
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IwTc8lnMmtjWVbSkZGlkNLyEnJk.roa
File: IwTc8lnMmtjWVbSkZGlkNLyEnJk.roa (raw, json)
Hash identifier: EdOp8ubjHvY2rwSYDE11WjZCjy7PF2HfVrGOPlDvopI=
Subject key identifier: 23:04:DC:F2:59:CC:9A:D8:D6:55:B4:A4:64:69:64:34:BC:84:9C:99
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07AF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IwTc8lnMmtjWVbSkZGlkNLyEnJk.roa
Signing time: Tue 31 Mar 2026 07:41:53 +0000
ROA not before: Tue 31 Mar 2026 07:41:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 111.106.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2304DCF259CC9AD8D655B4A464696434BC849C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:0b:c4:69:b8:4b:cf:09:09:13:08:d4:24:
85:82:1f:39:dd:10:1f:ea:60:5b:72:c7:92:2d:ad:
88:f6:37:cc:b9:df:a4:2d:3d:bd:e6:d0:95:06:48:
95:3f:06:a0:d6:c4:a1:06:07:1e:ea:b5:fe:56:5f:
1e:41:64:2e:3c:21:96:2d:f8:dc:58:7d:49:a0:14:
af:9e:d1:33:62:de:e3:b0:5f:a6:33:6b:8d:62:2a:
7e:70:e2:2b:f8:db:c6:16:18:64:dc:0d:19:55:9d:
0c:62:45:f8:d5:c4:7c:7f:e1:b0:bb:30:1c:ac:df:
1e:50:48:64:3f:e5:4e:f2:ea:16:23:6f:c6:78:e6:
9d:3a:0b:1d:a1:88:b5:c0:3c:0a:54:fb:e6:12:ce:
3c:e5:ab:09:c8:39:cc:a6:20:76:4c:56:a0:73:46:
5d:f5:8c:b4:8a:6c:9c:59:63:65:c7:27:6a:1f:c3:
56:07:2e:3f:99:b7:0d:bc:82:03:ea:66:d2:31:ea:
60:10:b6:43:27:0b:6b:1e:19:85:4a:a4:19:4a:e0:
a5:7c:76:1e:05:31:e2:ba:3a:18:1a:74:17:be:b4:
f5:d9:a9:aa:55:ac:c8:87:cb:be:af:cc:ed:17:4b:
3c:04:c2:76:8f:47:4a:11:15:94:f8:a3:10:06:03:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:DC:F2:59:CC:9A:D8:D6:55:B4:A4:64:69:64:34:BC:84:9C:99
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IwTc8lnMmtjWVbSkZGlkNLyEnJk.roa
sbgp-ipAddrBlock: critical
IPv4:
111.106.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:ca:0d:79:29:6c:34:da:81:8d:ca:90:f7:0e:ea:e6:08:98:
21:94:5a:88:44:12:21:33:a3:f6:aa:23:f4:28:f2:4d:49:1a:
a4:a9:07:06:34:cd:fb:15:aa:b4:d0:5c:24:14:e2:57:ff:f6:
fd:d9:8b:e6:8a:90:80:64:d7:55:38:64:88:e4:3b:f5:8a:c1:
89:97:b7:ef:69:a9:6c:a5:dc:a8:f7:88:e8:4d:bb:68:4a:8a:
ef:81:e3:03:68:5d:4a:aa:3d:7c:bf:2c:22:a0:59:a5:d1:8b:
4f:8f:5e:45:2b:a9:f2:36:67:eb:02:53:98:aa:da:b8:f3:d0:
3b:bc:34:ea:70:bf:a2:cf:bc:77:b1:a2:a1:5f:d9:59:32:86:
0b:1d:a6:be:97:15:d4:c4:21:77:af:df:af:45:82:c3:ae:3c:
59:59:a8:e5:22:72:62:bd:23:0d:5b:eb:0b:bf:4d:8e:11:db:
65:60:30:45:f0:ac:6f:d1:cd:e8:a2:8e:b5:7a:59:24:63:8d:
d6:c4:df:e7:72:78:b2:2c:b4:5d:5f:e0:76:8e:8e:9d:4b:cc:
7a:be:05:ad:df:73:1c:2b:83:44:c5:0b:99:59:32:5d:05:fe:
6e:d1:4f:9d:e7:55:49:73:b9:20:60:a4:89:0d:d4:ee:40:91:
08:1e:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:52 2026 by rpki-client