
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tphlixHa2-aPD8M6F8GtNvgbi-I.roa
File: tphlixHa2-aPD8M6F8GtNvgbi-I.roa (raw, json)
Hash identifier: 9xMet9xvO6fa+OaS8gKRyt35FroBkYgsFGxX/VOp8+s=
Subject key identifier: B6:98:65:8B:11:DA:DB:E6:8F:0F:C3:3A:17:C1:AD:36:F8:1B:8B:E2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 171A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tphlixHa2-aPD8M6F8GtNvgbi-I.roa
Signing time: Tue 31 Mar 2026 08:03:09 +0000
ROA not before: Tue 31 Mar 2026 08:03:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5914 (0x171a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B698658B11DADBE68F0FC33A17C1AD36F81B8BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:b7:ae:1a:40:18:8c:05:08:d6:30:3a:f0:
e5:52:ff:15:e3:5b:ba:1c:92:0b:4f:d5:df:2f:77:
9b:ae:07:9a:63:c4:8f:10:4e:a7:81:f6:52:41:b2:
7b:49:5a:8e:e2:26:84:98:09:bd:f3:77:fe:97:b0:
fe:f4:cc:01:a0:3e:7c:e6:5e:4b:f4:ce:a8:6a:04:
d9:78:cf:93:06:23:27:98:b5:3e:3d:39:63:b2:e8:
79:81:d1:c7:2e:2f:de:52:af:cb:c4:e1:05:d1:ca:
b5:37:34:ed:19:52:56:4b:5d:11:db:28:6c:31:58:
04:84:a8:c7:25:12:26:0e:ea:46:39:8d:ee:16:2b:
7d:9d:a7:12:c9:f5:8e:8e:12:e9:bc:df:f6:cb:13:
ec:d5:1b:55:a6:f7:7d:b9:00:07:8b:a2:a5:79:a6:
fd:6d:4a:a8:4c:ca:62:1f:6f:a7:7a:00:3f:13:30:
46:7d:97:6c:cd:b8:63:f6:11:e6:77:38:73:4f:08:
c1:a9:97:8b:22:a2:05:b0:fb:31:77:a1:11:2e:c4:
d3:b1:53:b9:c1:86:70:2b:18:ca:ed:12:09:4a:21:
d1:45:45:93:10:be:16:00:63:f7:a8:65:ca:c3:b1:
ec:be:f5:da:88:7c:f2:bc:46:86:cc:84:39:78:8a:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:65:8B:11:DA:DB:E6:8F:0F:C3:3A:17:C1:AD:36:F8:1B:8B:E2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tphlixHa2-aPD8M6F8GtNvgbi-I.roa
sbgp-ipAddrBlock: critical
IPv4:
49.108.224.0/24
Signature Algorithm: sha256WithRSAEncryption
40:dc:70:d8:94:28:e1:31:8b:c7:0d:db:4e:a0:73:36:c2:cf:
ed:04:5a:0f:61:d0:bb:85:f2:6d:1a:df:96:47:b5:c4:93:aa:
ca:4d:e2:98:6c:87:26:ec:e6:f2:78:c2:58:3c:b2:e6:fe:f8:
c3:00:42:cd:b9:77:d6:1d:9e:b6:fc:f7:93:21:85:09:e2:1a:
e6:40:35:18:ba:bf:bd:01:3b:60:e6:36:a3:06:b1:5f:29:5f:
06:64:66:dc:4d:d4:79:2e:d6:ae:d8:0a:86:1a:97:7a:ae:3b:
54:89:08:38:b9:c6:f1:c7:f2:84:f6:4e:7a:94:d5:35:9a:fc:
c9:a0:68:d5:88:f2:fb:b0:3f:da:63:ba:c2:00:48:5e:52:31:
1f:29:ca:9c:51:0b:cb:a4:bb:2d:26:ea:aa:d0:96:4d:12:30:
fd:09:82:82:c9:c8:ba:c1:62:35:c2:77:c9:5f:62:25:cd:ce:
85:ba:d2:69:ca:e4:93:3b:ce:92:53:70:44:a2:22:b5:90:15:
d0:5e:8c:13:8c:ac:bc:ad:95:c4:b4:2f:bb:13:c7:0f:fe:fe:
d0:4e:65:39:98:33:70:44:0a:36:c4:f1:cf:e1:43:b0:9f:ca:
7d:55:ab:e3:b9:6f:33:c1:75:2f:b0:e4:ff:82:30:be:2e:56:
77:05:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:57 2026 by rpki-client