
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTWLhE_lW8QzlrW8y5u88SdOK-A.roa
File: TTWLhE_lW8QzlrW8y5u88SdOK-A.roa (raw, json)
Hash identifier: mDbuwwR764UpGvTKH1feKNcarzv9fEPyvYFYFLcAeB8=
Subject key identifier: 4D:35:8B:84:4F:E5:5B:C4:33:96:B5:BC:CB:9B:BC:F1:27:4E:2B:E0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 152A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTWLhE_lW8QzlrW8y5u88SdOK-A.roa
Signing time: Tue 31 Mar 2026 07:59:05 +0000
ROA not before: Tue 31 Mar 2026 07:59:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5418 (0x152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4D358B844FE55BC43396B5BCCB9BBCF1274E2BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:99:10:e4:56:f8:b0:d3:23:98:63:8a:11:
5c:58:89:3a:4f:90:99:68:d7:b5:88:a6:a1:e3:71:
52:20:fe:d0:34:59:56:e4:4f:e1:2a:46:5e:32:6e:
d4:a2:e7:4e:5f:9a:f5:96:8b:85:d5:21:dd:b3:d6:
f7:18:32:02:2c:45:88:7d:a1:4b:fc:23:44:07:9a:
3b:9e:b1:18:96:c9:2b:1d:61:7f:66:fb:ef:a8:c0:
8a:39:fb:a3:b1:3e:5f:c5:6a:5d:81:78:d3:af:81:
4c:7a:ac:3e:31:e7:84:fb:71:1d:b2:44:ca:5a:27:
3c:5c:1d:4a:7e:5d:7d:e5:61:eb:bb:8d:eb:3f:0e:
cb:7d:7e:d3:cb:ac:66:61:c8:c2:d7:e6:b5:63:a0:
5d:24:cb:04:64:e3:94:73:80:34:6c:6c:05:6a:90:
cf:02:df:f4:d6:ae:60:9e:4c:27:69:06:28:e8:f1:
c5:b7:bb:d5:8e:ec:25:bf:40:ac:de:9f:bb:2b:77:
2b:e8:95:3f:a0:f1:08:d6:6a:c9:74:17:28:87:2d:
fa:d3:68:9e:85:b5:1e:1a:af:3a:96:df:ba:75:ad:
e7:dc:70:aa:40:3f:99:6f:5b:01:7e:8c:3f:48:e2:
4f:71:89:70:58:4c:61:ee:a9:1f:2b:65:d7:88:7f:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:8B:84:4F:E5:5B:C4:33:96:B5:BC:CB:9B:BC:F1:27:4E:2B:E0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TTWLhE_lW8QzlrW8y5u88SdOK-A.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:fd:dc:6e:d9:43:6c:41:2b:67:48:c9:87:9b:f8:a0:1e:17:
14:3d:4f:30:4a:e1:cf:f2:bc:b5:9e:b1:a5:63:74:18:c7:f1:
3d:aa:ef:5b:34:1a:c7:a4:39:4a:74:81:da:ca:48:e0:83:42:
b3:e0:62:d8:8f:d6:35:79:2b:f7:fc:92:3d:d7:3d:d4:60:28:
1a:df:bd:3c:11:bb:e0:02:ba:4e:3c:30:16:1b:74:1b:30:46:
2d:4c:01:12:06:3e:a7:eb:7e:39:42:36:4c:18:b9:95:03:05:
b6:46:17:4d:51:ea:47:c8:b3:a7:eb:b4:11:35:fc:b5:18:63:
80:37:4f:bc:ed:6c:fd:96:ac:46:6b:11:d3:21:c0:d1:01:39:
48:c9:86:99:95:88:82:93:3b:c3:5f:17:e6:e0:cb:3c:d1:a5:
67:96:99:44:7d:a5:ba:da:3b:f2:4e:a2:73:55:af:9b:90:3a:
f5:67:ec:5b:82:86:ad:f9:57:a6:ba:75:88:3a:7d:62:29:4e:
2b:02:f5:c2:f2:aa:ce:1e:45:d2:06:d8:2b:1c:82:5b:4b:21:
1c:4b:23:d7:f2:18:ba:23:f0:82:7f:c9:6d:fd:44:12:0d:36:
b0:78:cf:f0:75:68:3f:3c:6c:58:62:83:2f:84:e0:50:54:29:
6e:fe:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client