
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CN6fXkCvoilBTIGZRHpBW10pwUU.roa
File: CN6fXkCvoilBTIGZRHpBW10pwUU.roa (raw, json)
Hash identifier: 0jXNXGlhk5S5RW58XVti9MKYzJTiEi3CtbBZwbLLSak=
Subject key identifier: 08:DE:9F:5E:40:AF:A2:29:41:4C:81:99:44:7A:41:5B:5D:29:C1:45
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08A8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CN6fXkCvoilBTIGZRHpBW10pwUU.roa
Signing time: Tue 31 Mar 2026 07:43:58 +0000
ROA not before: Tue 31 Mar 2026 07:43:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.10.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=08DE9F5E40AFA229414C8199447A415B5D29C145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:d1:4e:eb:a6:4f:bd:4f:d6:bd:17:38:fb:
1e:94:27:a2:4c:dc:b3:15:8a:ea:4b:bf:66:3e:fa:
37:78:63:78:36:00:70:b2:c2:da:57:3e:90:8d:3a:
0f:ab:7d:4f:f2:8f:eb:b9:a5:3b:2f:24:0a:05:f5:
02:78:a5:3c:10:0f:e4:78:4f:8f:bc:b6:ae:23:26:
7f:dd:12:a4:58:69:d6:f7:07:08:bd:56:63:d2:73:
35:ae:52:6d:9c:de:af:2f:2e:ba:c9:2e:7b:e6:99:
9a:87:fe:02:8b:56:50:22:f6:b7:c6:63:66:1a:40:
e0:35:d0:75:10:4d:56:76:f2:a0:e0:15:72:bc:ea:
39:81:87:ff:23:6a:ba:76:02:0c:33:b5:69:5b:5c:
07:e3:bd:70:be:cd:a4:eb:e2:f0:01:1c:91:c2:31:
4c:04:f1:51:11:f9:47:0e:3a:8b:75:d5:1e:fb:b6:
67:f1:6a:58:36:b4:df:ac:46:a0:30:53:48:7e:6d:
b0:ba:e8:d0:48:9f:28:cf:89:c6:08:53:88:ee:68:
72:a5:9f:c4:1a:d0:33:03:1b:bb:c7:f7:b4:95:2d:
d5:cc:30:12:28:d9:6f:85:fe:6f:52:e5:bc:dd:1e:
75:c5:fd:9d:14:8e:47:4a:0d:73:a9:d2:dc:a0:3d:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:9F:5E:40:AF:A2:29:41:4C:81:99:44:7A:41:5B:5D:29:C1:45
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CN6fXkCvoilBTIGZRHpBW10pwUU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.10.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3a:22:a7:d3:be:1a:89:d7:c7:cf:d7:f9:0c:58:2c:ec:f8:
80:3a:9d:6b:d4:33:87:1a:d0:f4:75:59:91:f0:8c:37:45:88:
6a:b6:23:01:41:4f:bd:c4:a1:6c:f9:a1:8a:a5:29:db:c9:40:
4f:48:be:c7:1c:f5:27:83:4f:32:12:a7:94:16:9c:ca:98:7d:
b7:ec:48:17:b4:14:80:d4:3e:ec:e0:d6:03:bc:61:f6:41:2a:
8b:b3:82:8d:9f:84:29:8e:2d:9f:6a:17:ca:fc:d0:5b:64:75:
d9:ca:5b:e8:af:3a:c9:88:86:de:78:0f:db:cc:5a:0d:29:fb:
65:1c:32:65:80:1a:a1:c6:33:fe:81:79:6f:92:1e:42:75:d7:
36:33:29:66:0f:50:91:eb:c3:e6:1a:cf:b7:bf:6d:25:af:45:
2d:f6:06:30:aa:37:21:a8:e3:4a:db:8f:59:99:28:08:8d:dc:
5d:23:84:a1:92:a5:02:ed:b9:6a:1f:de:28:be:3c:89:1a:db:
5f:aa:a7:59:26:83:2c:c3:7f:13:8d:3f:c2:35:d0:cc:92:39:
6b:f3:b9:2d:ea:3e:51:c3:34:b3:12:4d:15:92:7b:88:7f:04:
4e:ce:25:5d:0b:36:13:21:5d:39:b8:b7:26:96:e8:f6:de:cf:
2a:58:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:39 2026 by rpki-client