
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HYs5-_R36D8jX2JNOk6NSGQx5Z4.roa
File: HYs5-_R36D8jX2JNOk6NSGQx5Z4.roa (raw, json)
Hash identifier: pznEMnqnEwdG34S8lRBSYGvCZpIdZQ+uxNJDjHi/0Bk=
Subject key identifier: 1D:8B:39:FB:F4:77:E8:3F:23:5F:62:4D:3A:4E:8D:48:64:31:E5:9E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 091D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HYs5-_R36D8jX2JNOk6NSGQx5Z4.roa
Signing time: Tue 31 Mar 2026 07:44:49 +0000
ROA not before: Tue 31 Mar 2026 07:44:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23624
IP address blocks: 14.14.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1D8B39FBF477E83F235F624D3A4E8D486431E59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:13:0e:fd:3c:cc:4d:58:3a:e8:5c:46:73:
9d:0d:db:e5:dd:c1:57:cf:cb:33:68:56:df:4f:e5:
ba:84:a3:23:28:96:6c:a1:d5:6e:d2:bf:84:fb:b2:
39:5e:3a:f6:e5:3f:98:c6:79:2d:c0:31:f7:3c:6c:
cd:2f:a4:fd:8c:fa:50:3d:98:ba:21:df:98:16:be:
79:a9:85:82:97:26:0f:b6:e5:aa:fe:f5:7d:73:ed:
53:13:06:26:30:fc:81:0b:3e:d1:69:5b:14:8f:a5:
d1:31:03:f5:cc:9d:69:77:b0:8d:60:02:e1:90:33:
8e:f2:d4:aa:fa:9d:5d:a6:4c:f2:f8:a4:0c:b1:fc:
d0:c3:a1:94:8f:c4:98:f7:d9:17:ba:2c:2a:a0:1d:
fd:98:f7:af:21:1c:6a:dc:fe:c7:4d:e4:c4:c9:a1:
af:31:96:ea:c0:04:4e:45:d6:d3:fc:0e:23:d3:27:
81:64:69:1b:37:44:f6:55:4e:3a:c8:8c:8f:ce:91:
24:f0:18:45:83:80:a6:85:40:1e:79:e3:de:22:ac:
6e:ba:55:b0:97:2b:19:ab:23:4b:f6:7d:9c:9c:83:
d6:da:cb:6f:a6:44:0f:7c:cc:e1:8f:a4:1b:a6:8e:
f5:0e:ac:8d:71:8e:65:e9:ab:39:d4:55:e0:01:ef:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:39:FB:F4:77:E8:3F:23:5F:62:4D:3A:4E:8D:48:64:31:E5:9E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HYs5-_R36D8jX2JNOk6NSGQx5Z4.roa
sbgp-ipAddrBlock: critical
IPv4:
14.14.96.0/20
Signature Algorithm: sha256WithRSAEncryption
57:da:e7:dd:29:8f:38:02:c5:47:af:9b:aa:18:3e:76:27:22:
68:8e:25:cf:b3:ba:48:45:12:05:d0:88:40:1f:a7:53:f6:03:
83:72:b2:ac:41:3d:9d:24:10:c4:3e:39:34:21:bf:3e:2b:4b:
43:59:7e:4c:8a:b1:29:dc:3d:8f:0c:29:b5:e5:f8:ef:e4:87:
51:65:c1:8e:68:82:b9:e9:02:92:32:c2:53:f3:0c:65:75:62:
e7:b4:93:3f:53:ed:6c:2a:1d:cd:1f:06:18:02:f2:1c:d6:22:
ae:b0:b5:14:38:05:10:7d:01:49:c0:cf:90:1d:c6:bf:ed:7a:
fc:9c:6b:a4:36:8d:fb:52:fb:9b:5a:63:b2:f6:26:64:04:d2:
94:e5:36:82:e8:5c:ad:9a:9b:2a:c8:1d:b2:3e:47:cd:93:d7:
4d:66:8e:c4:d4:9d:6a:a6:d9:20:26:5d:f3:87:46:a1:7b:a1:
2d:21:26:5c:7d:e9:e7:23:b9:b9:5a:1c:0a:65:7a:45:ca:20:
39:79:90:1f:26:c1:ea:7e:e1:d2:e5:b8:39:78:97:8d:f3:16:
bc:64:74:03:6b:23:24:08:a5:7c:72:75:a6:4e:89:06:5b:ee:
e8:90:06:6e:fb:6e:4f:1f:a0:b7:47:b8:29:06:cb:c9:9c:05:
8c:bd:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:13 2026 by rpki-client