
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa
File: z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa (raw, json)
Hash identifier: J7s7jiQPXXyoSvTM0XutMVmiyR8De7DTFPDkQJCTOi4=
Subject key identifier: CF:E4:C3:F7:8F:D9:10:0C:3A:85:8A:A3:6A:A2:F4:57:B2:19:CB:A2
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: E9
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa
Signing time: Tue 31 Mar 2026 08:29:52 +0000
ROA not before: Tue 31 Mar 2026 08:29:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 116.91.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:29:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CFE4C3F78FD9100C3A858AA36AA2F457B219CBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:a2:51:0b:d9:14:73:54:be:9e:a2:4b:55:
4b:d8:05:00:12:b8:ab:26:d4:2e:be:68:34:87:7e:
95:a0:49:07:dc:77:de:b6:61:78:ff:6e:0e:cb:a4:
2d:78:d3:b9:54:57:41:33:de:77:47:3f:c5:48:56:
db:9a:c0:59:dd:da:18:e4:cb:8e:0d:ac:3c:9c:38:
14:31:8f:99:e5:c2:6d:67:bd:ad:73:eb:1e:39:a7:
a8:1d:0b:88:56:b7:d0:e1:69:76:e8:a8:86:8c:42:
ab:53:5a:c4:1d:fc:7c:60:b9:70:85:9c:92:d6:f2:
97:bc:3a:47:ad:e7:37:b3:6a:af:7f:b5:2a:9e:1f:
92:61:00:9f:41:7a:9e:df:66:5e:4e:7b:b8:84:8e:
32:fa:6f:d4:2b:d2:59:68:5e:b6:d0:a4:c8:31:49:
f2:4d:2e:e4:f0:65:0e:20:08:7c:48:c3:88:e5:02:
b7:d4:83:2a:43:99:65:f1:36:61:f5:b9:34:cb:5b:
bc:03:35:af:e1:ca:92:5d:1f:e8:00:3d:f4:9e:fb:
ad:b0:90:16:8b:96:ac:16:05:38:d9:98:25:d4:db:
07:ce:2b:6b:a3:39:e2:15:62:62:d6:a4:ad:bf:66:
cf:a2:db:f3:24:c8:fc:7f:d8:75:f2:ba:09:0f:ee:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:C3:F7:8F:D9:10:0C:3A:85:8A:A3:6A:A2:F4:57:B2:19:CB:A2
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa
sbgp-ipAddrBlock: critical
IPv4:
116.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
71:b5:ca:d7:c8:dd:18:67:f5:36:f5:4f:c5:d5:f1:d9:84:64:
86:bc:d1:fd:ac:17:3e:fa:59:ff:5e:cc:d8:65:3c:7b:94:b1:
17:a6:db:51:df:d8:b1:a2:16:63:06:d5:6a:30:28:b7:5b:70:
63:ca:e0:bc:da:6e:a8:62:24:47:c7:87:e3:e8:d8:d6:d1:05:
d5:03:3a:b4:9b:1e:3e:78:40:b7:dd:13:62:f2:fd:00:9b:bd:
69:b9:b4:34:60:95:06:84:74:50:79:2e:0f:47:5a:77:99:fc:
64:9b:c9:fd:82:7a:db:ac:da:64:a1:01:e4:27:a7:86:64:f5:
9f:3c:b5:f2:1d:52:a9:4e:46:99:ed:a2:a8:79:47:30:f4:8c:
29:13:3a:6e:b3:b7:7e:61:d4:e5:a0:dc:dd:fc:48:5b:6e:af:
04:69:71:9d:84:b9:df:70:8c:3b:19:76:16:35:3f:cb:ae:e5:
cb:0c:26:e6:fb:6f:a7:34:e3:a5:c9:32:9e:aa:8d:92:0d:a9:
73:35:e2:39:4f:be:43:3b:3b:9b:dd:c5:90:b6:3a:db:05:e7:
de:f1:e1:98:0a:0b:85:a5:4f:37:05:ec:83:73:0f:33:af:1a:
78:94:31:88:f0:f3:86:24:b3:b9:a8:cb:4f:a1:51:18:2e:cf:
4c:6f:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:20 2026 by rpki-client