
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa
File: 2tM2YI-J7ifzxZi794wFci0E-7Y.roa (raw, json)
Hash identifier: UchGPIBQEHBU1yiwiepLedE6vYOHoMJXAIcEB+BbuCg=
Subject key identifier: DA:D3:36:60:8F:89:EE:27:F3:C5:98:BB:F7:8C:05:72:2D:04:FB:B6
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 0138
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa
Signing time: Tue 31 Mar 2026 07:36:47 +0000
ROA not before: Tue 31 Mar 2026 07:36:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9370
IP address blocks: 153.121.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Mar 31 07:36:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DAD336608F89EE27F3C598BBF78C05722D04FBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:35:08:45:a1:d0:6b:ac:e4:94:c0:d6:c7:
f5:5f:79:c5:4a:73:70:1d:04:a4:fd:52:06:4a:1c:
0c:73:29:2b:d4:09:32:63:1b:c2:a7:17:05:f5:02:
45:b8:8c:de:58:76:15:6f:88:33:27:9a:3e:db:ce:
47:73:01:7e:ed:c9:f5:91:5e:04:29:2f:b1:60:63:
50:c9:68:6b:41:42:a6:07:9c:97:8d:42:24:af:0f:
0d:93:0f:86:72:7d:ca:81:fb:95:7a:8d:9d:ed:a5:
d1:85:fb:40:63:22:22:73:9e:86:62:85:e6:4f:01:
c6:2d:74:84:56:fb:2d:bc:50:ea:77:39:64:7e:a1:
ae:79:df:27:51:a8:d3:ab:ed:0d:99:56:59:88:c0:
51:32:04:35:8a:75:bb:14:ee:d7:ef:bc:05:e7:c6:
7f:ef:f3:ed:48:0d:e6:cb:6a:93:1f:78:50:5e:c7:
64:3d:85:1a:7c:23:ec:12:c3:90:57:67:3b:d1:23:
ed:8c:57:32:30:94:2a:7c:9d:fe:a5:70:aa:c6:14:
01:85:48:46:1f:ea:41:41:65:2a:ac:80:c7:16:79:
61:11:e4:11:a8:52:eb:da:75:13:64:ff:91:d2:dc:
19:66:1a:22:2c:22:c1:86:e6:f3:53:c3:19:98:8f:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:36:60:8F:89:EE:27:F3:C5:98:BB:F7:8C:05:72:2D:04:FB:B6
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa
sbgp-ipAddrBlock: critical
IPv4:
153.121.0.0/19
Signature Algorithm: sha256WithRSAEncryption
54:d0:fc:72:41:49:96:52:1c:51:3b:3a:8d:c7:02:59:9b:77:
61:d9:7e:24:b4:b0:fd:1d:63:0f:cc:f6:d5:30:19:da:de:e4:
56:52:21:34:34:ca:7b:38:1e:05:84:4d:2e:e5:85:f8:40:cf:
9f:65:75:e4:7d:30:8a:33:85:fd:52:53:72:4f:be:df:07:0a:
8a:23:91:5b:08:0b:c5:2e:54:a1:9e:71:e3:67:ce:26:76:df:
6e:10:29:d4:0b:87:ec:64:2f:be:c8:cd:84:b3:c8:07:c6:c2:
e6:a7:f7:38:a8:eb:db:9f:b7:f0:69:b3:d3:aa:c2:be:09:3a:
f6:d9:ac:06:ce:68:6e:b2:62:0a:08:b8:d4:c9:f0:33:5c:1d:
9e:45:be:bb:f8:8c:9b:87:c5:11:2d:73:00:6a:a8:16:65:d7:
05:cf:7e:4d:f3:0b:b4:35:ce:1a:3d:46:d9:72:c0:99:e3:bc:
4a:a2:42:c7:02:90:95:88:b9:13:82:fa:9b:73:d1:f6:9f:07:
71:e5:5b:c7:b2:55:b4:34:da:37:28:ab:5d:2d:82:e9:06:f9:
af:91:6e:5d:f4:31:fc:26:05:b9:3a:e7:56:88:94:c0:4a:3d:
16:a2:70:c2:b7:c6:ad:c9:1c:9f:c7:b0:f7:6e:c3:cc:7a:d0:
bc:5b:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:00 2026 by rpki-client