
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa
File: ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa (raw, json)
Hash identifier: 2TlwIbbRNDSrJnMcrm9jxQKD+T26oSK8JAd473n++9A=
Subject key identifier: 4E:8A:9D:72:A0:6F:F6:D3:DB:CD:09:BC:B8:69:7B:78:3F:A6:B6:55
Certificate issuer: /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial: 4C
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa
Signing time: Tue 31 Mar 2026 08:32:56 +0000
ROA not before: Tue 31 Mar 2026 08:32:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9997
IP address blocks: 133.226.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Validity
Not Before: Mar 31 08:32:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4E8A9D72A06FF6D3DBCD09BCB8697B783FA6B655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:c2:44:16:c3:95:ac:0c:95:5d:2d:20:fd:
3e:4e:aa:7a:f6:13:f8:03:23:6c:44:d8:e1:e9:2b:
2d:86:97:7e:54:07:98:93:65:5f:78:ae:a4:69:a3:
3c:16:74:b4:5d:5c:e0:5e:1f:f3:62:b6:32:7e:93:
b1:22:9c:83:d9:e7:f3:18:51:57:fb:ef:f9:45:0a:
6d:51:73:03:cb:5d:e0:1b:bf:a1:59:13:2b:2f:bc:
a2:ea:a1:1a:51:ba:a1:d8:bc:8b:cc:c1:58:89:ab:
5d:cd:11:ee:20:72:81:42:bf:eb:af:9c:ee:50:25:
b8:59:8c:db:0d:f6:ae:ed:6c:fe:c5:8e:da:58:7f:
09:c0:83:66:da:97:ee:46:fc:87:de:13:6e:0a:e4:
a4:6a:a4:e6:7a:11:9d:81:be:ff:0a:c0:fd:ca:17:
5e:81:df:b3:6a:f8:02:51:be:90:3f:37:49:0a:d0:
c1:76:c5:34:23:5b:13:c7:f9:f0:bf:57:7c:99:10:
a1:5a:f2:b3:fb:30:97:2d:08:83:a4:e5:2a:8f:74:
b2:aa:de:51:88:9e:d9:db:96:15:e7:3c:b9:3d:af:
da:71:85:0e:75:48:23:98:c1:95:1b:b2:c6:09:7b:
49:c6:f8:b4:2b:d6:b0:68:14:1e:a1:d9:0e:d1:08:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:9D:72:A0:6F:F6:D3:DB:CD:09:BC:B8:69:7B:78:3F:A6:B6:55
X509v3 Authority Key Identifier:
keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa
sbgp-ipAddrBlock: critical
IPv4:
133.226.96.0/19
Signature Algorithm: sha256WithRSAEncryption
96:4c:8d:9e:7c:e8:c7:4a:58:05:c0:34:ea:c5:8d:81:ee:66:
03:d7:b2:58:6b:7f:94:ae:b0:2c:e1:6b:61:f0:41:79:ef:ee:
e4:9f:b2:65:b8:15:f9:5e:28:5f:17:1f:35:f9:ac:8a:ae:9e:
53:ea:c7:5c:2d:34:01:bf:4d:41:cb:e0:02:e1:cd:89:1a:cd:
a8:7e:94:d4:bc:c4:27:d1:f0:d1:8f:68:20:5b:c6:a3:aa:fb:
36:22:aa:f8:4f:a2:5a:53:8f:57:14:a9:57:34:ba:8d:d6:89:
7d:eb:6c:c3:86:88:95:87:b9:3d:f9:60:74:72:96:08:f9:2d:
7f:7a:20:ce:7b:73:59:7b:a1:a4:8f:98:ff:b4:70:29:2e:99:
13:b8:ee:73:09:01:3e:e9:0a:9f:21:5b:be:4a:cb:40:8e:bd:
a8:a7:01:20:ca:a6:a9:98:65:7e:50:bc:a4:29:eb:b6:8a:70:
13:83:d6:3c:51:c0:d5:71:f4:3b:de:8c:68:f7:94:8b:67:db:
26:8d:fa:1f:37:22:6d:b2:c3:30:16:c5:70:00:37:4f:d0:8a:
ab:6e:3b:22:b2:89:df:59:68:2d:de:6b:78:a0:4a:8c:8a:5d:
f4:a1:3a:73:62:f1:c8:df:ef:e6:63:a5:78:12:65:d1:7e:53:
e8:b7:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:08 2026 by rpki-client