
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
File: TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa (raw, json)
Hash identifier: x9i9LqCOZsJxjPWU3Xw5wVhj69mV2luD31pHNMLbhEg=
Subject key identifier: 4C:3D:00:24:0F:95:BD:50:28:03:37:D3:47:87:53:04:0D:70:04:AF
Certificate issuer: /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial: 24
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
Signing time: Sun 01 Feb 2026 01:33:48 +0000
ROA not before: Sun 01 Feb 2026 01:33:48 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 63779
IP address blocks: 103.139.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Validity
Not Before: Feb 1 01:33:48 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=4C3D00240F95BD50280337D3478753040D7004AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:2f:f7:ff:9c:44:e1:76:39:76:70:8a:f9:
6f:84:c7:13:be:2d:7f:0b:e8:71:6c:db:fb:ed:32:
15:e6:07:e8:39:ca:a7:c2:a8:00:21:38:ef:54:ef:
b0:a8:fe:7b:ba:2f:ac:5f:59:00:b0:28:2c:5d:dc:
dd:cc:30:67:75:67:b7:ef:ae:28:c2:d2:b6:d0:56:
3c:14:fc:07:4e:bf:cd:60:75:2c:4f:ef:9d:fe:9d:
98:5d:be:70:6d:08:5a:25:e4:b0:13:35:eb:13:7c:
87:cb:c5:82:68:d0:55:2b:d3:41:03:64:d6:97:39:
bd:6e:8f:71:6e:e4:bd:4a:e5:e0:b0:a1:cb:8a:b0:
bf:6e:0b:65:2e:d0:75:92:4b:57:5b:bf:8f:50:2e:
d2:54:bd:a5:63:46:01:fa:5a:a5:b8:e0:aa:fd:e9:
89:f9:60:06:3e:b7:fb:27:37:bd:d3:4b:b9:14:12:
07:0c:a1:8a:5d:13:ed:8a:ab:06:1d:a5:8f:87:70:
e3:7b:fd:38:2e:3d:98:5b:9c:2f:33:76:6c:9d:25:
a4:6d:55:7a:a3:95:7a:a4:01:58:83:fb:ce:c1:2f:
9b:8f:9f:2d:4c:bb:a7:1f:70:af:93:58:5f:c2:6d:
57:6d:27:ef:93:51:d3:6e:e5:30:4a:72:52:ad:ba:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:00:24:0F:95:BD:50:28:03:37:D3:47:87:53:04:0D:70:04:AF
X509v3 Authority Key Identifier:
keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.238.0/23
Signature Algorithm: sha256WithRSAEncryption
78:30:b4:0e:30:bd:0f:18:9f:79:e5:5e:c1:93:32:d5:2a:66:
16:2a:4c:c3:31:8e:58:e3:a8:c3:4b:bd:ef:56:31:36:61:1d:
6f:3e:29:07:7f:59:06:3d:08:91:a9:89:1c:76:97:4f:9e:87:
b4:63:78:2e:f5:77:79:a4:ad:53:7e:c4:19:f3:29:a3:0d:e9:
f0:12:06:26:d5:c6:49:b7:93:21:27:0f:47:bf:02:90:71:6f:
06:cb:69:cd:d5:93:cf:42:70:a9:37:e4:30:a5:f2:77:a4:20:
21:9e:c7:5d:19:5f:fb:9a:c4:d6:5a:75:f5:bb:84:64:00:1a:
0f:e8:9a:46:67:26:d0:15:43:fa:8e:23:e9:58:c9:e2:f7:4d:
76:47:7a:e6:4a:02:7d:bb:8a:44:2b:cc:21:a8:31:76:53:e1:
38:e2:81:56:ef:74:04:f4:5f:c3:9b:1a:2c:1e:27:4b:50:4d:
cf:a4:8c:b0:8a:5b:d8:b8:44:67:d2:f2:43:6d:2d:a5:bf:45:
9a:fd:b8:24:8a:f4:02:dd:f9:0c:86:5c:5e:a6:20:4a:4b:50:
cf:fc:45:2d:76:d9:dc:6c:6b:54:30:65:84:14:6f:ee:ba:5e:
23:e1:15:48:aa:a0:de:cd:1c:87:7b:f6:6c:ab:f0:04:50:fe:
22:e5:2d:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:38 2026 by rpki-client