
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2giAruBExRhUL1bP5-4zqPwTtD8.roa
File: 2giAruBExRhUL1bP5-4zqPwTtD8.roa (raw, json)
Hash identifier: 8EXrt/nIBvXczFtZv9hLFsl2M4IV5/Iq/7n2ZFHFaXM=
Subject key identifier: DA:08:80:AE:E0:44:C5:18:54:2F:56:CF:E7:EE:33:A8:FC:13:B4:3F
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0883
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2giAruBExRhUL1bP5-4zqPwTtD8.roa
Signing time: Tue 31 Mar 2026 07:43:41 +0000
ROA not before: Tue 31 Mar 2026 07:43:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.9.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DA0880AEE044C518542F56CFE7EE33A8FC13B43F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:03:b0:7c:99:09:dd:2f:79:3e:46:17:4c:
1a:e9:89:e8:71:64:10:70:31:92:56:10:b3:17:1b:
cf:31:bf:08:60:ef:bf:9f:7c:05:d6:dc:5b:57:8a:
d0:86:5c:6b:dd:d5:35:9c:75:cb:2c:ad:0e:d2:72:
c9:0b:b8:c5:be:a4:8d:a1:31:80:88:d9:04:5e:c7:
fd:59:94:03:6f:f5:db:61:94:04:60:93:d8:d8:89:
44:8e:a4:1c:19:9a:a0:d5:64:2a:a9:8c:4c:d0:ca:
b0:8d:a4:b3:ef:d5:51:c1:c4:d3:0c:f4:3c:52:88:
7f:63:0c:62:46:7b:ce:a7:77:7f:c8:bd:fc:a8:df:
43:34:15:25:84:59:4f:da:0c:22:d4:a9:83:18:aa:
7d:ca:5d:e5:53:f0:d0:a6:ed:ab:59:f5:96:37:da:
bb:1c:88:73:85:d6:23:92:40:1d:a5:ab:86:fb:82:
48:82:a3:c1:bb:e5:57:78:83:23:01:16:12:af:15:
55:90:8a:26:40:88:c5:81:0d:88:fc:c3:2e:d1:26:
e3:97:70:29:d7:9b:e8:d3:5d:ff:6f:6d:16:fa:66:
90:e3:1e:b6:ff:69:9d:38:0f:df:82:19:02:70:9b:
6c:1e:61:fd:6c:68:11:4c:6f:34:c5:22:95:4f:31:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:80:AE:E0:44:C5:18:54:2F:56:CF:E7:EE:33:A8:FC:13:B4:3F
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2giAruBExRhUL1bP5-4zqPwTtD8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.9.190.0/23
Signature Algorithm: sha256WithRSAEncryption
35:7a:5b:fb:fb:e8:15:49:ad:e6:af:01:85:a2:37:f1:3f:59:
32:a6:21:74:47:b8:81:29:d3:aa:19:7a:e0:cc:68:d2:00:3b:
a5:e8:9b:64:06:df:3e:a2:27:9e:27:12:9f:13:b7:75:37:2b:
a8:ea:9b:31:80:4a:3f:d1:cd:d3:05:93:7f:e7:30:8a:da:cd:
62:3d:32:4e:b4:fa:af:c0:45:45:e1:22:c2:49:97:af:f5:28:
4b:5b:a3:b8:21:0e:55:f2:57:89:f8:c5:83:9f:9a:aa:8c:8c:
12:2c:75:95:5d:f3:89:e8:86:0e:30:f7:4a:45:14:c7:d6:a3:
43:70:54:44:da:48:71:9c:f8:79:85:a4:9c:e2:25:84:73:0c:
19:05:fb:b5:40:26:bb:c2:e5:e9:1c:ac:33:14:5e:bd:5d:b6:
85:8c:9d:fa:2f:30:65:62:ab:59:28:90:dc:45:15:44:1f:d2:
fb:c5:0f:f2:31:c3:8f:13:5c:c7:44:5d:5d:fd:96:ad:76:f2:
50:66:83:bb:5e:f1:54:5e:42:37:63:63:b1:ec:c4:17:98:69:
ba:84:94:35:6c:d1:9b:26:33:6c:fa:47:5b:98:8a:ac:bc:25:
fc:dc:d8:09:54:0e:92:6b:7e:92:c7:e2:2c:af:5a:e3:31:76:
d2:da:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:32 2026 by rpki-client