
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8pYH2cLt2wjaHQDp7D0TU0CMmGs.roa
File: 8pYH2cLt2wjaHQDp7D0TU0CMmGs.roa (raw, json)
Hash identifier: 4ntWVtamM79Y4t64aSNKyGrjhPfZIo/vvH9CJ0nbw4E=
Subject key identifier: F2:96:07:D9:C2:ED:DB:08:DA:1D:00:E9:EC:3D:13:53:40:8C:98:6B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08A6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8pYH2cLt2wjaHQDp7D0TU0CMmGs.roa
Signing time: Tue 31 Mar 2026 07:43:57 +0000
ROA not before: Tue 31 Mar 2026 07:43:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.233.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F29607D9C2EDDB08DA1D00E9EC3D1353408C986B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:e1:b4:8e:bd:1b:b2:f5:20:90:33:79:da:
14:f7:0d:a6:c1:02:95:5d:eb:d9:b4:14:64:86:a7:
58:66:54:aa:28:b6:9f:8f:6f:61:13:c1:21:04:fd:
67:56:da:c5:30:e9:42:bf:15:a5:de:b5:fe:b4:92:
90:05:7a:3f:16:ec:ca:45:9a:1d:1b:b5:4c:ab:da:
be:5a:35:89:52:0c:2b:91:ea:c7:e6:ac:77:4d:95:
b0:74:67:cd:e8:0d:e5:3d:cd:65:19:b0:ec:4c:fb:
27:f5:47:35:4e:59:01:85:19:44:c6:9c:93:3d:90:
6d:58:fd:1a:53:1d:67:ad:b8:b3:5f:03:ce:ab:72:
cd:53:2b:1d:da:00:4f:6b:f8:f7:69:83:00:7c:f2:
d9:37:ef:7a:6e:20:2a:fe:7a:00:d7:5d:9b:68:76:
1f:b4:00:41:e1:82:73:ed:1e:51:59:71:0d:24:64:
20:7b:76:e3:7e:38:a7:50:58:12:98:22:0d:81:51:
dd:b8:ad:af:2c:4a:ae:e6:51:08:92:cb:4c:fb:c5:
15:bd:fc:4e:74:10:48:ec:5f:d7:b6:8b:c7:06:60:
b9:1f:bd:b2:40:53:3a:e3:68:b9:f6:dd:a8:5d:7a:
6d:de:fb:08:4d:2f:64:ff:be:a5:f4:d4:73:4e:2f:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:07:D9:C2:ED:DB:08:DA:1D:00:E9:EC:3D:13:53:40:8C:98:6B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8pYH2cLt2wjaHQDp7D0TU0CMmGs.roa
sbgp-ipAddrBlock: critical
IPv4:
210.233.97.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:30:c2:79:e7:08:97:3e:04:ad:1c:19:c5:2f:b2:e6:12:
30:ed:8b:fd:9e:48:98:ef:3f:90:15:1a:80:e7:94:7e:72:09:
b6:e3:31:dd:fd:6c:a8:81:b8:aa:81:b7:a6:a6:f0:a9:b5:9a:
d4:f4:6c:9e:c5:a1:29:7b:1c:6a:98:93:c1:fb:ac:c1:b1:fe:
05:29:5d:e1:58:99:f1:9f:8d:60:0a:e8:0d:2d:00:8e:47:ea:
fb:8b:4f:e0:82:5c:4d:e8:8c:d0:f8:ff:c7:46:11:eb:54:2b:
5a:e4:51:9d:0d:b2:e1:eb:fb:7a:1a:c0:20:94:c0:83:a6:fb:
bb:fe:75:6c:81:e5:6f:2e:4f:1c:a1:71:51:35:6f:bd:39:d9:
4a:4d:dd:27:ae:bd:ee:48:e3:22:23:d3:7f:b3:b9:f9:8e:a6:
15:96:63:d0:91:a6:63:f9:9d:c4:bf:bb:92:d8:86:93:1f:05:
f0:64:ce:08:a4:b5:76:90:eb:4b:c4:1a:c6:5c:24:73:f7:b6:
a7:b3:1e:01:82:73:1b:5d:9b:d0:f8:d5:f0:cf:46:c6:92:b5:
c8:4a:87:18:4e:3f:3e:ac:96:98:e2:75:6f:fb:b6:98:bf:cb:
eb:a4:c4:db:c8:4e:e1:7b:d7:3c:bc:ba:68:b6:0d:4c:28:cd:
91:87:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:39 2026 by rpki-client