
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KGmF7NAILTjQGhuXCWPHgx5uTIk.roa
File: KGmF7NAILTjQGhuXCWPHgx5uTIk.roa (raw, json)
Hash identifier: iTFWqMCsUe1in/5pdTiHX2dNf8yElRopcyx99+ukmac=
Subject key identifier: 28:69:85:EC:D0:08:2D:38:D0:1A:1B:97:09:63:C7:83:1E:6E:4C:89
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07ED
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KGmF7NAILTjQGhuXCWPHgx5uTIk.roa
Signing time: Tue 31 Mar 2026 07:42:26 +0000
ROA not before: Tue 31 Mar 2026 07:42:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 114.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=286985ECD0082D38D01A1B970963C7831E6E4C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:68:a5:0c:b8:52:9a:6e:68:84:e7:34:76:
b3:08:4e:02:d1:78:30:a9:4e:c8:bb:a1:ff:fb:67:
4a:b1:f8:23:cf:02:d9:39:45:db:db:15:80:bf:cd:
0d:b0:b2:83:5f:b1:be:f2:a6:ac:df:26:1c:15:ad:
d8:28:41:94:0a:70:e9:4c:8c:9a:09:8d:6b:78:94:
d0:25:8c:f7:22:11:9b:5c:09:86:47:48:1f:59:3f:
78:69:e8:98:50:66:cf:23:fc:a1:3b:e6:5f:24:ea:
5e:c4:b9:4c:db:27:30:0f:d9:0f:a7:18:4f:e3:c3:
0f:3c:ea:27:1b:67:1b:73:23:a8:a0:55:72:8e:90:
9f:f2:fc:75:f6:18:24:3e:80:e8:cb:e1:a2:0c:b5:
f6:b5:39:c7:62:77:90:46:be:ea:e8:93:cc:07:a7:
0b:c9:f0:d1:b2:73:c2:0a:57:08:05:3d:ec:83:e6:
a8:de:b3:05:e3:02:62:b8:08:10:2f:9c:48:f7:a6:
04:49:48:2a:33:90:43:ac:bd:6c:3e:87:1f:f5:81:
dc:d7:1d:38:42:c8:83:16:a6:ce:31:7e:55:d3:07:
5e:6c:d2:c0:f0:10:7c:80:88:42:5b:c3:d9:86:7a:
b3:e1:e2:67:c6:01:5b:9a:71:14:e1:d8:5e:91:b5:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:85:EC:D0:08:2D:38:D0:1A:1B:97:09:63:C7:83:1E:6E:4C:89
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KGmF7NAILTjQGhuXCWPHgx5uTIk.roa
sbgp-ipAddrBlock: critical
IPv4:
114.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:3c:2e:fa:a9:c8:61:71:08:c1:82:b8:c6:d3:7e:f7:54:6f:
e7:69:44:0b:de:11:39:90:8c:b4:eb:c2:72:59:5a:34:41:f6:
3a:60:3d:98:6c:90:94:62:d6:2e:f9:25:24:bf:7e:44:ec:aa:
23:8f:25:34:d4:d3:51:30:ca:6f:6c:59:2e:b1:da:9f:57:5f:
73:fd:61:95:b5:9e:de:da:50:1d:77:77:27:0b:80:99:1b:d0:
56:10:e9:17:9e:94:d7:44:28:b0:78:9f:3c:b7:6c:68:34:ef:
b1:4e:5b:d3:a2:e7:b7:38:65:e4:de:1d:81:6a:4b:2a:5f:d3:
3a:49:f3:7d:8b:c4:a1:1d:6d:e7:26:a9:f7:c4:88:04:ba:af:
f1:9d:c1:db:99:10:2f:92:26:c1:f3:b1:d3:12:f4:e7:02:e3:
af:23:eb:06:e8:a5:cd:e4:78:fc:26:85:54:9d:6b:e6:7b:6b:
12:6a:e1:07:91:be:94:27:7d:17:74:cf:14:39:b9:72:c3:c3:
42:b7:44:2d:d5:3b:37:11:4d:d5:bb:01:3e:b9:cb:f9:02:ea:
bc:d9:dc:ce:65:2c:96:6f:40:fe:0a:a6:bc:df:05:25:7f:91:
90:e9:08:d9:ae:d3:d3:1f:35:4a:11:6c:75:e1:83:2b:09:74:
b4:7a:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:51 2026 by rpki-client