
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa
File: tlKdjo1B-fHAq9eyIGddzCs0X00.roa (raw, json)
Hash identifier: QG7DI10gTT+zE31Hm1nee7YKN5vHHKOA+r/n+MvEO+4=
Subject key identifier: B6:52:9D:8E:8D:41:F9:F1:C0:AB:D7:B2:20:67:5D:CC:2B:34:5F:4D
Certificate issuer: /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial: 62
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa
Signing time: Tue 31 Mar 2026 07:36:59 +0000
ROA not before: Tue 31 Mar 2026 07:36:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2519
IP address blocks: 202.233.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 22:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Validity
Not Before: Mar 31 07:36:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B6529D8E8D41F9F1C0ABD7B220675DCC2B345F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:7b:32:85:fb:8d:0b:96:71:53:83:d9:49:
c5:fd:01:48:f4:fd:fe:9b:6b:0b:48:a4:ef:14:64:
1f:bf:80:2d:50:e1:15:85:85:91:4b:38:12:63:b1:
9f:39:9a:a7:e2:4c:cd:8d:94:47:c0:e4:a4:96:34:
4b:77:f2:d8:52:53:c3:09:cb:03:81:8f:eb:c9:87:
39:09:3a:f7:a8:6a:d4:58:0e:14:ba:11:8e:56:cb:
f1:3b:18:76:03:20:bf:b5:d4:c3:99:cf:24:22:11:
9a:32:bb:62:c6:c1:0f:2b:8c:56:58:87:2c:f1:bf:
00:15:bb:16:b7:e1:4a:ae:bd:db:09:30:28:f0:ca:
91:a6:4b:81:6c:c4:6b:17:73:9c:c2:49:9c:f4:09:
3a:67:de:6c:55:13:be:23:8f:ad:2d:47:37:4b:ca:
39:48:1f:92:0d:6c:2a:15:89:78:46:93:17:d4:9b:
18:c6:6e:57:a7:69:35:ec:fe:d6:26:8c:14:ae:e1:
14:ca:ee:e0:10:d6:e0:9a:72:80:2e:2e:a2:79:0a:
9e:33:34:83:d1:d5:38:38:be:f8:71:cc:34:c0:69:
5f:64:c6:f9:de:f0:92:5b:b4:e4:02:05:6c:1c:cf:
99:53:44:e4:49:ed:91:18:99:69:bd:69:b0:bf:c0:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:9D:8E:8D:41:F9:F1:C0:AB:D7:B2:20:67:5D:CC:2B:34:5F:4D
X509v3 Authority Key Identifier:
keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa
sbgp-ipAddrBlock: critical
IPv4:
202.233.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8d:59:99:24:bc:4a:e6:7d:1a:2b:61:2c:07:3f:11:f1:24:
e0:73:1d:8d:22:be:1d:41:6a:c2:ea:49:05:1a:9b:0d:c1:8a:
11:02:7f:42:a0:6a:9a:39:41:3c:bd:50:99:e9:1b:da:58:53:
bc:da:e4:c9:1a:b1:65:16:f3:aa:7e:ab:14:3b:c0:05:46:1a:
dd:76:b2:a0:19:0f:f2:86:19:45:06:de:51:ed:10:3d:28:b0:
8c:05:bf:91:cc:4c:fb:d7:e3:69:59:90:75:ea:9d:cc:01:3b:
fa:bf:69:11:57:de:4a:20:49:69:f2:e1:86:0a:ca:91:a0:93:
97:0a:ad:f9:1b:ee:36:78:3f:02:ac:88:51:b0:77:54:9c:3e:
b7:0a:27:50:8c:c7:f5:fc:53:f6:28:9c:b4:2e:e6:47:71:ea:
a7:22:35:9e:bc:6a:be:e7:6b:66:1f:0e:5d:45:b0:25:35:4e:
ff:92:f1:0e:5c:29:a1:5d:55:44:d3:3a:c3:cd:a7:23:1c:e3:
b4:31:ca:f3:72:d0:58:67:ab:c1:56:e6:34:d1:0e:b3:fc:cb:
eb:ff:e8:22:ea:27:2e:a9:0a:a0:ac:b2:e5:f9:5f:62:46:2f:
ce:42:af:12:27:b8:52:cb:e4:42:7b:10:34:68:49:90:fc:a2:
13:4d:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:20 2026 by rpki-client