
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa
File: twzYPpZcjVdGmYuM9l02WlRRkyA.roa (raw, json)
Hash identifier: Uaurb7mSbEpYQFNylJzsHs/XqW+SglfAZr18l2Jb2hY=
Subject key identifier: B7:0C:D8:3E:96:5C:8D:57:46:99:8B:8C:F6:5D:36:5A:54:51:93:20
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 028F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa
Signing time: Tue 31 Mar 2026 07:33:39 +0000
ROA not before: Tue 31 Mar 2026 07:33:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 153.248.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B70CD83E965C8D5746998B8CF65D365A54519320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:0e:79:a9:d5:71:54:67:df:06:a5:c9:3b:
eb:8d:cf:8a:ee:19:35:c7:b4:88:3c:e8:05:ab:f8:
6c:54:fe:8c:57:42:be:b2:0e:30:12:47:78:fb:05:
ef:cf:5c:3b:65:3a:1b:37:fa:a2:22:c6:25:fd:01:
33:16:5f:d5:a9:0e:ce:3e:c8:38:f8:00:96:c7:ee:
b5:55:92:a0:95:67:6d:7a:52:06:81:ea:a7:e1:7c:
67:94:58:9f:31:e1:ab:69:d4:19:8e:9e:04:93:77:
5d:c0:ce:3d:6c:12:98:e5:2a:29:96:84:e2:b8:54:
44:0b:14:c0:26:f9:5e:8e:fe:e4:9b:2d:e4:06:51:
7e:5d:2b:60:9a:f2:e3:b3:2b:40:35:21:8e:56:8c:
49:32:6c:0b:25:11:b8:aa:64:d1:3c:eb:42:38:a8:
03:8b:b6:11:ef:b0:b5:40:9c:1b:c2:48:c3:66:8f:
73:ba:a9:14:43:e6:50:a4:70:e2:14:3c:6f:46:02:
ed:12:82:d7:f2:9c:52:87:30:57:21:41:24:eb:9a:
f7:8c:9f:91:58:f6:e2:d4:32:3e:87:62:69:47:42:
71:91:b1:73:47:27:a6:fb:21:b5:47:60:2d:ba:03:
95:5e:55:3c:2b:9f:98:07:4e:af:29:f3:9b:c4:33:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:D8:3E:96:5C:8D:57:46:99:8B:8C:F6:5D:36:5A:54:51:93:20
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa
sbgp-ipAddrBlock: critical
IPv4:
153.248.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a8:24:c8:0a:ea:6f:fa:55:ee:30:c7:13:20:b5:47:13:a0:4b:
09:e0:85:d4:30:fd:b9:7a:57:cb:21:1d:0f:60:ae:aa:39:cb:
ce:de:58:db:eb:f5:fd:c7:f7:32:ff:47:ed:e4:f2:a3:f0:5b:
58:fe:6e:5a:a6:7d:f2:8f:80:ab:07:66:c7:96:e1:c2:b0:aa:
a8:89:14:3d:52:74:b7:40:12:e9:31:f2:10:3d:19:1d:4f:f5:
01:31:c7:a1:a0:32:e3:94:42:27:41:ad:fe:05:a6:72:bd:14:
b1:98:df:8b:a6:e4:3b:b5:28:56:5a:43:77:12:c8:08:17:c5:
ac:bb:0f:c6:ef:e6:fd:34:b1:3b:08:4c:66:75:e9:79:b7:64:
aa:3f:66:ab:3b:06:79:63:9f:7a:1e:28:8d:c9:42:9b:e7:9a:
08:cc:27:60:19:5b:d9:c7:66:06:aa:33:48:1a:09:e6:32:3f:
dd:bd:1c:69:34:f0:45:a1:84:5b:d6:53:12:99:6d:34:4b:8a:
d0:08:e6:dd:02:c6:14:2e:34:7d:3d:3e:67:5f:a5:b0:ec:b8:
e4:00:4b:5c:6d:25:cd:cd:0b:58:7b:3b:88:b4:ab:a4:ad:98:
49:a2:3e:e2:df:af:39:58:fb:0d:f6:62:27:32:1b:33:79:5a:
f5:b0:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:09 2026 by rpki-client