
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa
File: Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa (raw, json)
Hash identifier: LSVfhN800/snxob9hro2VojN1CadciJR5MjeEDtuv2g=
Subject key identifier: 19:CF:49:2B:8C:EB:35:D0:6E:C5:DA:FF:7A:DE:E6:4D:B2:E6:F6:6D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07DD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa
Signing time: Tue 31 Mar 2026 07:42:18 +0000
ROA not before: Tue 31 Mar 2026 07:42:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 111.86.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=19CF492B8CEB35D06EC5DAFF7ADEE64DB2E6F66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:e7:27:d7:81:7a:56:ae:f0:10:62:b6:47:
b0:fc:ef:87:76:40:a8:ba:80:12:4d:79:e1:e5:9c:
b0:85:a0:6a:5f:11:b6:4c:55:13:02:a9:e5:02:40:
2b:de:99:ba:09:61:2c:6c:2e:fb:18:76:34:e6:1f:
0c:bb:8a:1d:a3:f4:fa:91:ae:25:54:58:8d:c6:cf:
69:f5:b1:52:95:df:0e:4d:ed:23:41:64:f2:11:2a:
d0:23:68:9b:47:38:c6:5a:23:23:90:82:38:2e:a9:
62:f8:bc:08:05:34:b6:bb:63:e1:23:ae:39:61:c7:
35:f0:60:d1:05:b2:a8:b3:87:84:b9:75:66:ae:eb:
75:ae:dc:8e:44:61:65:3b:99:ac:35:66:4f:12:e5:
d3:b8:aa:4e:f1:6e:92:7d:d8:a9:88:dc:16:1f:49:
4e:45:0c:d0:e1:94:e2:dc:71:e0:7b:20:02:cb:e3:
c7:cb:7f:03:6b:04:97:62:d9:93:1e:37:98:9c:67:
de:a8:60:0f:ea:4e:33:5b:be:f1:4d:de:3a:d6:ef:
c3:9a:b2:09:36:39:d8:04:0a:65:fc:7c:84:84:51:
db:41:77:7d:3b:05:b9:b9:8b:56:d4:66:07:a3:84:
7e:56:d3:c5:3a:f6:9e:82:d5:00:36:a6:7e:1f:fa:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:49:2B:8C:EB:35:D0:6E:C5:DA:FF:7A:DE:E6:4D:B2:E6:F6:6D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa
sbgp-ipAddrBlock: critical
IPv4:
111.86.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:5e:bc:3e:b8:85:14:f2:59:e2:f5:42:dd:b4:2e:35:29:74:
7f:32:b2:52:8f:9d:18:f0:63:a2:ed:74:71:5f:9e:f1:03:d1:
2f:d4:b7:a2:4c:06:bb:b6:87:ad:66:1c:7f:32:73:70:de:48:
c3:27:fa:b2:cc:24:7c:ee:28:fb:2c:89:39:4f:50:6f:8e:63:
fa:36:b8:9c:91:51:7a:c4:7d:00:1c:8c:e6:1f:ba:b8:b3:63:
c2:09:c0:db:8a:3d:dc:41:bf:48:fb:8e:08:96:0e:14:e4:6f:
65:de:a4:f8:a3:be:c6:75:df:76:07:07:27:cd:e1:26:93:26:
71:45:9a:a0:e1:a4:7b:03:b8:b0:61:67:9e:f3:c1:a5:3e:8d:
ea:d4:18:33:03:65:df:af:9d:0c:a7:ce:ca:f5:7a:d5:65:de:
49:df:8f:bb:48:9f:f4:05:cc:cc:2c:1b:9c:cc:15:c1:02:f0:
df:cb:e4:97:52:b2:37:06:25:08:9c:44:e8:0a:5c:e3:ae:c4:
d1:43:d1:0a:b0:c9:de:b6:0d:4a:87:3f:3f:d9:62:f4:e7:f3:
85:18:ba:27:2b:21:9c:ae:68:8a:c6:a5:75:1d:99:ab:de:4f:
d1:9b:8d:f8:16:2c:c3:10:e0:f8:d8:24:50:01:e5:07:2a:fa:
f1:e2:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:00 2026 by rpki-client