
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T-lDhZJ75jRSO6aMZDPMplfTkd0.roa
File: T-lDhZJ75jRSO6aMZDPMplfTkd0.roa (raw, json)
Hash identifier: nYFnFehdlw+rmqc3fcaodlnsoQau1m0bUg8V1a7xY5I=
Subject key identifier: 4F:E9:43:85:92:7B:E6:34:52:3B:A6:8C:64:33:CC:A6:57:D3:91:DD
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 59
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T-lDhZJ75jRSO6aMZDPMplfTkd0.roa
Signing time: Tue 31 Mar 2026 08:36:39 +0000
ROA not before: Tue 31 Mar 2026 08:36:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.183.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Mar 31 08:36:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4FE94385927BE634523BA68C6433CCA657D391DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:6a:30:21:b9:f5:19:4a:7a:a5:f5:6b:9f:
d3:21:ea:9a:9e:eb:c6:31:3e:c1:cc:72:30:a6:54:
ca:97:f9:b6:d7:18:16:7d:cf:07:73:43:56:ce:91:
69:c0:bf:71:25:99:31:71:47:4f:ee:c6:d9:7b:98:
79:9e:20:31:e5:b3:37:64:8c:88:79:08:9d:00:fa:
e9:a3:00:f9:a6:d6:fc:6a:4b:1b:10:51:a6:e6:11:
6b:3e:02:7b:a8:fa:e1:9f:1b:3b:73:81:55:60:1f:
2b:34:a3:3b:44:0a:e0:55:7f:a5:1e:78:31:3a:e6:
cb:ff:42:93:5a:c7:42:08:40:22:68:d5:84:07:93:
10:2c:a0:f4:8b:4b:ce:66:f2:1b:bf:56:27:d6:4a:
53:8e:9a:c1:e9:8a:61:58:9b:75:8b:fb:d2:d6:6a:
48:0e:6f:85:8a:8b:25:0b:77:6c:59:49:84:d0:3a:
28:a3:67:59:8e:7d:0b:ea:5a:b2:fb:30:56:3e:b2:
df:f9:a5:ae:fd:c0:61:5a:14:47:08:71:4e:51:8c:
d1:bf:21:e4:f7:d1:e7:ac:98:48:d7:e6:c8:6a:1f:
e8:83:b7:a9:2f:f2:e4:b5:96:12:67:3c:3b:35:fe:
29:5e:cd:fd:ff:ab:c8:92:4c:b7:52:86:e0:4f:4d:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:43:85:92:7B:E6:34:52:3B:A6:8C:64:33:CC:A6:57:D3:91:DD
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T-lDhZJ75jRSO6aMZDPMplfTkd0.roa
sbgp-ipAddrBlock: critical
IPv4:
133.183.96.0/21
Signature Algorithm: sha256WithRSAEncryption
20:76:a9:c1:27:60:9b:18:78:b7:43:80:4c:df:21:cb:c8:17:
76:2d:e1:53:45:60:ec:b5:79:2a:18:51:f9:8a:87:11:c7:ba:
e9:8c:79:ee:c1:74:31:24:e3:73:0b:07:ce:d9:6e:e0:22:b6:
e2:8c:cf:11:d8:ec:fa:4f:1a:46:24:2c:20:52:16:5b:90:5e:
3d:fc:b1:58:7e:65:98:93:b3:a6:fd:17:38:59:49:23:09:44:
5b:6a:b8:48:29:37:a2:17:15:12:5b:ee:45:79:4f:46:4e:e7:
53:e0:2a:43:5b:46:0a:87:d2:ff:13:b0:de:62:64:03:2a:fc:
88:58:72:18:e1:b6:66:f8:6b:b9:c2:bf:e8:a3:8a:93:1d:82:
cd:d4:2a:e0:79:c7:79:ee:cc:a1:ac:15:d8:26:33:0e:fb:c6:
1f:09:38:de:9b:4a:0d:cb:0a:ff:f5:87:35:ca:3d:81:1b:41:
25:45:54:a2:87:37:83:6c:58:dc:63:ba:a3:df:cb:ad:6c:5f:
f5:74:b2:bd:8d:9e:f2:0c:5e:16:42:ce:e4:a2:0a:24:e0:30:
f5:ad:26:85:d8:17:d8:d4:f4:92:a6:a0:46:6d:25:0c:c6:61:
d0:39:59:6b:69:7e:f8:2e:a8:ad:36:9c:2c:47:aa:f5:1d:ce:
be:e6:cb:2e
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDMzMTA4
MzYzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEZFOTQzODU5MjdCRTYz
NDUyM0JBNjhDNjQzM0NDQTY1N0QzOTFERDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANzGajAhufUZSnql9Wuf0yHqmp7rxjE+wcxyMKZUypf5ttcYFn3P
B3NDVs6RacC/cSWZMXFHT+7G2XuYeZ4gMeWzN2SMiHkInQD66aMA+abW/GpLGxBR
puYRaz4Ce6j64Z8bO3OBVWAfKzSjO0QK4FV/pR54MTrmy/9Ck1rHQghAImjVhAeT
ECyg9ItLzmbyG79WJ9ZKU46awemKYVibdYv70tZqSA5vhYqLJQt3bFlJhNA6KKNn
WY59C+pasvswVj6y3/mlrv3AYVoURwhxTlGM0b8h5PfR56yYSNfmyGof6IO3qS/y
5LWWEmc8OzX+KV7N/f+ryJJMt1KG4E9NdhECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBRP6UOFknvmNFI7poxkM8ymV9OR3TAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9ULWxEaFpKNzVqUlNPNmFNWkRQTXBsZlRrZDAucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhbdgMA0GCSqGSIb3DQEBCwUAA4IB
AQAgdqnBJ2CbGHi3Q4BM3yHLyBd2LeFTRWDstXkqGFH5iocRx7rpjHnuwXQxJONz
CwfO2W7gIrbijM8R2Oz6TxpGJCwgUhZbkF49/LFYfmWYk7Om/Rc4WUkjCURbarhI
KTeiFxUSW+5FeU9GTudT4CpDW0YKh9L/E7DeYmQDKvyIWHIY4bZm+Gu5wr/oo4qT
HYLN1Crgecd57syhrBXYJjMO+8YfCTjem0oNywr/9Yc1yj2BG0ElRVSihzeDbFjc
Y7qj38utbF/1dLK9jZ7yDF4WQs7kogok4DD1rSaF2BfY1PSSpqBGbSUMxmHQOVlr
aX74LqitNpwsR6r1Hc6+5ssu
-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:03 2026 by rpki-client