpL1U3lCCxsD1LOMsv
6Jf/YASa8EL/L6aCzgIIYfC6uiyWlTLO/1nKSwHqQbP6RTtUc+qsEHRwFSzD8Cnp
144dmGMUtLj4AFSzhAR1Rw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:11:46 2026 by rpki-client