
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa
File: TMrhFP2TMjuRccmXjctDH7XtQ_c.roa (raw, json)
Hash identifier: 3g4cSgfa3zI/NWXHEMx9AR7srFnt2j3BDTEgzmfsmk0=
Subject key identifier: 4C:CA:E1:14:FD:93:32:3B:91:71:C9:97:8D:CB:43:1F:B5:ED:43:F7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa
Signing time: Tue 31 Mar 2026 08:04:54 +0000
ROA not before: Tue 31 Mar 2026 08:04:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.101.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6137 (0x17f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4CCAE114FD93323B9171C9978DCB431FB5ED43F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:44:64:c4:33:e6:17:2a:e2:4e:73:8c:3c:
ef:b9:eb:18:aa:be:7a:40:8e:81:7d:c9:9c:51:2a:
1f:09:6a:71:b6:73:1b:07:2e:3a:7f:de:15:fd:3f:
0f:1a:d4:0d:07:b7:c8:a4:79:65:f0:8b:f8:d7:50:
e4:af:ad:49:59:c3:e7:44:b9:04:40:30:e5:db:32:
1a:8b:a7:6c:bd:4a:79:d2:fa:93:87:8c:de:f1:17:
d0:85:03:35:f5:09:67:f3:14:59:67:e3:e3:fd:39:
61:ba:17:77:cc:04:80:f0:b5:cc:2c:89:ed:ef:86:
0d:ea:ab:4d:c4:07:19:b9:9b:9a:0a:cf:39:9b:85:
76:d6:37:a6:be:05:ca:ae:7a:bc:ba:1d:ad:02:86:
79:50:ed:e3:9a:46:c6:b0:64:09:dc:05:9f:2a:27:
f9:a0:a1:2e:8c:ed:83:78:23:30:b7:7d:37:60:a6:
7e:aa:fc:7b:09:e5:5d:79:fe:4c:5b:46:bd:05:6b:
59:1d:3d:5f:8f:ef:4d:97:01:7b:bb:78:24:c3:15:
96:fc:86:51:39:da:77:ef:19:49:9a:3d:39:f0:3a:
7a:cb:4f:42:60:39:db:99:c9:a7:30:9b:96:7f:1d:
84:b8:2c:46:d1:67:cb:c1:f7:15:62:62:14:0e:4d:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:E1:14:FD:93:32:3B:91:71:C9:97:8D:CB:43:1F:B5:ED:43:F7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa
sbgp-ipAddrBlock: critical
IPv4:
49.101.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:dd:fe:b1:88:fa:8b:a9:1d:85:b8:8c:8f:4f:18:10:18:de:
33:e3:63:41:12:15:e4:a6:0e:3e:da:bb:3f:98:af:fa:28:77:
04:00:68:8e:a0:d7:95:f6:34:9e:27:40:b6:d3:6f:b8:78:c3:
3c:17:82:11:81:b8:fe:ec:06:e6:22:d6:a0:f2:91:9c:e8:b1:
8f:1f:a7:06:44:ab:43:3b:79:24:bd:7c:7a:64:1d:f7:ec:e5:
f5:ee:18:19:5e:e8:44:cb:ee:cc:f8:a3:22:dc:56:8a:f2:1f:
8c:61:00:51:75:ba:07:dd:95:43:53:59:64:f5:cc:65:1d:37:
11:cb:5c:e0:4e:07:01:e1:46:2b:78:78:ba:58:c6:0e:c0:0c:
14:1c:5d:bb:ea:3e:73:8c:7b:04:29:e6:c5:73:4a:c0:12:26:
94:ed:08:ab:65:27:fe:78:c9:98:a7:6a:27:65:8d:e9:63:c8:
7d:1e:92:a9:48:42:8a:1f:8a:f5:2b:83:3f:72:6d:e5:2b:9a:
86:9b:93:84:d3:a8:aa:c0:b6:c3:c9:e9:31:e3:74:4e:1b:df:
ee:e7:e5:20:bc:e4:26:bb:53:82:d6:d9:35:23:cc:8e:6a:e5:
54:da:fb:8c:49:f0:d9:16:f2:f5:d6:2e:ff:4e:79:28:6e:1a:
17:d2:52:9f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDQ0FFMTE0RkQ5MzMy
M0I5MTcxQzk5NzhEQ0I0MzFGQjVFRDQzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfi0RkxDPmFyriTnOMPO+56xiqvnpAjoF9yZxRKh8JanG2cxsH
Ljp/3hX9Pw8a1A0Ht8ikeWXwi/jXUOSvrUlZw+dEuQRAMOXbMhqLp2y9SnnS+pOH
jN7xF9CFAzX1CWfzFFln4+P9OWG6F3fMBIDwtcwsie3vhg3qq03EBxm5m5oKzzmb
hXbWN6a+Bcquery6Ha0ChnlQ7eOaRsawZAncBZ8qJ/mgoS6M7YN4IzC3fTdgpn6q
/HsJ5V15/kxbRr0Fa1kdPV+P702XAXu7eCTDFZb8hlE52nfvGUmaPTnwOnrLT0Jg
OduZyacwm5Z/HYS4LEbRZ8vB9xViYhQOTSIZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTMrhFP2TMjuRccmXjctDH7XtQ/cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1RNcmhGUDJUTWp1UmNjbVhqY3RESDdYdFFfYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxZYAwDQYJKoZIhvcNAQELBQADggEB
AC/d/rGI+oupHYW4jI9PGBAY3jPjY0ESFeSmDj7auz+Yr/oodwQAaI6g15X2NJ4n
QLbTb7h4wzwXghGBuP7sBuYi1qDykZzosY8fpwZEq0M7eSS9fHpkHffs5fXuGBle
6ETL7sz4oyLcVoryH4xhAFF1ugfdlUNTWWT1zGUdNxHLXOBOBwHhRit4eLpYxg7A
DBQcXbvqPnOMewQp5sVzSsASJpTtCKtlJ/54yZinaidljeljyH0ekqlIQoofivUr
gz9ybeUrmoabk4TTqKrAtsPJ6THjdE4b3+7n5SC85Ca7U4LW2TUjzI5q5VTa+4xJ
8NkW8vXWLv9OeShuGhfSUp8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:39 2026 by rpki-client