
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa
File: T4NquQYsUGgUJh6vQwgQwdss9rE.roa (raw, json)
Hash identifier: w+i3O5W559NlrzxLMH5AdMcNSYQ+w4Ua3GQyetMcOJM=
Subject key identifier: 4F:83:6A:B9:06:2C:50:68:14:26:1E:AF:43:08:10:C1:DB:2C:F6:B1
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 3A
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa
Signing time: Tue 31 Mar 2026 08:34:59 +0000
ROA not before: Tue 31 Mar 2026 08:34:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24255
IP address blocks: 202.88.192.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Mar 31 08:34:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4F836AB9062C506814261EAF430810C1DB2CF6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:0b:db:25:31:4f:05:a7:d9:da:ab:12:81:
12:b3:d0:09:6b:b9:06:e8:4e:d4:a8:78:a9:b8:d3:
31:60:a7:6a:9e:5d:88:ea:2a:03:7b:1a:b1:2c:26:
eb:51:ca:fe:15:bf:e3:d9:96:8c:ce:02:92:82:c7:
21:cf:10:38:7e:fd:6d:be:54:fd:23:2a:6b:b5:78:
ba:40:2b:8d:c0:c0:b6:f2:b8:8a:0d:e6:ff:ad:39:
78:da:1e:8c:07:ef:ec:95:43:90:51:ac:05:df:e2:
61:44:23:9b:f0:89:f4:bb:68:ba:99:27:5e:7a:d8:
47:82:67:55:e8:f0:4e:3e:61:17:08:83:f9:8c:74:
80:ee:6f:2e:82:1f:34:d2:73:b3:22:a1:4f:8c:69:
46:4d:5e:3d:c8:04:54:77:b0:0a:87:b4:4a:45:bd:
55:de:96:ac:22:66:b8:d2:6c:40:79:de:09:4b:39:
1f:68:78:db:7f:f3:77:2a:3f:b9:f0:00:35:61:b1:
4c:2e:ce:ce:53:bd:27:31:31:65:32:ff:66:40:9c:
02:75:2f:84:b4:b6:cf:ae:12:01:83:df:b5:0d:59:
87:84:53:e9:c0:21:08:a7:21:2f:99:f3:fb:b0:0b:
8b:8e:59:fe:29:f7:34:c0:c6:67:b0:a8:13:d0:38:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:83:6A:B9:06:2C:50:68:14:26:1E:AF:43:08:10:C1:DB:2C:F6:B1
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.88.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:97:70:ac:66:4f:e0:a0:59:4e:81:34:5c:00:11:5a:7f:ea:
f8:d7:3d:b3:7b:06:6c:b6:73:af:7e:df:da:b2:08:4d:a4:bb:
6c:b5:42:91:bd:d6:7a:f2:c2:e9:75:38:ea:61:99:37:e9:1c:
d2:7a:57:9f:92:3c:85:72:fd:58:42:7d:29:b3:95:19:f3:12:
f8:1a:cd:06:80:39:db:29:3d:c8:be:fc:88:64:42:f5:33:68:
f7:f9:44:10:bf:1b:e5:c6:05:58:3d:58:21:fb:15:96:3b:b1:
e9:f1:58:63:19:d6:34:d3:45:13:fa:6b:78:e8:81:c7:0a:8f:
45:13:d2:3a:f9:60:2f:f9:8d:72:d9:18:d8:c2:de:aa:69:2c:
10:f7:1e:52:b7:63:9d:da:89:4d:44:8d:32:4c:4a:0b:e8:ff:
44:0b:10:3e:30:96:da:c8:e3:75:f4:11:8b:82:e7:b3:9a:9e:
09:5d:03:86:63:c3:77:42:09:83:ce:40:7e:35:95:b4:be:e6:
89:ab:ba:6d:c1:80:1b:45:a5:cd:7e:d5:d2:04:82:59:09:8f:
19:c6:dc:e9:ec:3a:eb:4f:9d:d6:e9:a0:8a:4d:08:e3:2e:6c:
ab:02:8f:a3:d4:6b:3d:15:59:e1:55:f1:16:1b:54:ac:83:b5:
bb:d8:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:32 2026 by rpki-client