
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa
File: 7ADV3m25KiSru0FYCT_nY9UEh2A.roa (raw, json)
Hash identifier: bHz8P4MJy+C7Rdd5kctxquq+Vm2xez8+NKTuTLFBW8g=
Subject key identifier: EC:00:D5:DE:6D:B9:2A:24:AB:BB:41:58:09:3F:E7:63:D5:04:87:60
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 082A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa
Signing time: Tue 31 Mar 2026 07:42:55 +0000
ROA not before: Tue 31 Mar 2026 07:42:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 27.95.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EC00D5DE6DB92A24ABBB4158093FE763D5048760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:cb:11:5b:55:5c:c6:b0:5c:5e:b9:be:8b:
7e:17:ee:a4:b3:f1:0b:c6:30:dc:f0:83:61:da:bc:
ca:69:3b:9e:10:fc:2d:2e:aa:1b:ce:6e:7d:41:1c:
25:ca:4a:9d:2a:8a:e9:a8:21:57:f0:5c:3d:c9:fb:
de:78:71:be:ff:04:f0:d0:65:13:59:7a:07:ee:ba:
4b:18:bb:bc:34:ba:ba:60:ff:4f:88:09:c0:32:90:
5d:22:2d:c9:34:6d:3b:b3:be:aa:c1:1f:d0:63:e6:
e3:e8:f5:82:4b:64:37:c2:88:2e:2c:25:09:38:81:
16:c2:2b:c2:f4:02:c1:0d:59:d7:e0:b5:bd:f0:00:
c3:3c:2e:e9:8d:a4:f6:7f:c1:06:87:04:25:81:63:
c3:78:78:97:de:85:d3:e8:9e:7d:51:ff:a7:9b:bc:
bd:d6:74:36:20:ca:cb:f7:37:4f:89:02:58:a1:8d:
0a:9a:d6:df:95:31:a7:b0:6c:df:bc:af:3c:45:8c:
61:14:ed:29:43:cc:be:14:a9:cd:c9:56:cb:5d:de:
38:c9:f6:21:5b:4e:71:5e:99:5a:42:1e:d7:67:d4:
6d:83:b5:d6:4c:82:fc:4f:5f:0b:7c:fd:09:0f:fb:
0c:29:2d:83:66:0e:f7:ea:70:d4:cd:aa:ae:e3:1d:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:D5:DE:6D:B9:2A:24:AB:BB:41:58:09:3F:E7:63:D5:04:87:60
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa
sbgp-ipAddrBlock: critical
IPv4:
27.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:b3:25:3c:4c:81:13:3d:89:ad:3c:c6:c0:55:b5:7c:ec:c4:
7b:c6:ea:2f:27:0d:ca:66:cc:f9:c7:d0:31:fd:e0:62:56:bf:
f7:d0:70:51:75:37:c9:0b:7e:ac:4b:bb:5a:f3:e0:70:f0:30:
2b:75:f6:47:cf:09:26:25:ff:76:01:2a:9a:47:04:46:7f:47:
31:65:b4:bb:c0:00:2c:90:8d:b6:7e:63:4d:51:64:8f:e6:b6:
ca:81:dd:44:17:32:76:60:13:36:a5:62:54:86:13:eb:92:73:
30:59:51:9e:a7:70:44:3b:d6:28:26:db:b0:5d:01:f6:9d:d9:
54:4b:7f:53:24:8d:ba:b5:c5:8e:98:24:bd:2b:2e:8d:fc:3e:
67:b0:79:d8:1c:75:f0:1d:b1:8a:63:6d:16:b9:4d:3e:4d:e6:
73:2d:38:9f:ad:d1:9a:ef:38:73:66:0a:d5:3a:16:cd:6e:39:
a0:20:75:ae:24:b3:16:2e:a7:3f:7b:30:3e:04:97:61:dc:d2:
bc:bf:5e:26:d7:84:64:d4:6d:b8:f7:d9:2d:0f:33:35:6c:b4:
f4:5c:b7:ff:ea:27:b3:96:ee:35:df:a2:93:69:85:1d:cd:78:
95:87:78:1f:1c:34:b0:6e:f5:37:72:4a:b0:0c:bb:c3:38:41:
95:c1:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:39 2026 by rpki-client