
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4A2drAn7m-SWovmRGUvykQhg6xc.roa
File: 4A2drAn7m-SWovmRGUvykQhg6xc.roa (raw, json)
Hash identifier: 3omnzuvaIkmGGASjU6rwCc5PBpNost380pdZ/DC5XSQ=
Subject key identifier: E0:0D:9D:AC:09:FB:9B:E4:96:A2:F9:91:19:4B:F2:91:08:60:EB:17
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07BB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4A2drAn7m-SWovmRGUvykQhg6xc.roa
Signing time: Tue 31 Mar 2026 07:41:58 +0000
ROA not before: Tue 31 Mar 2026 07:41:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 219.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E00D9DAC09FB9BE496A2F991194BF2910860EB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:42:7c:d3:af:ed:24:76:c2:5e:ef:f2:1e:
d7:1f:15:a9:60:b3:5d:3a:74:1c:ce:03:b4:be:99:
d3:cb:a3:1c:bf:3b:c6:9e:b6:9e:bb:cb:04:6b:9e:
e9:05:56:7f:ad:22:d3:1d:d3:cf:cd:80:2e:ce:ae:
c4:f0:81:1d:2b:c8:46:d7:2d:36:90:59:25:c4:c6:
9a:45:4a:88:e7:e0:9c:6c:84:da:f0:7a:9a:b3:f7:
08:7b:1d:13:8c:69:4d:0b:34:6d:39:40:46:54:30:
1f:5e:2e:40:1a:d3:71:5c:c3:b4:0c:ff:79:69:01:
13:e3:f1:4b:b1:c9:30:9c:6c:d9:78:ec:b9:2a:c3:
83:07:6e:20:de:fe:68:b7:84:90:1c:0a:c9:e5:cd:
74:cb:9f:9c:ac:fc:a6:8a:60:e5:06:fa:90:b1:9a:
ff:11:4d:9f:5c:0d:18:90:e3:54:a0:ed:80:96:83:
86:53:3a:f6:f2:8d:e3:01:af:1c:61:aa:49:2b:11:
e2:96:ec:17:70:62:01:a1:da:22:ff:db:34:dc:e2:
4a:08:b4:b0:40:1a:5a:3b:7f:36:aa:8f:7f:49:ca:
c1:12:7a:02:b6:7a:0a:67:dd:b2:68:96:1b:a0:c8:
f2:68:85:eb:45:08:eb:dc:b6:51:76:81:6e:c6:f8:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:9D:AC:09:FB:9B:E4:96:A2:F9:91:19:4B:F2:91:08:60:EB:17
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4A2drAn7m-SWovmRGUvykQhg6xc.roa
sbgp-ipAddrBlock: critical
IPv4:
219.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:9b:a0:82:82:d7:de:a0:cc:5a:03:81:d0:89:35:98:9a:94:
f3:99:cb:5e:c2:84:51:c1:6a:a5:f4:40:e3:a3:fb:60:f7:85:
b7:7d:17:5d:5e:f6:3e:1e:b0:a2:33:fb:b9:2d:d7:0e:b4:3e:
04:0b:37:23:8a:05:bc:ac:6a:99:63:2c:ee:66:51:2c:a2:7a:
46:47:97:ef:b3:73:38:e5:23:db:86:f3:bc:69:20:57:c2:8f:
8a:6b:d7:14:5f:9e:a2:87:9c:c9:1b:5e:d1:d0:8c:1f:74:c4:
03:c3:a4:fd:b6:01:ea:b1:a7:4b:e6:58:5f:19:75:9f:9a:e9:
3b:5f:d4:0a:18:51:ab:e4:92:da:d0:77:e9:75:80:5c:77:c8:
70:fa:d3:34:cd:19:39:ac:57:cd:e1:e8:f5:9c:6c:d1:37:d6:
c2:45:39:2c:77:7f:97:9d:f3:e5:ad:18:17:df:b2:48:e4:5e:
5f:91:56:46:e1:a5:a9:e4:0a:c2:bb:52:29:79:a8:1f:08:e7:
6a:26:c9:04:eb:e8:92:b1:48:d8:81:8e:fb:61:f6:b4:a7:e7:
1d:0d:93:82:1e:46:79:67:29:ed:97:59:20:ed:2e:32:0b:94:
0f:d0:49:34:5f:f0:31:11:20:15:f2:d3:a1:6b:a3:3f:fa:1e:
d8:25:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:26 2026 by rpki-client