
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Cgp51C0WIZdtnJz7TRGQNZLJgM.roa
File: 2Cgp51C0WIZdtnJz7TRGQNZLJgM.roa (raw, json)
Hash identifier: bUeNTpg1FCMh9zEYtEDbXFd1G4J9up9RgXzBXJqGwho=
Subject key identifier: D8:28:29:E7:50:B4:58:86:5D:B6:72:73:ED:34:46:40:D6:4B:26:03
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 087C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Cgp51C0WIZdtnJz7TRGQNZLJgM.roa
Signing time: Tue 31 Mar 2026 07:43:38 +0000
ROA not before: Tue 31 Mar 2026 07:43:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.253.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D82829E750B458865DB67273ED344640D64B2603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:81:f0:d6:6c:e0:d2:9e:a6:3f:ee:5c:f6:
b3:47:1a:d6:5a:f0:d8:a1:5d:0f:ad:a9:d2:ad:0a:
29:e9:34:dc:11:aa:fc:d3:80:64:ff:18:ad:36:89:
32:b5:f5:d3:0a:37:24:2c:6d:8d:8a:b9:e8:e6:51:
b6:3b:30:96:3e:ad:20:a9:2f:41:c0:ad:38:a2:6d:
5b:83:af:22:d3:bf:7c:d9:ae:d5:32:37:ab:ab:1c:
86:9d:a0:e8:dd:ee:4a:32:84:39:c1:3c:1e:f7:88:
43:22:2a:6d:12:9f:4c:4a:be:3b:7d:b8:bd:cd:72:
cf:57:bc:77:81:75:26:86:5f:5c:b9:82:93:9c:c2:
a8:32:3c:d0:56:e1:ba:5a:2f:aa:6e:fc:3e:51:20:
89:b0:b5:27:60:47:b6:e6:7a:3e:36:ce:ef:6c:07:
02:82:51:24:d5:56:a9:ce:22:bb:5d:88:31:46:3e:
b9:be:cf:5e:55:ea:8c:02:78:d6:d2:3f:61:be:fa:
9b:5e:ff:b8:9a:b4:13:04:87:3d:d6:77:21:e2:ba:
11:7e:3d:27:15:aa:5b:01:b4:d8:74:17:e9:85:58:
6a:b1:d1:4e:04:75:10:1f:c2:59:49:c9:c2:a8:81:
a0:0f:71:07:04:64:a3:52:d9:38:99:ab:ae:6b:6b:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:29:E7:50:B4:58:86:5D:B6:72:73:ED:34:46:40:D6:4B:26:03
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Cgp51C0WIZdtnJz7TRGQNZLJgM.roa
sbgp-ipAddrBlock: critical
IPv4:
210.253.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a7:53:a7:3d:1e:22:32:8e:a4:62:cf:5d:29:1a:f0:63:bf:
dc:07:b2:d1:a9:f3:ce:0d:f9:d1:5c:a9:86:02:e2:a4:c9:35:
4f:24:5d:e5:e8:8a:68:c6:52:65:43:ea:e6:77:0d:d9:f5:70:
55:0c:96:ae:43:e9:84:ce:21:1b:75:0e:b9:fc:2a:6d:30:03:
43:f1:7d:d0:3f:a7:85:5f:5b:1b:eb:be:b1:4c:eb:6e:48:63:
8d:9e:72:73:48:dc:4b:25:be:e1:5e:8f:5b:4b:4e:3b:e5:d1:
0e:db:58:3a:89:00:7b:d1:4a:b2:51:26:8a:44:d0:01:dd:5b:
2e:31:8b:eb:48:0e:e4:26:fd:cf:c9:e7:aa:ea:60:78:9d:a9:
56:27:8b:00:48:b5:48:24:39:e1:b1:30:e7:f1:6a:b7:3a:32:
7d:74:24:f5:34:67:e5:89:93:aa:ce:fa:68:76:6e:8b:d0:07:
d2:33:e7:8f:b9:99:a6:a6:ef:70:20:eb:b3:99:36:1a:b5:ed:
f2:83:b0:f6:16:2c:1c:de:ee:95:40:52:11:fc:c2:1d:c8:ac:
f8:22:ca:0a:c9:52:e4:bc:73:22:51:33:cd:18:c4:a4:a5:0c:
f4:87:fc:6a:f6:52:b7:b9:a3:b0:d6:59:36:9f:5b:93:80:f7:
0b:7f:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:51:09 2026 by rpki-client