
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa
File: tsponIBfMjGSY-XVVbgxHYskwQo.roa (raw, json)
Hash identifier: RdjWGYUfT6ONsKlsXr7jCwhZCaE1UVbxAcIMxR10J+c=
Subject key identifier: B6:CA:68:9C:80:5F:32:31:92:63:E5:D5:55:B8:31:1D:8B:24:C1:0A
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 95
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa
Signing time: Tue 31 Mar 2026 08:37:44 +0000
ROA not before: Tue 31 Mar 2026 08:37:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 219.124.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B6CA689C805F32319263E5D555B8311D8B24C10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:01:1f:6d:bf:4c:4d:fc:50:dc:41:7b:c7:
27:5e:c5:bd:f4:c7:52:6a:3c:37:b8:ab:a6:48:c6:
b7:9a:75:47:cf:27:21:75:04:4b:33:f9:fb:c9:0e:
e1:b4:49:06:6e:7b:7f:c9:74:52:d3:2b:f2:91:d3:
43:92:1d:18:54:89:82:33:4c:0f:0e:b0:e3:07:75:
bd:0e:59:4e:69:50:e9:b2:55:56:90:3d:78:4f:5d:
da:f8:8e:99:aa:5e:63:51:75:be:7c:e7:31:9a:8e:
31:23:d6:74:e8:03:43:28:32:c8:3d:c9:6b:05:d8:
2b:12:03:58:4f:b8:3d:1b:9f:61:e0:0b:32:8d:76:
a2:bc:81:3b:f5:9b:7e:4b:da:f5:04:3f:00:d1:7a:
8b:90:ac:88:da:2f:7c:12:1a:12:d5:6f:95:23:bc:
98:88:97:cf:e0:72:fe:93:32:8a:07:c5:7d:c3:e1:
ce:e3:f3:bd:69:17:72:5e:c3:15:2c:93:0e:53:2c:
1f:69:d0:9f:30:cb:3e:7b:62:f7:6e:74:b6:d0:8e:
a7:83:4e:d2:b3:26:2a:5d:0f:ad:6c:e8:d6:8b:11:
91:2f:10:e0:ae:32:1b:f3:d4:99:98:c0:f1:99:55:
f8:dd:7a:90:6c:7c:a9:ca:a0:69:92:8b:29:ca:fe:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:68:9C:80:5F:32:31:92:63:E5:D5:55:B8:31:1D:8B:24:C1:0A
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.124.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:b8:36:e1:1b:41:aa:7e:77:af:3e:1a:76:91:0e:86:46:02:
da:96:f8:e5:f3:e8:ed:49:21:ee:94:5f:f0:f2:3d:a3:5d:07:
ee:12:58:74:d4:83:45:72:15:90:20:a0:c2:5c:52:dc:c7:87:
a9:4e:94:09:52:c4:e5:26:8e:7d:3d:8d:b7:0c:61:34:80:22:
e9:ee:df:34:ff:38:a3:f2:e8:87:1d:96:7a:2a:2b:25:93:45:
3c:be:3a:76:83:a2:bc:89:52:48:f0:e1:cf:85:60:8a:d7:23:
f2:d5:6f:9d:87:36:7e:bd:1b:15:73:c4:10:10:7f:77:98:a7:
24:d1:4f:09:91:0e:02:4c:70:d9:8a:f4:76:ad:67:f7:50:6b:
9e:fc:a9:4e:91:ce:b5:a0:4b:81:26:de:5e:94:6d:69:e4:34:
87:b2:6a:8f:e8:ce:bc:06:10:36:e0:47:e5:a2:82:24:5f:0b:
c6:1e:74:91:1a:2f:31:c7:10:f0:cf:e3:5e:b4:c8:8a:a2:0d:
7c:d8:2d:31:19:5b:bd:53:aa:66:78:19:78:58:11:20:62:90:
6f:48:0f:ba:72:6b:99:e3:d2:d3:f5:39:03:1a:cd:4b:63:b8:
7e:b7:65:b3:c8:db:84:e7:70:ca:75:64:56:9b:68:23:54:5d:
7f:eb:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:11 2026 by rpki-client