
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa
File: TQf4LVMURh7IqOUbGqHQBne2V90.roa (raw, json)
Hash identifier: UveEGjoTBD9uGAo2Tsspp8Pq2G7A8rmdxWNSzQKEqZc=
Subject key identifier: 4D:07:F8:2D:53:14:46:1E:C8:A8:E5:1B:1A:A1:D0:06:77:B6:57:DD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1460
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa
Signing time: Tue 31 Mar 2026 07:57:26 +0000
ROA not before: Tue 31 Mar 2026 07:57:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5216 (0x1460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:57:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4D07F82D5314461EC8A8E51B1AA1D00677B657DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:12:db:72:e4:5a:f9:6a:30:48:ca:da:12:
3b:03:b0:02:f8:72:97:ec:dc:17:50:59:33:7f:b7:
8f:3c:34:65:72:58:ea:86:4e:61:70:57:bb:ea:c4:
aa:3e:84:2d:0f:a9:bf:0b:4f:63:26:34:4c:df:d7:
19:ea:66:49:4d:01:4d:47:3b:1e:9f:02:cf:ee:20:
09:ae:04:e7:ec:bf:7b:65:12:82:87:2d:11:3b:a6:
7c:9e:fe:a8:8e:4c:07:50:8b:4f:6e:80:d7:ff:8e:
f4:90:20:f6:81:45:d1:fe:1b:fd:9c:a6:cc:0d:b1:
61:e5:71:28:1b:87:7b:19:0a:91:48:a7:71:87:f9:
94:f2:bb:4f:6c:a9:b6:c2:e5:13:ec:1a:35:7f:2f:
d6:b7:27:3b:d3:25:21:dd:3f:a5:b1:9f:cf:6b:f1:
60:ae:ab:52:5c:aa:4b:f6:41:d1:d7:fd:5c:03:b1:
b2:16:1f:f8:99:e5:3f:c3:9f:05:15:75:cc:06:2d:
40:13:84:4d:95:1a:06:fe:2a:b5:f6:69:2d:67:53:
53:23:57:35:d6:64:4f:b2:cb:1b:ec:c0:25:a0:d1:
a6:79:35:d0:c2:23:d5:50:cc:52:a8:fd:ab:19:8b:
96:5c:26:21:30:75:02:cc:3f:30:3a:db:2a:a3:e8:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:F8:2D:53:14:46:1E:C8:A8:E5:1B:1A:A1:D0:06:77:B6:57:DD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa
sbgp-ipAddrBlock: critical
IPv4:
1.79.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8d:b9:f2:fb:03:de:de:84:6c:cd:20:48:03:28:09:bf:18:
cd:de:7f:27:35:a1:a7:28:5e:0a:c7:55:94:e1:9e:1b:05:3c:
0f:f9:75:0e:a4:28:a6:72:5a:d2:1d:f9:0d:44:36:4c:fa:7a:
56:71:de:a1:f3:9e:3f:fa:cf:1e:65:73:0c:33:fc:d7:e8:e6:
56:63:83:70:24:96:cb:7f:b9:90:89:ea:4f:a0:f3:24:fa:4f:
b1:78:6a:3e:d5:c3:fe:06:ab:f5:6e:29:6e:65:34:b9:7a:7c:
fa:00:90:7a:8c:bf:11:51:95:9d:94:1c:70:5b:a4:4f:57:8f:
09:1f:e7:d8:2c:6b:23:06:ad:56:30:12:e3:04:de:b1:ee:f3:
1c:f1:bf:37:c2:15:8a:ef:9c:4a:61:4b:7f:34:49:65:3b:19:
a8:17:47:66:23:7f:44:cf:ad:4e:d7:51:be:1e:bc:72:2a:53:
b0:c7:29:92:a1:fa:54:f8:a5:a6:9c:78:5a:da:28:27:24:f0:
bf:f9:20:32:84:f5:16:2e:12:da:1a:c0:43:7a:31:67:d8:95:
7d:a6:c8:ec:42:a2:f3:39:f8:6c:0b:7c:66:a3:63:df:aa:97:
46:83:4f:2c:27:b8:ba:9f:90:54:be:5f:d0:af:1f:4f:c0:e6:
76:b5:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:11 2026 by rpki-client