
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/TnqRIdompsF-UKiILnSTRP9WhwU.roa
File: TnqRIdompsF-UKiILnSTRP9WhwU.roa (raw, json)
Hash identifier: ZOrg50bunY164hoamkRN+paK+FuL6McRsyq+DP0HB/Q=
Subject key identifier: 4E:7A:91:21:DA:26:A6:C1:7E:50:A8:88:2E:74:93:44:FF:56:87:05
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 23
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/TnqRIdompsF-UKiILnSTRP9WhwU.roa
Signing time: Tue 31 Mar 2026 08:44:55 +0000
ROA not before: Tue 31 Mar 2026 08:44:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131973
IP address blocks: 103.157.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Mar 31 08:44:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4E7A9121DA26A6C17E50A8882E749344FF568705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:f0:53:4f:d0:01:66:f6:3c:66:53:a7:81:
0e:98:fe:b4:9e:cf:4b:bc:f6:7d:86:73:e5:6b:19:
35:e8:c2:9f:22:43:51:d3:38:1c:76:f2:8c:39:cf:
ac:db:fd:cd:75:1c:96:23:4e:af:ed:c1:11:d5:d6:
04:2b:e0:87:56:47:3c:4b:e6:39:0b:19:a6:7d:50:
71:c1:4d:b1:d8:00:7c:7d:66:98:6e:b6:c7:62:5c:
c1:fd:d3:18:a8:45:a2:e9:3d:23:eb:63:72:0b:f1:
0d:2c:c1:68:34:51:b6:b8:d2:c0:0c:29:ca:5a:fc:
c2:98:a7:85:b8:36:2b:64:ec:0a:4c:02:a6:d1:a4:
d1:22:71:76:c6:94:8d:1b:3c:22:89:53:0c:5d:9e:
16:5a:fd:ea:87:ac:ec:c5:57:34:2b:41:f5:08:87:
70:6d:f9:21:cf:89:84:3b:18:5f:0e:08:69:ae:30:
25:6f:41:d0:81:2d:3d:fb:9a:49:43:1f:85:e1:39:
05:8a:e7:f9:f6:70:8f:7e:2b:0f:fc:3f:c9:df:14:
37:0e:a0:ca:87:c3:4a:ec:10:f5:9e:75:a0:d0:53:
0b:47:5b:0d:7a:a8:d3:c0:0c:4e:4a:15:9a:7a:3c:
ba:67:75:4a:38:22:16:3e:c4:b2:9c:ab:05:34:1a:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:91:21:DA:26:A6:C1:7E:50:A8:88:2E:74:93:44:FF:56:87:05
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/TnqRIdompsF-UKiILnSTRP9WhwU.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.157.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e2:ef:61:6f:a9:40:a6:b7:30:af:d2:47:b1:79:1c:0c:fc:
68:19:0b:14:2a:19:b9:97:9c:00:e1:84:6a:05:6e:a0:a2:31:
4e:7d:59:9e:95:87:2d:3d:bb:f0:aa:38:78:50:2e:7a:7e:56:
2a:fc:e2:7f:15:7f:71:a3:ad:74:b3:09:96:28:4a:d4:1b:c7:
84:1b:17:86:cb:03:7e:64:90:18:5a:02:ff:49:15:fb:d0:93:
8c:47:5c:b0:f6:f0:cc:c9:01:7c:7f:17:b3:2e:75:71:58:ff:
0d:30:90:c8:bc:f3:d0:cc:39:5d:23:cd:68:6a:ba:79:03:95:
e4:84:4d:1a:c9:8b:88:df:cc:0e:67:9a:53:ea:53:b4:b8:5b:
9a:b6:3b:62:b9:53:07:39:b6:63:ae:98:97:53:33:a2:60:43:
3f:01:fd:40:38:42:eb:1f:41:63:12:27:c3:b5:64:f4:66:31:
0a:16:4b:3e:e9:09:2a:d1:38:04:6e:d8:cd:0b:25:0f:f1:00:
28:42:53:0b:4e:e8:ef:0b:c1:32:3e:ba:bf:12:ff:f6:7d:b5:
73:1a:cb:0c:ba:04:4f:b7:24:f0:b1:d4:a3:ee:62:c4:9c:75:
dc:cf:97:9e:01:b7:d0:d2:c6:fc:89:8a:d3:9f:4b:fe:50:00:
ba:e3:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client