
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KESNrrewVMBL7uc7fsMX35wcd_M.roa
File: KESNrrewVMBL7uc7fsMX35wcd_M.roa (raw, json)
Hash identifier: iXSkSMk+Rzv4d9mKumFRzqbTFg3EiVFsi8cUqcYgCxA=
Subject key identifier: 28:44:8D:AE:B7:B0:54:C0:4B:EE:E7:3B:7E:C3:17:DF:9C:1C:77:F3
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0791
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KESNrrewVMBL7uc7fsMX35wcd_M.roa
Signing time: Tue 31 Mar 2026 07:41:41 +0000
ROA not before: Tue 31 Mar 2026 07:41:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 175.133.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=28448DAEB7B054C04BEEE73B7EC317DF9C1C77F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:77:43:e8:8c:c6:53:a6:72:b9:a7:97:3c:
ab:ee:cf:d3:70:14:5f:73:8e:5c:08:3f:40:13:40:
0c:e6:e9:c4:5f:93:81:df:ee:dc:29:28:5b:a0:b6:
42:1a:1f:ad:b9:12:c1:a3:71:50:7d:13:5a:b5:35:
c8:26:22:1f:9e:35:39:21:66:50:09:4a:c4:a1:fa:
c8:79:24:9d:bb:02:3c:3e:64:f9:d1:37:3c:0b:37:
88:9d:14:b5:5f:ae:6c:46:ff:7b:cb:e8:50:8a:60:
ac:0e:56:94:19:96:54:9d:09:ec:d9:ef:19:fa:0d:
1f:5e:38:5f:59:72:4e:4e:39:62:cd:a5:20:81:9d:
5c:a2:7a:ba:6f:62:2a:9e:3c:2a:cb:bf:55:6a:fd:
ac:9d:0d:8a:70:1f:60:80:cd:1f:40:2d:33:84:07:
20:3b:ef:16:21:61:f7:89:86:81:76:aa:65:69:42:
3b:0b:1f:81:2a:c3:19:6b:8e:ff:7d:d0:c8:75:19:
20:ae:0e:98:d5:9b:cb:8c:8f:34:32:91:d1:bd:0f:
1d:ef:df:d8:7f:fe:11:da:be:d1:ee:59:89:c1:ee:
ab:71:33:9a:9a:91:fd:ef:71:03:d8:31:06:9e:c5:
ea:54:e7:72:3d:07:9f:d1:24:99:fa:62:cb:f5:70:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:8D:AE:B7:B0:54:C0:4B:EE:E7:3B:7E:C3:17:DF:9C:1C:77:F3
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KESNrrewVMBL7uc7fsMX35wcd_M.roa
sbgp-ipAddrBlock: critical
IPv4:
175.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:05:9c:fc:7a:36:bc:d8:34:4c:75:b3:2e:a2:13:8f:48:4f:
2b:a4:7b:bd:d9:66:13:2c:94:e6:fc:1e:ad:1a:2d:73:77:95:
11:78:d8:52:1b:ad:22:0d:1e:8a:ee:89:9b:ac:a4:68:17:3c:
b8:43:ac:83:54:5a:b8:a8:47:a0:5b:0a:28:5b:1a:17:54:96:
a0:95:37:32:7a:15:c0:8e:07:26:9a:5f:f5:0a:ba:dd:ab:4f:
fa:0e:21:0b:60:cb:bc:23:77:d5:1b:45:dd:c4:05:69:68:18:
47:16:d7:12:42:54:1b:d9:36:bd:71:0d:54:b0:d2:fd:12:92:
aa:19:5e:c7:cc:16:9f:10:42:0c:0c:5d:43:dc:da:6b:00:5e:
9d:a7:a5:fe:f1:60:1d:01:26:70:d8:4c:ef:87:93:2c:65:88:
5e:10:b8:d1:11:fe:5a:e8:3d:61:9d:35:ea:3f:bc:f3:df:75:
dc:78:03:b8:49:ca:e0:cb:74:96:8c:1b:8f:da:87:6f:33:71:
7e:3e:6e:5e:b3:1a:3d:72:c1:a2:a5:07:e0:01:37:17:2c:63:
33:62:f4:67:7d:47:b0:24:3e:70:2e:d6:64:51:4a:72:f6:64:
63:6b:4c:58:28:24:98:ab:ae:92:2a:13:75:9c:9a:d8:07:de:
34:c3:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:25 2026 by rpki-client