
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AhKfgSxmNiu1mcXgHAYa60HARIU.roa
File: AhKfgSxmNiu1mcXgHAYa60HARIU.roa (raw, json)
Hash identifier: OtjD36E0f1kwoUMRWtmucixQGsabsxJSN+HaYrZ8BBk=
Subject key identifier: 02:12:9F:81:2C:66:36:2B:B5:99:C5:E0:1C:06:1A:EB:41:C0:44:85
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0872
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AhKfgSxmNiu1mcXgHAYa60HARIU.roa
Signing time: Tue 31 Mar 2026 07:43:34 +0000
ROA not before: Tue 31 Mar 2026 07:43:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.254.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=02129F812C66362BB599C5E01C061AEB41C04485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:98:5d:2e:95:cd:80:0f:77:31:e8:67:14:
96:12:f1:2c:5f:ee:81:13:d5:ca:60:d2:71:9f:96:
4f:e9:d9:af:41:49:f1:ab:56:6a:03:16:6b:0f:fa:
a6:19:25:20:e4:16:44:f4:67:7c:6b:60:f8:3c:d1:
31:d2:96:4e:e7:c6:36:82:37:f9:a4:68:43:56:e3:
02:f5:92:21:60:d8:af:76:09:4a:5d:33:68:73:c0:
d1:89:de:a0:74:47:30:a9:71:9f:b0:da:f7:b0:e4:
8d:37:3c:db:fd:b4:2c:4c:47:83:30:57:b4:98:74:
ab:01:c6:8e:98:57:ee:10:26:28:66:7a:77:33:91:
22:71:66:37:28:87:57:fe:35:7c:15:82:a5:86:39:
1b:9e:f3:94:ba:3a:0a:86:62:80:f4:ea:5f:ac:cf:
7c:3e:f4:09:9d:75:95:9c:30:7c:1a:c2:fc:e5:b2:
72:1b:76:54:3b:4c:dd:f1:e4:de:ae:d5:2e:55:51:
f8:bd:ef:8b:be:0b:4f:4c:e0:f9:e9:e0:62:ae:5f:
8b:45:d5:51:c9:d9:b4:32:1a:f6:5a:95:f9:0d:8a:
af:f0:40:c2:ed:31:3d:03:66:84:91:36:8e:5e:ec:
59:c4:f2:1c:11:3c:b3:09:70:81:cc:bd:a6:73:86:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:12:9F:81:2C:66:36:2B:B5:99:C5:E0:1C:06:1A:EB:41:C0:44:85
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AhKfgSxmNiu1mcXgHAYa60HARIU.roa
sbgp-ipAddrBlock: critical
IPv4:
210.254.118.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:4e:77:84:e3:b4:aa:d0:98:d1:1b:d5:3b:1f:b8:da:08:6b:
ca:02:1a:a6:53:b8:02:d6:ed:e7:ce:83:60:1b:b9:09:f6:15:
24:74:aa:58:4b:42:11:ec:3e:a5:10:c3:fe:a8:5f:64:9b:c5:
a6:26:5f:ee:bd:1d:64:04:3e:c6:12:76:e6:fb:fb:1a:ef:62:
07:5c:19:8e:20:47:d3:2e:8a:65:34:26:40:91:4f:0b:a9:7b:
c7:3f:05:79:f4:2a:19:50:a6:a6:05:02:fd:25:72:c1:dc:af:
d7:f5:1e:33:2b:59:26:25:65:ba:2d:e7:1f:23:fa:3c:01:06:
cf:3a:8a:a3:11:dd:e8:69:53:72:7c:28:71:9a:06:d7:14:cf:
ce:70:68:c4:a3:4d:06:d6:f9:bb:aa:bc:fb:ee:b8:c6:e8:b3:
44:63:82:6c:ff:b8:ee:0e:4a:42:85:cb:ee:12:58:d0:91:71:
f1:7d:cd:41:02:fd:16:04:5f:64:cb:80:6c:d9:ff:47:0e:7b:
66:12:51:e2:5b:43:6d:3c:17:3e:4c:a5:b8:12:2b:ee:e2:c7:
89:b9:84:1c:a9:ee:a8:9c:0b:19:e6:f1:80:8b:e0:66:e5:8a:
9e:b2:e4:0a:24:8c:85:98:1c:76:07:4c:bd:dc:12:32:e2:92:
b1:63:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:02 2026 by rpki-client