
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-3BolG-WqqfG1qZydWb_-6XwPoY.roa
File: -3BolG-WqqfG1qZydWb_-6XwPoY.roa (raw, json)
Hash identifier: gnuaYAC3sW+B+xV+Jikjz9ysKIhTCVniDG/v/s4K7Rc=
Subject key identifier: FB:70:68:94:6F:96:AA:A7:C6:D6:A6:72:75:66:FF:FB:A5:F0:3E:86
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0827
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-3BolG-WqqfG1qZydWb_-6XwPoY.roa
Signing time: Tue 31 Mar 2026 07:42:54 +0000
ROA not before: Tue 31 Mar 2026 07:42:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 125.48.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FB7068946F96AAA7C6D6A6727566FFFBA5F03E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:5b:e6:89:de:ea:4e:3f:2a:ea:58:5a:e6:
6a:b7:ca:b8:ad:26:9e:aa:5e:1b:fe:4c:9a:c6:fe:
00:2a:11:77:e2:c0:5f:77:37:a1:39:31:98:c3:d9:
96:19:86:cb:88:c9:a3:93:ab:52:16:dd:e4:aa:9b:
88:ee:1e:5b:f1:12:a1:36:b3:e1:84:c1:7e:17:45:
aa:e1:f3:ae:28:fb:83:0b:63:3c:41:54:e5:3f:ff:
a6:11:47:c5:db:ac:6e:39:72:7a:ce:b3:3e:1c:ed:
b8:00:87:4b:a7:aa:b3:86:58:b3:a3:ab:2c:7b:6d:
48:ab:85:e0:cc:59:60:92:0a:d2:34:2c:85:03:4b:
77:ff:3e:27:9d:4b:41:af:80:88:35:69:20:62:0a:
f4:04:dd:11:b1:19:a4:89:3b:38:20:ea:15:74:56:
5a:a0:76:d1:e4:0e:86:36:bd:ff:4a:5b:f5:23:d9:
3c:50:45:2c:a6:29:ac:d0:1b:e7:51:92:9d:b9:3c:
fa:78:d9:f0:34:a4:0d:8f:cd:95:73:c3:4a:ab:4a:
0e:81:51:5c:cb:ab:86:7e:77:12:d6:5d:5b:ab:f7:
5b:f9:b5:37:1e:94:e1:7a:f4:f3:69:aa:ce:66:e9:
45:db:1d:fb:44:d3:02:7a:4f:18:1a:6d:b6:7f:9d:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:68:94:6F:96:AA:A7:C6:D6:A6:72:75:66:FF:FB:A5:F0:3E:86
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-3BolG-WqqfG1qZydWb_-6XwPoY.roa
sbgp-ipAddrBlock: critical
IPv4:
125.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:4b:e4:f6:c4:d3:88:f8:52:26:b7:36:b4:be:09:a7:04:61:
3e:d1:e9:76:5b:22:04:08:2a:54:19:2a:40:70:d3:57:99:b6:
4a:d3:da:2c:a3:80:c8:a5:4b:00:55:71:4d:54:fa:b0:7d:d9:
08:b4:07:51:89:cc:73:27:b8:f2:ec:b3:1b:5d:ac:34:8b:b7:
6b:a7:cc:73:f9:87:fd:86:37:6c:09:3d:1c:c6:b0:63:c9:69:
14:ac:17:81:b8:4b:5a:45:8a:70:1b:83:15:47:86:06:34:8d:
8f:cf:f2:9e:ef:d1:7a:82:0c:ac:92:ee:76:07:93:e2:66:7b:
fe:a5:9a:e1:9c:e3:9e:aa:b7:05:e8:72:de:af:91:47:25:e4:
71:9a:c7:8d:88:f8:b6:a3:fe:ba:c7:fe:99:3a:e5:49:6d:7e:
65:7c:1d:3f:bb:d8:4f:5b:b6:66:2a:15:df:6e:dd:dd:8f:ed:
7a:bf:5f:a6:e3:1a:d4:a0:e5:06:2a:8c:4c:91:b6:3b:60:60:
5b:04:4e:9c:d1:ba:8c:1e:42:35:24:a9:62:8f:01:9a:33:0e:
42:02:2b:db:26:d5:88:79:1a:c7:0d:42:f9:20:37:e9:bb:fc:
4e:09:e3:0f:0d:fd:02:d1:41:ab:e4:ff:31:81:66:5d:4e:28:
fd:3e:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:05 2026 by rpki-client