
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa
File: JP3vYCcW1cRhqqH1bzF__onEKoY.roa (raw, json)
Hash identifier: 7k/TGI+ysxw44xyBgCmcs0ENpNjJ82hdvTaJBPqSwSU=
Subject key identifier: 24:FD:EF:60:27:16:D5:C4:61:AA:A1:F5:6F:31:7F:FE:89:C4:2A:86
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0895
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa
Signing time: Tue 31 Mar 2026 07:43:50 +0000
ROA not before: Tue 31 Mar 2026 07:43:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.253.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=24FDEF602716D5C461AAA1F56F317FFE89C42A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:19:fb:db:20:0a:99:fb:c2:cb:8f:dc:26:
8c:07:02:b0:09:3e:2c:25:4d:ce:5b:13:a6:41:42:
5f:23:6a:b0:5a:58:b5:0c:42:55:d1:3a:57:22:a1:
88:20:e0:13:45:5f:2a:2e:a1:14:5e:6e:09:4d:58:
be:63:6b:5d:a7:13:b8:20:30:b1:ed:60:cf:39:0e:
e6:e8:cc:8f:2a:31:07:87:5b:f9:d0:8a:53:d6:9b:
60:4a:c4:2f:22:dd:87:18:47:4b:a2:f6:96:f2:8a:
6e:f3:ec:44:10:4a:b7:b5:22:1d:3d:02:2b:ca:c9:
06:70:d5:8e:f2:01:2d:bb:91:4b:27:6b:94:f0:25:
d6:db:e3:c0:ad:d4:f5:d4:03:fb:b7:55:59:6a:d0:
2e:7c:be:10:f8:6c:14:d3:19:ff:f8:a5:e1:f9:ca:
f5:3a:a4:56:06:9d:e8:31:0d:17:12:c7:0d:69:88:
b2:06:ab:74:ad:98:2f:23:74:eb:02:fb:c6:4c:39:
d5:46:14:21:fa:b6:ae:2c:7f:32:0f:d3:52:66:3e:
b8:38:f7:c7:39:05:3f:47:18:b2:ba:ba:98:52:c8:
37:65:13:5f:db:44:15:f4:c0:9a:77:6c:a6:3e:c0:
88:1a:38:f0:50:99:ee:0c:93:83:24:4f:0a:9e:20:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:EF:60:27:16:D5:C4:61:AA:A1:F5:6F:31:7F:FE:89:C4:2A:86
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.253.142.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:86:cb:3c:5c:98:15:6f:67:33:cf:7a:95:f8:d2:45:0f:cb:
3a:cd:14:bb:89:81:94:05:b3:be:54:51:67:81:91:e9:b3:db:
09:a5:00:53:17:e2:5d:0f:08:ba:bb:f1:90:10:08:ba:3d:43:
37:80:1f:70:27:09:20:dc:8d:b0:23:1a:5f:90:9e:3f:8e:6f:
fe:99:98:4d:4f:b6:8a:00:04:22:b3:ed:bb:1a:b3:54:d5:70:
a1:cb:58:8f:a7:9a:35:b1:6b:4a:db:b8:a1:77:ed:1e:96:9d:
9c:b2:aa:1c:69:23:a5:a3:18:0a:13:5c:14:50:92:1b:b1:6a:
e0:9d:90:55:40:fe:85:1c:bf:94:0e:14:35:ff:7b:3b:e8:a2:
35:d4:38:24:72:88:d3:f5:bf:d2:16:54:45:0c:42:9f:74:57:
80:fb:ec:5c:f7:3d:4c:19:2b:98:1e:bd:2b:e4:c8:4c:1c:40:
34:6a:71:e8:d8:8e:58:75:2c:d8:6d:55:80:58:58:23:49:ab:
f5:b9:c0:c0:76:9d:8b:1b:67:51:4e:6a:8e:8f:d3:bb:a5:27:
c6:bf:e1:c0:83:98:23:f1:a9:38:d0:c5:86:13:ad:f3:fb:14:
d1:77:1e:f0:3d:40:69:39:ff:0f:61:fc:06:da:87:76:c2:68:
32:3e:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client