
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AF_9IlK-sEUa8VPw8juvM5aBUQ4.roa
File: AF_9IlK-sEUa8VPw8juvM5aBUQ4.roa (raw, json)
Hash identifier: /uNJJBcBCi5WRcgmti7U7wgc9xy9bYJnDost1gTkNek=
Subject key identifier: 00:5F:FD:22:52:BE:B0:45:1A:F1:53:F0:F2:3B:AF:33:96:81:51:0E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0887
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AF_9IlK-sEUa8VPw8juvM5aBUQ4.roa
Signing time: Tue 31 Mar 2026 07:43:43 +0000
ROA not before: Tue 31 Mar 2026 07:43:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 124.109.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=005FFD2252BEB0451AF153F0F23BAF339681510E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:62:93:58:e6:f0:79:47:fc:90:97:99:72:
0f:0d:d2:d8:bd:cb:73:6a:51:3f:7c:f2:09:7b:45:
eb:d1:a7:b6:e4:5f:03:f0:d1:0a:3e:c3:33:f4:60:
f0:6c:7d:8e:a8:ae:b5:27:54:f1:19:65:ae:18:f9:
2e:16:bd:29:35:ae:50:3a:ec:60:c6:1a:bb:c0:92:
39:bb:ce:6e:4e:50:f1:41:03:4c:7e:c0:aa:26:20:
0e:c0:30:d1:1a:1d:51:d3:e1:ac:d6:39:f2:b4:ae:
cc:20:2f:11:72:b6:9e:60:75:99:75:b0:46:4d:0a:
1c:1b:68:92:72:e6:13:27:09:6b:7e:e9:ce:4d:06:
24:90:4c:74:dc:06:f8:ab:62:c2:5d:6b:07:37:85:
c7:a8:f3:02:00:0b:57:5f:ce:f2:b8:78:24:63:ba:
ca:a4:60:90:22:83:a8:4c:3c:8f:18:a4:49:85:be:
ce:94:ff:3b:bd:d6:4a:b9:49:c7:e4:a8:31:e2:e4:
e0:48:b7:5a:68:f9:5b:b7:7d:c5:2c:a5:6c:c7:8d:
73:e0:61:1b:f7:b9:67:a1:dc:42:a4:e6:04:66:34:
6b:f9:5f:c8:61:d2:cb:d5:b3:bf:1e:d3:54:0c:3c:
e0:84:8f:e3:59:64:22:c5:66:81:d0:83:b2:87:ac:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:FD:22:52:BE:B0:45:1A:F1:53:F0:F2:3B:AF:33:96:81:51:0E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AF_9IlK-sEUa8VPw8juvM5aBUQ4.roa
sbgp-ipAddrBlock: critical
IPv4:
124.109.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:ef:08:c7:02:0c:f1:83:65:23:04:a2:47:b5:94:21:6a:
4f:52:a8:7f:5f:a6:c5:2e:35:1e:d8:10:61:5c:d7:94:45:7f:
24:d8:43:fa:e1:74:cf:30:63:34:de:73:b4:e7:c6:34:58:70:
f6:e1:65:06:6d:d5:01:ac:14:0a:58:8b:29:3b:10:8a:91:c2:
4a:f2:3b:64:28:59:ad:40:62:96:bc:fc:52:d8:b6:92:a5:d6:
5b:4f:62:ca:5c:8f:38:b5:87:ef:67:db:a7:62:92:d8:cc:30:
83:2c:ec:63:0b:f3:bb:29:fc:f9:93:74:99:ac:d5:ed:32:df:
a0:40:04:ff:8d:ec:c3:51:0f:75:71:28:35:72:78:5a:14:b5:
22:83:8e:db:99:bb:84:1e:b1:42:f8:db:d8:85:da:3b:b0:8a:
94:f0:b8:c0:8c:4f:8e:f5:bf:72:11:17:b8:59:32:15:97:33:
4f:38:42:fd:90:e5:e2:29:6f:40:9b:d2:cf:35:fe:e9:21:f8:
40:1b:55:58:de:d7:bf:d3:80:53:93:77:c9:0a:55:2d:5f:a5:
4e:f3:7b:e5:bd:92:2f:53:fa:85:90:37:b6:07:8b:af:a7:80:
32:da:7f:b0:92:c8:8f:a8:ca:4d:96:54:f9:4c:5e:0a:78:7c:
b1:0c:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:31 2026 by rpki-client