
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa
File: tONJaQkoiPJjYT6wUGIQXXGc14Q.roa (raw, json)
Hash identifier: 0yRyCdpUDi9MNus2mFWCgIuJfnglQYWbuhi1aUt0/JU=
Subject key identifier: B4:E3:49:69:09:28:88:F2:63:61:3E:B0:50:62:10:5D:71:9C:D7:84
Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial: 6C
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa
Signing time: Tue 31 Mar 2026 07:49:29 +0000
ROA not before: Tue 31 Mar 2026 07:49:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7671
IP address blocks: 58.147.192.0/18 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Validity
Not Before: Mar 31 07:49:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B4E34969092888F263613EB05062105D719CD784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:0d:b9:93:54:1c:9b:49:ee:95:67:60:f8:
a5:3a:9e:4b:1d:e9:c8:bb:68:51:bb:e5:b2:39:65:
8f:dd:3b:23:42:b1:f2:af:12:f8:fd:fc:c5:91:a9:
fa:66:40:3a:e8:f1:b1:cb:24:ed:47:2b:82:b8:3e:
2e:89:f7:35:f8:6e:01:85:f0:31:82:b5:2a:50:f3:
d0:88:67:2f:b9:bb:57:fd:4c:07:bc:4f:d9:54:47:
dd:a7:5b:0f:4c:8c:75:c4:4d:c7:c5:f7:3e:1a:d1:
ce:1e:06:f3:a2:20:bf:b5:52:23:30:c8:fe:c8:36:
f7:da:a9:08:36:04:f6:1c:71:54:83:23:26:63:42:
88:23:88:39:a4:69:0d:65:29:7a:a9:d2:dd:bb:77:
e9:08:3a:84:54:6c:ec:90:50:6b:cc:d4:37:b1:f8:
9c:bf:61:f9:f3:a6:65:b4:ad:cd:fa:a2:fd:4f:46:
43:4a:e7:88:c7:6b:65:af:56:63:83:86:c3:d3:83:
dc:6a:17:59:8d:4b:12:3e:c4:fd:b4:17:b8:71:8a:
2e:ed:d4:a5:7e:03:97:c6:2c:ad:f3:fb:70:e0:a9:
c8:db:4d:d2:d6:e4:3f:de:30:a3:d8:52:70:9e:3a:
5a:53:94:02:98:a6:cb:0b:c9:7a:b8:00:ae:da:f9:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:49:69:09:28:88:F2:63:61:3E:B0:50:62:10:5D:71:9C:D7:84
X509v3 Authority Key Identifier:
keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa
sbgp-ipAddrBlock: critical
IPv4:
58.147.192.0/18
Signature Algorithm: sha256WithRSAEncryption
45:d4:c4:09:9c:57:cb:c8:2d:f4:04:62:2a:cc:1f:32:6d:2d:
6a:c6:09:b5:81:89:f2:ca:cd:57:0b:39:c8:96:17:ba:28:6e:
4a:6b:35:b8:0e:c3:d2:25:11:f9:f8:a4:fa:b4:27:94:2a:23:
30:58:5f:50:ab:29:d3:3b:14:71:0d:f1:39:5d:ff:24:89:cd:
d4:87:41:6a:06:95:2e:54:33:30:5e:6e:84:3e:9d:4c:de:3b:
e2:78:0f:8b:63:e0:a7:f2:e3:58:57:45:f1:0c:9d:85:a6:17:
c2:c8:93:01:c1:b8:10:1f:c0:6e:c3:06:f0:85:07:ec:1b:c1:
95:9e:24:ee:73:71:ca:31:17:ce:75:97:5d:9d:34:4b:f0:24:
9d:93:fb:c9:2d:8e:41:af:92:26:84:4d:4c:cd:bc:80:0f:c6:
0b:3f:3a:41:2d:88:a1:30:24:2c:20:7a:56:2c:70:5d:fb:f8:
58:99:57:1f:30:d3:af:da:d0:66:0c:d4:cb:57:ed:21:cd:be:
b0:3f:7b:d2:95:e4:78:c2:47:96:a3:09:13:a1:c5:e9:a3:ca:
a1:95:f8:7d:6b:ae:04:3c:d5:5f:2e:a7:66:53:14:f1:77:de:
77:0e:91:db:69:d2:b9:59:77:d7:6c:3b:d1:18:b2:37:a2:f7:
dc:0b:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:42 2026 by rpki-client