
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa
File: tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa (raw, json)
Hash identifier: J5p90hTygo4eJWUNPX6xu+GBKarOgcMDz3iHerlpXCw=
Subject key identifier: B5:D1:5D:7D:3D:A7:80:BE:94:5E:92:34:5E:D4:A1:FE:D4:3C:71:D3
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 67
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa
Signing time: Tue 31 Mar 2026 08:34:11 +0000
ROA not before: Tue 31 Mar 2026 08:34:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 180.235.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Mar 31 08:34:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B5D15D7D3DA780BE945E92345ED4A1FED43C71D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:2d:fe:18:f2:5a:4c:98:ed:3b:e4:d5:3e:
7b:ba:85:1e:d7:98:37:8f:27:35:56:bc:70:ae:9e:
9d:99:a0:3c:f8:1d:e1:71:0d:9c:c2:fd:32:22:6e:
23:c6:81:7e:68:a7:c0:87:4a:dd:bf:48:f9:6b:00:
db:76:62:b2:42:8a:74:72:ca:da:93:3e:15:2c:9a:
b2:29:bf:0c:d0:aa:f0:8f:4c:ac:0e:5b:8b:dd:b2:
13:54:a0:80:17:ed:88:f2:b8:ce:fa:91:3e:2a:45:
0c:fd:b7:84:b0:d0:d5:c0:77:92:cc:23:b0:ce:b2:
33:b5:bc:2a:27:cd:cb:dd:a4:2f:9d:cf:e1:e0:58:
c0:66:64:43:31:4e:c4:4d:bd:4a:b8:7c:09:9b:cc:
2b:4b:dd:54:41:a6:26:8c:30:1f:12:cc:ae:f9:36:
73:4e:3b:4c:72:d3:02:0b:b7:45:1c:d9:d7:fd:73:
c4:a3:0d:eb:da:2a:09:03:d2:61:0e:99:59:dc:79:
9c:80:53:de:76:8d:4d:22:0f:3e:4f:dc:e7:6a:b2:
3d:b6:cc:bb:6e:ad:60:00:37:34:4e:83:3c:d2:f2:
71:89:6b:09:12:a4:d0:78:35:dd:12:40:f8:bb:97:
f1:8e:89:04:62:05:b8:e8:d9:54:11:1f:19:61:29:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:5D:7D:3D:A7:80:BE:94:5E:92:34:5E:D4:A1:FE:D4:3C:71:D3
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa
sbgp-ipAddrBlock: critical
IPv4:
180.235.224.0/19
Signature Algorithm: sha256WithRSAEncryption
92:b5:e2:0a:43:9d:63:fb:cd:08:fd:f6:4a:2e:76:bc:fb:8c:
20:2e:33:87:48:13:9d:eb:43:77:ba:4a:8e:a0:d0:83:79:67:
1b:58:70:64:77:41:cf:a8:fc:de:43:3b:3c:84:35:1d:82:a3:
fa:c3:0e:4b:db:c7:23:ab:87:85:24:6b:64:43:b6:8a:04:7b:
4b:90:19:da:db:d1:23:d8:87:de:67:e8:86:2b:da:70:2c:0f:
01:48:1b:8d:3a:75:27:6e:4b:cb:bf:50:0e:ef:2e:65:81:d4:
bd:39:3b:5e:52:5a:03:e9:f4:13:cd:85:8b:e5:8c:fe:0f:91:
f2:78:37:ec:ea:10:d3:d8:e1:ae:fa:b7:ba:19:f1:09:04:df:
b7:6f:77:7c:eb:f6:31:82:33:bd:a4:b5:12:a6:af:47:69:c5:
a7:b9:43:f9:be:b6:9e:99:3a:07:20:80:6e:3a:c2:5a:2c:2e:
10:51:d3:a2:66:6e:0b:47:ed:a0:14:f3:fb:aa:4a:22:9d:10:
e9:34:06:df:48:93:bb:b3:4b:99:42:89:21:b8:1f:15:2b:41:
9b:93:b5:35:d9:39:0d:a0:76:a3:10:e5:2c:85:1c:78:73:d2:
9f:aa:77:46:67:c2:a3:5d:03:ff:e0:79:9e:71:05:d6:a8:1b:
0c:07:56:b3
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI2MDMzMTA4
MzQxMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjVEMTVEN0QzREE3ODBC
RTk0NUU5MjM0NUVENEExRkVENDNDNzFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOzLf4Y8lpMmO075NU+e7qFHteYN48nNVa8cK6enZmgPPgd4XEN
nML9MiJuI8aBfminwIdK3b9I+WsA23ZiskKKdHLK2pM+FSyasim/DNCq8I9MrA5b
i92yE1SggBftiPK4zvqRPipFDP23hLDQ1cB3kswjsM6yM7W8KifNy92kL53P4eBY
wGZkQzFOxE29Srh8CZvMK0vdVEGmJowwHxLMrvk2c047THLTAgu3RRzZ1/1zxKMN
69oqCQPSYQ6ZWdx5nIBT3naNTSIPPk/c52qyPbbMu26tYAA3NE6DPNLycYlrCRKk
0Hg13RJA+LuX8Y6JBGIFuOjZVBEfGWEpQlcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS10V19PaeAvpRekjRe1KH+1Dxx0zAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDAvdGRGZGZUMm5nTDZVWHBJMFh0U2hfdFE4Y2RNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbTr4DANBgkqhkiG9w0BAQsFAAOCAQEA
krXiCkOdY/vNCP32Si52vPuMIC4zh0gTnetDd7pKjqDQg3lnG1hwZHdBz6j83kM7
PIQ1HYKj+sMOS9vHI6uHhSRrZEO2igR7S5AZ2tvRI9iH3mfohivacCwPAUgbjTp1
J25Ly79QDu8uZYHUvTk7XlJaA+n0E82Fi+WM/g+R8ng37OoQ09jhrvq3uhnxCQTf
t293fOv2MYIzvaS1EqavR2nFp7lD+b62npk6ByCAbjrCWiwuEFHTomZuC0ftoBTz
+6pKIp0Q6TQG30iTu7NLmUKJIbgfFStBm5O1Ndk5DaB2oxDlLIUceHPSn6p3RmfC
o10D/+B5nnEF1qgbDAdWsw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client