
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa
File: tlX4nvmHxaM91TMe6OfDjKe2BM8.roa (raw, json)
Hash identifier: WVQIJgxIWhDPn1AJkAtEHtmMn/Nof+WMMrZ2hMfvguk=
Subject key identifier: B6:55:F8:9E:F9:87:C5:A3:3D:D5:33:1E:E8:E7:C3:8C:A7:B6:04:CF
Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial: 37
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa
Signing time: Tue 31 Mar 2026 08:42:32 +0000
ROA not before: Tue 31 Mar 2026 08:42:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17529
IP address blocks: 124.241.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Validity
Not Before: Mar 31 08:42:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B655F89EF987C5A33DD5331EE8E7C38CA7B604CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:89:28:b0:48:27:94:d8:04:c4:8a:cd:57:
76:9b:7d:58:64:39:42:89:57:b8:14:ba:30:ca:49:
8a:a4:b7:ee:f7:32:5b:c2:d7:90:46:78:c9:b6:e8:
c1:b8:28:61:86:a1:92:c5:c6:52:b8:37:87:9b:ed:
f3:f0:bc:e9:e2:56:90:3d:40:19:66:e3:98:96:af:
ba:9a:68:16:36:3f:81:ff:e7:5b:a8:ba:b2:e6:e9:
c1:78:ce:10:84:02:e6:b4:f2:a5:08:81:ce:7b:b4:
53:78:f3:c5:14:a3:2e:65:c4:a3:34:fd:03:9b:00:
ef:da:60:bd:47:77:d7:6a:e8:7c:fe:be:82:e7:77:
a8:74:2c:3c:35:11:d1:f0:fc:33:92:0e:02:b9:a8:
90:b6:0f:f1:21:ae:43:1a:a4:22:02:dd:d5:2a:d0:
b7:93:09:b2:93:ab:cf:6d:fa:73:35:57:1d:30:c2:
43:08:d2:ce:95:05:ce:a8:80:80:c5:95:59:45:e6:
8e:8b:e0:d6:36:d3:4b:55:45:93:96:b0:a3:4a:ff:
65:cb:e7:35:45:fb:8c:1d:6d:7b:30:93:90:78:39:
35:4d:bc:1d:8c:89:87:8a:fd:bd:86:2b:e1:14:6f:
cc:f8:b9:5a:f6:96:84:95:4f:17:ee:96:7b:70:31:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:F8:9E:F9:87:C5:A3:3D:D5:33:1E:E8:E7:C3:8C:A7:B6:04:CF
X509v3 Authority Key Identifier:
keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa
sbgp-ipAddrBlock: critical
IPv4:
124.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:27:35:13:ea:9f:b1:3a:19:cb:01:69:5e:b7:18:69:8a:60:
83:68:68:6c:67:95:09:f1:21:d9:51:0e:ae:93:30:ad:f3:73:
63:73:41:da:19:88:f4:e3:93:5c:32:01:ae:58:4d:19:db:d2:
77:49:36:85:d6:e6:e6:54:98:a5:f6:06:65:1d:fd:8c:5d:84:
8c:a3:a3:60:03:1f:d8:4d:5f:81:c4:82:61:eb:99:bd:3e:80:
28:2b:c9:02:71:ad:71:b1:18:a4:fd:d6:8c:57:bf:cb:cc:2c:
b9:ac:e4:97:27:1b:db:d2:1c:ee:63:75:64:15:4d:5a:b1:94:
8b:02:b2:c7:33:0f:98:57:e9:48:ba:18:b9:e0:d2:f4:bd:4a:
2c:e5:31:f4:3c:dc:af:0c:bf:83:50:de:37:22:30:a2:0e:0e:
21:9a:7c:fd:f1:45:2c:31:04:33:36:bc:36:ac:e6:18:4a:a0:
01:17:7d:4f:23:28:db:58:c3:2e:13:c7:53:8c:cf:8b:20:d5:
4b:4d:6f:4c:94:14:ea:fa:a1:38:42:71:65:0e:d9:c3:77:ad:
aa:5a:bb:8e:ea:5e:be:37:37:09:6d:36:c9:53:b2:df:e6:6e:
8f:aa:61:47:6e:4e:f8:bc:7f:93:0f:18:6a:af:82:82:80:15:
a9:d5:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client