
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa
File: F8Ern6-Gs-hAze8-VAZTda0I4KE.roa (raw, json)
Hash identifier: 7cwj/uJJfZ/Ssy9c1HU29toaZXbs7v5LpdpyHBrmsYM=
Subject key identifier: 17:C1:2B:9F:AF:86:B3:E8:40:CD:EF:3E:54:06:53:75:AD:08:E0:A1
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0850
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa
Signing time: Tue 31 Mar 2026 07:43:16 +0000
ROA not before: Tue 31 Mar 2026 07:43:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 182.248.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=17C12B9FAF86B3E840CDEF3E54065375AD08E0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:fc:37:96:bd:d1:f7:06:d7:9d:2a:84:b0:
6d:b8:a8:42:47:c2:4b:2a:4d:cf:85:10:2c:f9:d1:
bb:f2:97:21:7f:a4:b3:e5:07:99:87:86:4c:55:79:
6e:4a:41:70:d9:9e:a6:a9:13:50:66:9d:eb:88:ae:
3b:6c:b4:68:f2:73:e2:97:4c:95:4e:7e:96:2f:ce:
b4:74:9b:ae:2e:3c:ce:5b:89:e5:97:27:cb:98:6f:
18:7f:6d:4f:b9:25:e9:32:b2:80:43:4b:bd:55:89:
68:f8:76:5f:13:e7:df:df:2d:e4:cc:21:43:c4:68:
c9:30:8c:7b:43:9a:3a:fb:c0:42:83:dc:9e:ff:04:
a6:63:13:97:39:1e:d2:8c:76:3f:bf:43:5d:7c:03:
71:3e:1f:a5:b7:12:9d:d8:2d:60:fd:91:7b:41:b6:
13:05:3e:af:23:85:51:6a:e9:bb:f6:6a:69:c3:71:
5d:a5:8d:20:b6:86:34:2a:47:04:69:b5:04:69:b2:
f6:61:fe:1c:c1:b8:40:97:88:89:9f:32:6f:42:fc:
d0:1c:f9:47:79:55:8e:b0:a5:88:70:a3:1d:da:8c:
3b:21:ba:61:0f:fb:ca:48:7b:08:18:37:fd:3e:e5:
04:fd:9e:97:81:2b:88:39:c4:ec:3a:4c:b0:e8:34:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:2B:9F:AF:86:B3:E8:40:CD:EF:3E:54:06:53:75:AD:08:E0:A1
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa
sbgp-ipAddrBlock: critical
IPv4:
182.248.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:ee:c3:0a:4a:26:4f:ce:c4:32:03:dc:45:b2:ce:2d:ad:98:
83:a8:19:75:1b:f9:dd:ad:c9:63:55:b3:8d:a7:6e:73:ef:e2:
bf:9f:31:8d:bc:12:51:2c:c8:1f:5c:cc:7c:f5:09:18:84:e6:
3f:07:4f:05:c6:54:b7:47:54:17:2a:a2:05:de:8f:27:a3:87:
0e:0d:f7:e0:39:15:76:13:24:23:b4:75:8f:3c:53:6c:e5:b7:
c9:1d:5c:0f:9c:ba:b2:db:74:b7:be:68:f8:71:00:d8:72:2f:
76:e6:bc:de:7b:d8:07:a0:73:7e:4c:8e:8a:cd:24:98:92:eb:
11:a7:5d:c1:7b:f7:1c:d5:3b:d9:56:b6:69:9b:14:95:79:42:
ff:06:47:7e:c9:ed:7b:8b:21:7f:fe:ac:49:01:88:66:1d:f2:
1a:23:50:c3:c3:d1:2d:b2:eb:59:d9:e2:e5:86:55:3f:04:e0:
d6:b5:51:b7:3e:91:b7:81:27:51:d6:87:72:37:0e:40:b8:f6:
3a:a3:0f:2d:c5:e0:8c:1a:41:e0:a8:9a:fe:50:85:cf:cf:19:
43:64:0d:7e:bb:cb:93:45:92:7d:12:ab:10:c3:73:cc:18:53:
a6:ac:6a:b9:17:f5:c2:86:d5:a8:9e:7c:ff:94:25:80:61:0d:
f7:30:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:09 2026 by rpki-client