
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa
File: TlBDIt20dSs0HZP24eoo2ERzMHo.roa (raw, json)
Hash identifier: qltrqqLr55ZYAZyDgVveKQPgmk3k5Z6qH8BNskpCy2w=
Subject key identifier: 4E:50:43:22:DD:B4:75:2B:34:1D:93:F6:E1:EA:28:D8:44:73:30:7A
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01C9
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa
Signing time: Tue 31 Mar 2026 07:54:07 +0000
ROA not before: Tue 31 Mar 2026 07:54:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 61.215.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4E504322DDB4752B341D93F6E1EA28D84473307A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:4e:9d:1e:0c:6a:84:13:11:25:17:c9:3e:
b0:91:2d:34:6e:68:77:e8:d7:8e:61:36:e0:18:7f:
5e:ce:5a:8f:a8:b6:6b:aa:ec:75:1f:15:2c:05:9b:
66:30:74:1c:2b:f7:6a:cf:68:20:33:d2:7c:65:9e:
69:11:48:65:3b:59:88:92:86:9f:e1:81:e3:67:6c:
e3:93:79:2e:70:9e:06:0f:53:24:4e:bd:c8:8f:91:
3c:a9:78:01:ef:fd:1b:3e:c6:40:ee:f6:5f:99:58:
46:64:a6:26:27:3b:fd:97:84:4e:56:66:02:ab:c2:
25:01:b3:18:39:c4:a6:32:bb:28:0b:ce:bb:c7:3d:
1f:a9:46:9a:03:cf:11:73:a6:da:2c:8e:a2:f1:fc:
3f:43:6a:56:b2:37:72:32:23:46:ec:96:8a:91:85:
c6:a3:eb:a9:0a:50:7c:14:e7:93:fc:0b:95:5e:96:
03:24:81:1b:b6:34:58:f3:a7:de:04:7e:72:c2:47:
18:95:7a:4e:d7:d3:3a:ee:6e:ad:4d:92:24:13:aa:
01:f8:b8:03:d5:e6:5e:76:9d:f4:7d:d2:67:13:f0:
cf:b4:ca:f9:bc:8d:b5:59:3b:26:f2:13:83:df:df:
b4:11:cb:02:44:7f:08:d9:62:98:ef:b3:03:fd:72:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:43:22:DD:B4:75:2B:34:1D:93:F6:E1:EA:28:D8:44:73:30:7A
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa
sbgp-ipAddrBlock: critical
IPv4:
61.215.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:a4:4e:ef:bb:05:2f:3a:04:e0:ee:10:3d:a6:6c:8a:27:ee:
a5:f0:23:73:72:08:28:f7:f4:0e:74:19:6e:98:e6:42:ea:e3:
7f:40:33:8b:3c:f9:a1:52:ec:3a:3f:c6:14:65:c6:42:35:8d:
2c:2c:72:b1:e5:10:99:c5:9d:d8:3b:63:ea:c3:1c:89:bd:dd:
f5:ed:0a:03:75:97:07:e7:57:f3:33:6e:27:73:fa:28:ce:a1:
12:f6:74:e1:dd:9b:5c:d9:10:ef:94:e7:4a:17:bd:55:49:56:
51:9e:2b:91:1b:73:69:6b:bb:1e:48:d2:fb:97:09:fb:4b:5d:
41:dd:17:42:78:31:75:c2:7b:6e:d1:94:73:ae:2e:15:ba:f1:
d5:b7:e6:d6:c3:d8:2e:c0:87:89:d2:00:90:2f:98:b8:f5:c4:
01:ad:f0:a8:b6:21:ee:69:10:e9:08:7c:05:04:13:47:07:c0:
54:8e:8a:57:75:f3:6c:79:61:70:78:cf:c1:bb:d2:2b:af:5e:
51:e5:3f:af:51:44:a4:53:fd:0f:82:bd:90:66:80:42:9a:d9:
ad:8a:7a:19:0c:bc:96:93:23:ee:67:d5:0f:64:c2:73:41:7a:
24:7c:3d:1b:16:0a:d4:06:f2:8f:4e:d6:e3:ac:6b:91:b7:e1:
97:4d:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:49 2026 by rpki-client