
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CETCXwLwdCqJfgNSdg-dEz3CkWE.roa
File: CETCXwLwdCqJfgNSdg-dEz3CkWE.roa (raw, json)
Hash identifier: yvnQY6bswzVCYjhqDBFD7iDgOoEQEe5fij4O4n5lSTA=
Subject key identifier: 08:44:C2:5F:02:F0:74:2A:89:7E:03:52:76:0F:9D:13:3D:C2:91:61
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07F5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CETCXwLwdCqJfgNSdg-dEz3CkWE.roa
Signing time: Tue 31 Mar 2026 07:42:29 +0000
ROA not before: Tue 31 Mar 2026 07:42:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 59.129.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0844C25F02F0742A897E0352760F9D133DC29161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:ab:4c:9e:8e:eb:0a:0c:cd:26:93:db:e3:
02:9c:4c:96:0d:39:dd:e4:e8:06:2b:79:0b:57:97:
c3:21:5b:68:39:8c:81:4f:55:92:e3:f7:5a:96:4c:
4c:0d:c6:59:c1:cd:f2:fb:35:70:12:7a:f1:b9:8a:
5b:6b:18:af:f1:2a:ad:27:f3:25:10:22:a5:10:e0:
c3:d4:ed:70:11:96:ae:de:43:11:87:27:e5:a5:25:
98:45:b8:5f:a9:d5:8b:3f:69:d9:7a:cc:f8:ba:25:
b7:86:ab:22:90:3b:ab:59:92:ed:43:3b:62:2f:a1:
4f:d5:48:34:7d:ab:ce:e7:7f:a2:97:f3:7a:76:0b:
7a:3d:7a:ab:e0:6e:16:bc:a6:25:fa:57:6d:c0:1b:
23:13:64:f2:67:99:c6:3f:f3:c8:7d:a2:66:1a:3f:
33:46:18:fb:b0:d0:07:37:ef:1b:c0:1a:44:bd:39:
b0:80:f3:23:4f:f1:87:c9:98:18:f3:3a:81:1a:20:
ca:99:d4:97:cb:67:b1:30:bd:ad:8d:de:0e:dc:d4:
2d:54:73:04:a3:35:3a:7d:8f:2c:ca:5c:8f:4a:86:
c3:51:71:ba:e0:d4:9b:93:9b:96:f4:02:b9:c2:13:
01:f3:37:52:a4:e7:62:de:d8:de:9c:f6:36:84:18:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:C2:5F:02:F0:74:2A:89:7E:03:52:76:0F:9D:13:3D:C2:91:61
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CETCXwLwdCqJfgNSdg-dEz3CkWE.roa
sbgp-ipAddrBlock: critical
IPv4:
59.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:41:51:11:cb:4d:bb:13:d1:55:19:5d:7f:37:32:0d:be:fd:
e1:73:dc:6a:c9:b5:be:3a:4a:9d:34:46:51:85:35:9d:3b:24:
67:e7:48:72:1b:7f:ba:67:b2:48:34:b9:1d:34:49:e0:58:22:
18:5e:62:14:54:43:41:34:55:19:0f:18:53:11:ea:42:0a:64:
c7:c7:51:75:56:fa:cb:f8:52:74:b5:d6:0c:4c:77:99:80:bc:
80:19:f4:cf:0a:ce:f1:30:ca:fa:b2:96:aa:2a:67:d2:dc:78:
18:78:6a:07:02:cd:bd:6f:b1:b7:37:a5:91:33:16:46:1e:94:
3e:9e:5f:5e:b0:2c:43:64:38:ac:4b:6c:c5:08:9c:0f:b6:6c:
38:a1:3e:63:fd:b4:24:9c:58:8e:3d:36:f2:1c:cd:fe:c2:7c:
1b:d6:53:d1:d0:14:37:59:80:71:a9:a7:2b:71:b2:7e:d9:17:
7d:57:cd:6f:cc:d4:fa:c0:34:de:42:e1:48:fe:00:c0:61:d6:
11:5d:8b:22:2f:d6:18:b5:8c:5a:95:e8:e1:44:0c:a9:83:84:
73:a9:ec:8a:4b:d2:c4:4e:fe:fe:63:90:ab:51:eb:ee:87:47:
6b:ed:c4:2c:98:39:1a:da:16:8e:67:23:38:74:e9:ab:c0:0e:
dc:a4:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:51 2026 by rpki-client