
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa
File: tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa (raw, json)
Hash identifier: JFpNLNcuB1yl+sb0G4Ji9xW6UOmmkaAk12cZlf5AHHk=
Subject key identifier: B6:C9:D6:49:F1:FC:41:57:4F:C0:3D:E3:47:52:EF:C6:3D:8A:54:F1
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0138
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa
Signing time: Tue 31 Mar 2026 07:47:45 +0000
ROA not before: Tue 31 Mar 2026 07:47:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 3949
IP address blocks: 153.254.80.64/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B6C9D649F1FC41574FC03DE34752EFC63D8A54F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:61:c4:89:12:45:b9:90:74:1f:4c:6b:55:
4b:8f:1e:43:5c:e7:af:7c:43:fd:53:a4:1f:e1:09:
c1:54:ee:cc:4c:9d:48:81:2c:6a:90:33:a7:25:ea:
1a:3e:ad:e8:69:9f:f9:8f:5e:10:3e:59:47:98:d1:
5e:d0:58:7a:6c:2b:a6:ac:35:2b:08:7d:30:3c:31:
a6:01:5f:66:55:ad:a2:cc:c5:17:b1:d3:2b:33:77:
71:12:f4:5a:17:e7:a7:14:3a:cd:19:5d:fd:54:15:
81:00:78:70:9b:ba:c3:ed:d5:45:00:5a:cb:55:87:
ec:5b:93:e6:04:e1:c8:1d:60:c5:fa:21:b2:82:ac:
81:2f:fb:c4:1b:3e:d9:0c:10:15:e1:46:45:96:e2:
5b:3d:c4:5b:6e:67:06:f8:01:e1:94:61:40:3f:67:
47:dc:45:a9:71:86:83:73:e3:f7:fe:1a:8a:43:9c:
89:14:0a:2a:98:fe:8b:a6:10:3b:7c:9c:9c:9d:74:
29:ae:eb:f4:d6:1f:9a:c6:8a:9f:20:3e:6d:58:12:
5c:8a:a2:71:1c:8f:97:24:1d:11:f1:80:08:05:81:
86:9e:0d:ce:10:cc:9c:cf:4a:39:c3:45:e3:3a:0c:
55:1d:e7:59:5f:0a:a9:58:72:0a:79:30:68:d4:29:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:D6:49:F1:FC:41:57:4F:C0:3D:E3:47:52:EF:C6:3D:8A:54:F1
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa
sbgp-ipAddrBlock: critical
IPv4:
153.254.80.64/26
Signature Algorithm: sha256WithRSAEncryption
a8:cd:eb:08:73:85:31:95:30:e5:a0:9c:d4:10:ca:4f:e8:79:
31:4e:f1:e3:f4:91:62:9a:a5:e2:3c:0b:d2:ae:c6:a1:ec:92:
6c:ff:4c:12:c9:0d:91:4b:0a:b3:82:8e:f2:4c:3e:94:71:42:
0c:4d:70:ce:6c:10:56:60:71:20:ff:28:53:07:3a:7a:a8:c8:
73:48:b8:c7:9d:31:b3:94:4e:7c:71:0d:cd:f2:0f:1d:cd:1b:
bc:53:6f:de:e8:1f:13:a4:03:69:3a:1f:2f:b9:6a:cb:d8:6f:
ce:d3:e8:a2:02:76:f9:8f:34:68:7f:01:1f:5c:3f:25:60:08:
e3:0b:db:e4:ae:23:16:69:14:26:6e:a2:76:a6:35:62:df:9b:
91:46:e0:12:d8:fd:70:3e:69:36:a0:81:0b:6d:e2:7f:bc:f9:
f1:e4:81:03:3a:13:6c:8d:61:2e:cb:18:5e:97:84:6b:5d:d3:
65:26:cb:4a:fc:64:a1:ff:d6:0d:4f:9e:42:46:ab:ac:15:56:
31:71:e3:fe:93:72:2b:01:25:1f:57:3b:ea:38:13:e7:98:23:
86:b6:92:91:fc:3a:f7:79:d7:12:8a:8d:65:56:b5:7d:d7:f1:
c6:ac:e9:72:fc:56:14:cd:1a:22:53:46:90:cd:6a:19:a1:3a:
fc:8a:61:51
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ3NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2QzlENjQ5RjFGQzQx
NTc0RkMwM0RFMzQ3NTJFRkM2M0Q4QTU0RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGu2HEiRJFuZB0H0xrVUuPHkNc5698Q/1TpB/hCcFU7sxMnUiB
LGqQM6cl6ho+rehpn/mPXhA+WUeY0V7QWHpsK6asNSsIfTA8MaYBX2ZVraLMxRex
0yszd3ES9FoX56cUOs0ZXf1UFYEAeHCbusPt1UUAWstVh+xbk+YE4cgdYMX6IbKC
rIEv+8QbPtkMEBXhRkWW4ls9xFtuZwb4AeGUYUA/Z0fcRalxhoNz4/f+GopDnIkU
CiqY/oumEDt8nJyddCmu6/TWH5rGip8gPm1YElyKonEcj5ckHRHxgAgFgYaeDc4Q
zJzPSjnDReM6DFUd51lfCqlYcgp5MGjUKVchAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQUtsnWSfH8QVdPwD3jR1Lvxj2KVPEwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC90c25XU2ZIOFFWZFB3RDNqUjFMdnhqMktWUEUucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGmf5QQDANBgkqhkiG9w0BAQsF
AAOCAQEAqM3rCHOFMZUw5aCc1BDKT+h5MU7x4/SRYpql4jwL0q7GoeySbP9MEskN
kUsKs4KO8kw+lHFCDE1wzmwQVmBxIP8oUwc6eqjIc0i4x50xs5ROfHENzfIPHc0b
vFNv3ugfE6QDaTofL7lqy9hvztPoogJ2+Y80aH8BH1w/JWAI4wvb5K4jFmkUJm6i
dqY1Yt+bkUbgEtj9cD5pNqCBC23if7z58eSBAzoTbI1hLssYXpeEa13TZSbLSvxk
of/WDU+eQkarrBVWMXHj/pNyKwElH1c76jgT55gjhraSkfw693nXEoqNZVa1fdfx
xqzpcvxWFM0aIlNGkM1qGaE6/IphUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:41 2026 by rpki-client