
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa
File: TF-FuVhkjx-R8YkgQ71R8guqBYw.roa (raw, json)
Hash identifier: IllLTfKeXPo2+H6Vs8lyOI2atdr8Ab0+huOWnoKfWtM=
Subject key identifier: 4C:5F:85:B9:58:64:8F:1F:91:F1:89:20:43:BD:51:F2:0B:AA:05:8C
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 011C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa
Signing time: Tue 31 Mar 2026 08:30:21 +0000
ROA not before: Tue 31 Mar 2026 08:30:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 202.213.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4C5F85B958648F1F91F1892043BD51F20BAA058C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:96:91:54:b2:bd:d1:b0:d5:28:3d:b3:58:
42:76:d1:45:70:f2:b4:f0:6f:f9:32:7d:13:97:1d:
50:9f:7b:d2:6c:0c:2e:c6:7c:9d:e7:9f:3f:86:22:
9d:a2:bd:ca:a6:66:8f:eb:94:01:30:17:fb:55:86:
8d:10:30:2a:ea:23:26:f3:ce:72:6c:2b:5a:5c:cf:
f6:12:37:43:a8:c2:ce:d9:21:7b:1d:67:b3:95:44:
18:0e:cd:95:88:36:5f:a9:21:c5:6c:1f:77:6f:49:
e2:55:07:9a:74:16:41:48:9f:41:4c:f4:7a:0d:3a:
1a:06:82:71:dc:70:96:bb:f8:80:0d:12:e1:0b:4e:
55:69:2b:71:a2:a2:e9:77:92:37:34:0d:89:73:24:
b6:fd:2b:a2:23:6f:25:62:0e:14:98:fd:65:55:0d:
13:08:03:68:cc:b8:7a:12:7d:5f:00:56:4c:71:38:
6a:36:b2:78:1e:86:ad:7a:c9:ec:ac:ff:bf:3a:b3:
1f:5a:cd:27:98:92:89:0f:b3:e0:84:7a:e4:b5:88:
4e:22:59:1f:a6:a5:d2:14:c6:91:1e:38:7c:2d:46:
d4:ef:e1:64:17:12:c7:a8:30:a0:3e:6a:96:c3:40:
54:aa:eb:ea:d6:ae:ea:09:60:2b:43:cf:26:79:8f:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5F:85:B9:58:64:8F:1F:91:F1:89:20:43:BD:51:F2:0B:AA:05:8C
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.213.128.0/19
Signature Algorithm: sha256WithRSAEncryption
30:db:5a:9c:31:e2:1f:cc:33:7f:a1:b5:8e:8d:58:7a:61:a0:
e7:0f:8a:f3:37:9b:30:21:9f:1c:0d:5e:0c:0c:11:80:d3:09:
0b:b6:54:e0:bb:f4:fb:a2:33:9f:09:fe:b3:8b:b8:f3:83:f6:
28:a9:42:cf:2a:24:4c:17:ad:9c:8f:fb:0e:3b:06:cf:fe:2d:
8a:23:5f:b8:ba:66:0d:f8:ed:15:90:c4:65:f1:78:cf:c6:a8:
27:72:5e:8f:fd:cd:b6:35:a7:b4:e8:7c:97:af:f6:9e:c7:27:
d3:4d:71:80:f5:0e:73:be:04:c8:1d:0f:c4:1f:63:7a:1d:0d:
6c:a4:c8:03:a3:c5:8a:5f:de:3a:94:a8:3c:5d:0f:f3:54:88:
b9:48:f3:82:b2:d8:5d:09:54:25:2a:ad:54:d5:3d:9f:55:63:
50:b0:f2:10:81:51:a2:a9:80:45:af:60:b1:b2:87:25:1f:0f:
b8:cc:e1:d6:17:1a:63:ac:23:53:00:4c:05:50:e3:4b:cb:65:
85:5e:99:4a:e0:fe:31:12:96:51:43:7e:40:af:f2:5c:63:e2:
a9:ea:f0:32:c6:e3:00:89:13:07:a8:54:a4:29:8c:4d:a5:f8:
b7:e5:65:d2:7c:08:fc:17:a3:91:04:7a:60:d5:0f:b2:65:e4:
82:9e:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:16 2026 by rpki-client