
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IH5A5FtYMmmjrr7Y-anEbp9aDX4.roa
File: IH5A5FtYMmmjrr7Y-anEbp9aDX4.roa (raw, json)
Hash identifier: JPZHcRnZ+r6S+8Oa9AMY7X05+IFy9D1lO8zmylzwzCA=
Subject key identifier: 20:7E:40:E4:5B:58:32:69:A3:AE:BE:D8:F9:A9:C4:6E:9F:5A:0D:7E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08F4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IH5A5FtYMmmjrr7Y-anEbp9aDX4.roa
Signing time: Tue 31 Mar 2026 07:44:33 +0000
ROA not before: Tue 31 Mar 2026 07:44:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.10.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=207E40E45B583269A3AEBED8F9A9C46E9F5A0D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:40:e4:9a:17:b6:55:07:aa:c4:5e:b1:7e:
44:c2:54:cd:bc:f5:7e:43:e0:31:d8:2c:57:2d:9b:
01:8c:05:e4:e0:3f:4d:5b:15:e1:dc:de:2a:bc:cb:
1e:5d:d9:65:4a:8f:cd:cc:5d:84:08:db:fd:6c:19:
35:a1:3b:a6:1e:1a:ca:b5:46:dc:b6:94:e6:2f:f8:
03:72:b8:da:a5:05:31:25:37:3e:a4:de:de:6c:9e:
1a:dc:f7:5a:34:54:a5:1c:4b:68:12:10:19:cc:88:
b1:25:68:ea:43:d5:2d:e3:b2:9f:0a:dc:90:59:8a:
f1:3e:39:69:85:22:ea:8e:2d:30:87:76:52:99:2e:
1e:3a:61:92:09:d3:67:8c:57:01:ee:92:4b:7f:58:
15:9e:3d:43:c0:7e:0d:33:d9:f4:b1:52:da:0b:0f:
62:74:55:4c:3b:b5:7c:ce:24:83:68:27:fc:9c:ed:
b7:5e:7f:e0:1b:5a:92:0e:ea:3b:9c:0a:2f:19:3f:
dc:03:7a:5e:5e:34:14:ae:d9:89:2a:76:00:f2:19:
2c:ed:bd:bc:77:86:33:11:76:cf:af:40:b6:0c:e4:
7c:5d:f9:d3:f4:b0:20:bd:23:dc:e7:25:f6:65:be:
1c:87:1b:a8:8d:25:df:47:98:81:07:bb:5e:1c:ee:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:40:E4:5B:58:32:69:A3:AE:BE:D8:F9:A9:C4:6E:9F:5A:0D:7E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IH5A5FtYMmmjrr7Y-anEbp9aDX4.roa
sbgp-ipAddrBlock: critical
IPv4:
211.10.153.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d9:d4:df:11:c8:56:ee:3a:62:60:29:8d:12:f9:a7:01:52:
7d:88:47:93:60:88:1a:14:63:32:54:c0:ac:e7:ea:1a:b8:95:
d9:08:ea:b9:7b:ea:37:70:69:98:d5:d5:df:0a:f5:97:b2:84:
82:b9:58:05:e0:ed:71:69:2e:d1:2b:30:e8:13:91:97:a9:28:
04:5f:e2:92:d4:d4:1f:0b:b8:8f:6d:dc:dc:4f:1b:83:ef:35:
d5:ab:e5:0d:72:23:10:ab:3c:81:b2:c1:59:87:6b:62:87:1e:
0e:07:0e:4c:e5:49:8c:5a:e1:37:cb:2c:66:3f:06:7d:63:2c:
d3:07:97:74:24:ba:3f:cd:73:97:fe:27:ee:72:32:c9:56:2b:
8f:13:54:f6:6e:0a:d7:41:01:d0:5e:38:52:84:62:97:0b:96:
32:9a:bb:9b:d8:6e:df:97:b9:e2:5f:06:2b:b3:f4:f1:92:1b:
a9:14:fa:77:ce:bc:77:08:81:f8:14:8f:64:ff:52:db:b2:a5:
94:98:79:a6:d4:93:bd:66:92:eb:63:26:6d:3e:72:f2:45:a9:
f6:77:81:c5:e5:d9:aa:0c:7f:cf:39:3f:59:9c:be:8a:d8:6f:
12:0e:97:6d:b1:5e:62:ae:9e:cc:cf:8e:0e:3b:0d:ca:f8:c0:
43:dd:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:27 2026 by rpki-client