
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KEOPOvQYwB3NtdG2WqTO7o2M1ew.roa
File: KEOPOvQYwB3NtdG2WqTO7o2M1ew.roa (raw, json)
Hash identifier: is/pENxpAU6tsTLvvg8fjs+QHXXIF9X296U9cxiquKM=
Subject key identifier: 28:43:8F:3A:F4:18:C0:1D:CD:B5:D1:B6:5A:A4:CE:EE:8D:8C:D5:EC
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07FA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KEOPOvQYwB3NtdG2WqTO7o2M1ew.roa
Signing time: Tue 31 Mar 2026 07:42:32 +0000
ROA not before: Tue 31 Mar 2026 07:42:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 202.239.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=28438F3AF418C01DCDB5D1B65AA4CEEE8D8CD5EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:d9:4d:ac:e6:e6:94:e7:14:eb:85:09:e2:
2b:2d:e4:ee:dd:85:34:dd:75:e1:b0:93:5c:19:31:
14:e6:ab:18:67:ea:e8:4d:89:78:e1:65:f8:3b:ea:
52:f0:6a:e4:92:c7:98:0a:93:61:2d:d6:c6:2a:d0:
e8:88:9d:a8:81:6e:ea:b7:87:9e:32:5e:4a:d5:29:
35:46:6e:23:ba:bb:3d:fd:da:d0:f1:93:6a:5e:f3:
ce:bb:95:1b:93:ed:73:3f:87:25:33:ed:ef:54:f2:
20:d9:aa:ae:9e:0f:5a:7c:00:31:ef:3e:2c:8a:cf:
ae:31:03:22:5f:2e:d3:e1:77:5b:62:05:8f:19:57:
fd:5a:77:3e:04:b8:2c:37:b6:58:1d:6f:c9:a4:8e:
0c:c8:87:45:76:8c:ac:9b:82:c0:bf:80:2a:07:94:
e8:08:4e:b1:b2:f1:37:e8:da:bd:f2:d4:17:31:d9:
9d:ef:28:6b:04:ae:ee:1f:31:43:d3:bb:3f:7c:14:
6b:c8:6f:b8:86:f0:0a:1f:b9:85:66:12:9b:96:e2:
33:02:e1:52:8a:ad:86:02:23:e5:7c:d6:cf:68:5d:
db:9a:1e:4f:6f:fd:28:bf:ec:d8:15:d3:de:99:dd:
b0:99:a4:ec:84:26:66:77:3b:d6:69:8a:9d:ad:59:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:8F:3A:F4:18:C0:1D:CD:B5:D1:B6:5A:A4:CE:EE:8D:8C:D5:EC
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KEOPOvQYwB3NtdG2WqTO7o2M1ew.roa
sbgp-ipAddrBlock: critical
IPv4:
202.239.128.0/18
Signature Algorithm: sha256WithRSAEncryption
03:73:32:29:4d:73:35:82:c9:9d:6b:f0:b0:11:75:f6:aa:97:
98:bc:7c:d6:ac:8b:a2:a6:77:90:5a:53:22:c0:2e:7c:a8:6e:
28:78:b8:08:09:e9:1a:3d:3e:82:c0:24:94:38:67:3b:db:70:
f9:5f:ef:b0:70:52:35:2e:04:b1:2d:01:29:c5:e2:2b:0b:a9:
c0:ba:c0:f7:60:ac:b7:c6:86:46:b4:65:97:e4:a4:85:66:57:
74:9d:98:9f:9b:69:a4:78:87:04:32:67:1b:3d:45:3e:d7:d6:
65:de:d9:a6:dc:7e:78:c3:43:39:87:0e:32:31:5c:aa:28:3e:
f1:d0:1c:66:bb:ee:54:cc:80:fc:51:4a:7e:b8:a4:a9:64:80:
2f:77:0d:78:e6:9a:df:ea:72:75:56:09:18:13:92:95:92:14:
4d:c8:e2:d7:1b:2f:55:d6:e8:e7:00:12:c2:40:75:ae:32:c9:
cd:33:5e:d5:52:18:02:44:55:cb:03:38:29:68:d1:02:fb:5b:
ae:0a:2e:3f:15:b6:c7:bb:b2:18:ec:c1:36:fa:c4:7d:2c:57:
0c:ec:6e:4c:95:49:58:5f:d8:a0:1c:d5:67:42:98:e3:a4:a2:
8e:da:48:e4:ed:af:98:ed:89:be:7f:ae:8c:76:aa:48:d9:c1:
af:ac:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:15 2026 by rpki-client