
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa
File: Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa (raw, json)
Hash identifier: 8Bgm7AfgHQhrQeeFmBfi0xw3MWrkfiA9yuik7spBf/U=
Subject key identifier: 4E:DD:43:AC:E4:55:96:C2:89:75:D9:3B:99:0D:2D:06:4A:BE:E4:43
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 5D
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa
Signing time: Tue 31 Mar 2026 08:35:47 +0000
ROA not before: Tue 31 Mar 2026 08:35:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23783
IP address blocks: 61.11.160.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Mar 31 08:35:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4EDD43ACE45596C28975D93B990D2D064ABEE443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:91:0d:d4:5c:18:9f:97:08:25:97:ac:94:
41:2d:89:9c:1f:5e:36:72:de:01:a2:b6:87:b8:ef:
cd:ca:24:fa:8a:a0:c8:ff:d1:db:af:56:02:9f:46:
c0:2a:8e:d0:77:80:99:89:6d:66:0f:07:49:25:9a:
aa:65:91:78:29:8c:16:62:2f:4f:11:31:07:a3:9d:
70:6d:4e:43:bd:11:37:54:8e:aa:21:3e:35:6d:53:
bd:2d:e3:92:e3:2a:a4:29:6b:29:5c:b8:ad:a5:39:
a2:d1:12:66:0b:f8:67:81:81:91:e4:dc:88:e3:8f:
10:5b:82:3e:84:d9:2a:fa:6d:e9:b5:33:28:9a:99:
23:36:e4:ab:41:21:fd:b3:ff:9f:68:28:1e:0c:c2:
c0:91:9b:0c:1f:59:07:83:e8:fd:62:28:6d:e7:04:
b4:4d:d0:0a:b3:a4:de:4b:a2:3f:71:7a:6e:a0:1d:
24:c5:3a:a3:2f:8d:74:1b:de:c9:78:55:90:32:ca:
cb:2d:42:db:3c:04:ed:0c:90:a8:90:6e:28:ce:ae:
4f:07:0b:65:b5:b6:97:65:d0:df:df:e9:a3:69:af:
06:57:64:47:bd:33:e0:96:7d:6c:b4:e2:d3:fe:91:
cb:4c:76:c2:9e:03:a3:80:72:e7:12:39:b7:f0:a2:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:43:AC:E4:55:96:C2:89:75:D9:3B:99:0D:2D:06:4A:BE:E4:43
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa
sbgp-ipAddrBlock: critical
IPv4:
61.11.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:58:33:96:42:bd:dc:e5:cc:1b:c3:6f:e3:01:3c:a9:c3:4c:
d6:f8:ab:c1:6d:88:0b:66:bb:50:fe:ae:19:b0:d9:04:e0:d1:
5e:54:c3:d0:eb:5f:9b:47:15:24:11:a0:1a:25:87:3f:a3:bd:
3f:98:ef:58:35:dc:d3:a9:ed:00:ab:85:46:55:e3:08:0b:80:
9c:eb:fe:17:8a:64:bd:c0:de:b3:97:af:e6:09:98:d2:c7:d9:
7a:b8:9c:78:3b:1c:4c:7a:c2:2c:9d:cf:d6:cf:b4:d4:99:20:
0c:f4:1e:43:d4:f0:a3:70:1c:25:ac:92:4e:ca:f4:d7:33:76:
f8:74:9d:63:e9:03:21:47:b1:d2:dd:49:76:7d:6b:0e:2f:50:
43:06:6a:9b:1b:93:3c:a2:fc:0a:1a:15:30:46:f2:04:11:a4:
a4:6b:97:df:70:fe:86:79:da:44:a2:b8:aa:e0:b6:57:3e:b3:
00:bf:ff:f1:05:62:ca:e3:a3:56:6b:cb:80:92:68:47:43:d1:
76:ee:f8:33:49:4d:5e:48:32:c8:35:27:27:70:49:c4:7d:62:
e9:5d:86:de:ee:a0:68:7f:12:d2:3f:c0:22:d4:6a:09:38:a8:
a7:8a:fc:c8:24:40:a2:61:6b:37:95:31:6a:ab:fd:1f:83:2c:
2d:1c:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:02 2026 by rpki-client