
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D4W1xJpickL7QVEGpbD1_oZZulU.roa
File: D4W1xJpickL7QVEGpbD1_oZZulU.roa (raw, json)
Hash identifier: j7R+jm/L5ARc5K9dBYI9N6xlOhxYcUh5l5ZIa0xdKpY=
Subject key identifier: 0F:85:B5:C4:9A:62:72:42:FB:41:51:06:A5:B0:F5:FE:86:59:BA:55
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 076D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D4W1xJpickL7QVEGpbD1_oZZulU.roa
Signing time: Tue 31 Mar 2026 07:41:23 +0000
ROA not before: Tue 31 Mar 2026 07:41:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 106.175.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0F85B5C49A627242FB415106A5B0F5FE8659BA55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:d4:13:ef:77:43:a0:78:62:21:4a:89:c1:
94:4b:88:7f:b4:b5:ef:4a:70:75:ed:e5:51:bf:de:
08:bd:30:72:1e:81:cb:43:c4:93:33:93:0d:60:c7:
cd:20:68:3b:65:4d:d4:3e:93:54:ea:96:ee:c8:40:
b4:6b:58:99:92:c4:64:ee:ae:26:09:9a:0f:9e:62:
cb:d4:06:b5:b9:16:9d:e9:63:db:84:ce:fe:d6:75:
0d:59:9c:3f:84:5b:09:47:10:94:e3:f6:6f:89:25:
ea:16:3a:6e:fe:48:b7:b8:28:ca:1d:61:45:ed:d7:
54:0b:d1:b0:3c:81:fb:4e:2e:da:b6:ad:23:71:70:
d6:7c:59:08:10:88:82:e7:7b:c8:13:68:90:4a:0d:
1d:44:f6:67:66:9e:58:2e:be:61:31:6f:ac:9c:81:
7e:4b:b5:28:a9:7b:10:1e:40:45:78:c2:02:c9:44:
15:ca:56:ca:ff:8c:5f:24:b7:3a:db:9a:ce:1f:5b:
c5:ec:c3:c9:df:58:4e:60:03:ca:7e:63:6f:8c:d2:
18:6d:de:d5:06:10:83:b5:be:1d:1c:30:c5:cb:23:
da:f8:7d:57:91:d5:18:2b:10:27:54:1b:67:58:6f:
d6:20:b7:3e:35:cd:65:39:d1:2d:bd:71:45:52:54:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:B5:C4:9A:62:72:42:FB:41:51:06:A5:B0:F5:FE:86:59:BA:55
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D4W1xJpickL7QVEGpbD1_oZZulU.roa
sbgp-ipAddrBlock: critical
IPv4:
106.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:8a:da:f2:65:be:ee:ef:a9:5e:be:23:7e:4d:fd:db:c3:12:
b3:9d:e3:f3:58:d1:1a:79:6c:ae:bf:99:9a:fb:2a:b0:3b:a5:
51:1d:c1:77:04:e1:a0:82:52:97:14:29:15:06:28:f3:2e:11:
ec:54:91:14:47:4c:18:31:3c:5b:35:63:6c:b4:08:08:62:b1:
5d:f3:6f:fa:4e:c3:a0:e8:11:c1:9c:36:0d:4f:3a:9e:59:3e:
d3:21:bf:a1:db:1c:a5:63:3a:1e:14:fb:b4:7a:4f:a3:32:b1:
78:b4:6d:89:30:33:8d:89:b3:7e:d8:c6:39:f8:68:b5:59:5d:
f2:10:ac:57:a9:81:bf:7a:10:02:91:c1:52:8a:e7:a5:a2:09:
f6:4e:d9:ec:99:62:e7:dc:70:c8:66:13:47:20:94:a6:d6:01:
57:38:77:14:2c:3c:f7:ef:2a:bc:f2:49:11:29:e6:50:2f:45:
5d:a0:4a:1d:13:5d:69:8a:2c:81:7b:c3:6b:ef:56:05:db:11:
55:34:c8:0b:e6:a8:4b:46:e1:07:0a:f1:23:d5:d0:0d:30:c5:
06:db:60:c1:b5:52:78:87:1d:73:13:99:52:31:0f:b7:bb:97:
9e:63:9d:6b:b8:2c:41:62:af:45:74:25:c9:99:a5:9c:1a:c3:
15:c8:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:08 2026 by rpki-client