
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/tZfdU-3iH-woz0fqIA3M8bfIJro.roa
File: tZfdU-3iH-woz0fqIA3M8bfIJro.roa (raw, json)
Hash identifier: ikMcMEvaLVxyQEYFcLXzbKfXlkEJQ2ZhqriTr3bXgYg=
Subject key identifier: B5:97:DD:53:ED:E2:1F:EC:28:CF:47:EA:20:0D:CC:F1:B7:C8:26:BA
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 4F
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/tZfdU-3iH-woz0fqIA3M8bfIJro.roa
Signing time: Tue 31 Mar 2026 07:49:44 +0000
ROA not before: Tue 31 Mar 2026 07:49:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 133.88.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Mar 31 07:49:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B597DD53EDE21FEC28CF47EA200DCCF1B7C826BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:78:4f:cf:ee:2d:db:59:88:68:44:21:e0:
59:c8:73:9a:37:e5:ff:fa:69:d0:a7:31:ee:da:4d:
99:81:82:19:33:08:d0:d2:b8:0e:5d:e7:d6:ce:78:
6b:80:5b:89:e2:6c:1f:c8:2b:58:6a:68:80:c5:6c:
f3:c9:d6:cc:fe:d0:e0:a2:0d:bf:55:68:0c:08:00:
18:b8:1b:13:94:ce:3a:25:ac:5e:2d:e2:47:6d:e0:
c4:db:fd:3d:37:01:90:a5:b9:8e:37:6c:c5:c5:02:
86:ba:33:ab:14:a2:a4:95:a0:e4:2d:85:0e:5c:81:
ec:09:df:c0:07:4f:49:5f:3b:1c:0c:25:92:69:7c:
29:fe:e2:e5:e7:18:11:de:d1:1f:b4:ab:86:fd:01:
e2:b6:b9:35:c0:5e:6b:2c:02:8c:f2:9a:2e:87:4c:
d2:1d:ee:4e:c0:81:37:35:13:2a:56:3a:bb:af:80:
1e:9c:cb:1d:8b:b2:b6:e0:7b:c1:f7:4d:e5:f2:22:
55:c7:ed:be:c8:ef:e4:6c:08:b5:0d:a7:01:62:18:
1b:12:9e:b9:d9:cd:8a:e4:b8:b9:83:e6:1a:0e:15:
a4:ac:53:4b:08:23:08:7a:fc:5e:49:f8:27:e1:0c:
72:39:36:38:e1:92:74:63:e8:19:43:75:07:9e:10:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:DD:53:ED:E2:1F:EC:28:CF:47:EA:20:0D:CC:F1:B7:C8:26:BA
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/tZfdU-3iH-woz0fqIA3M8bfIJro.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.30.0/24
Signature Algorithm: sha256WithRSAEncryption
61:55:7a:cc:97:f7:a5:e4:43:01:4b:8b:ae:83:f3:c9:c1:c1:
14:0f:37:9d:8e:de:38:6a:b2:95:73:00:a2:0a:6e:10:ae:c2:
31:01:ab:8d:15:e5:55:ab:48:ba:5f:1a:c3:15:9d:6c:90:bd:
97:1d:9a:ce:4e:43:a0:8f:94:16:26:4c:cf:92:75:c9:aa:a8:
74:3c:01:13:06:3e:19:bc:7b:63:bb:bf:52:5b:98:4c:d4:87:
71:58:8a:95:72:17:d2:47:f3:db:bc:b4:7f:b9:a4:8e:5b:e6:
48:e7:ca:23:65:a3:8e:87:88:1e:43:9d:cc:4f:7d:51:b3:ba:
59:c2:c3:40:3c:bb:1b:1d:71:a9:35:77:14:f1:80:8e:9d:ba:
9f:f3:df:b2:ae:c9:c4:02:90:a9:37:4c:6a:58:25:6f:fd:04:
e8:17:32:f1:74:8f:26:f5:af:26:96:77:52:0d:17:e5:72:e0:
48:41:1f:c2:cf:77:9d:e0:a5:ec:03:ab:aa:0f:bf:4b:35:9a:
b1:6a:6f:1b:62:48:f1:3b:0e:af:b9:b2:ae:9e:2c:54:e4:e5:
8d:d0:f4:9f:60:3a:e7:5f:6a:b0:4d:39:97:c7:d9:22:0e:ad:
41:56:99:b0:23:33:26:63:b3:fd:25:31:ce:49:6f:7d:ea:e8:
c2:44:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:50 2026 by rpki-client