
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Nna-4BMCk-pkjeKlxnjHg9U27sE.roa
File: Nna-4BMCk-pkjeKlxnjHg9U27sE.roa (raw, json)
Hash identifier: tyAYf5j74gIxDVxLYegC1uwCtsA9xQ0A1UX67uYdiNY=
Subject key identifier: 36:76:BE:E0:13:02:93:EA:64:8D:E2:A5:C6:78:C7:83:D5:36:EE:C1
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07D4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Nna-4BMCk-pkjeKlxnjHg9U27sE.roa
Signing time: Tue 31 Mar 2026 07:42:14 +0000
ROA not before: Tue 31 Mar 2026 07:42:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.238.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3676BEE0130293EA648DE2A5C678C783D536EEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:71:8c:4a:92:c5:0b:40:b8:34:0d:c7:1b:
ba:fb:20:12:9c:2e:05:53:bc:97:ef:45:8c:c9:ef:
59:b2:2d:ba:76:d7:d6:d1:f5:c7:b3:cc:cc:9e:79:
49:29:10:21:f5:e9:ac:cf:2e:eb:fd:7c:72:62:bc:
26:ac:8b:15:ee:b1:9e:77:53:44:6d:be:69:da:31:
ce:81:cf:ea:f6:03:01:79:76:1c:a6:35:ad:a0:d2:
31:6b:7c:af:95:59:b4:a3:f1:0e:ce:af:a8:8c:bd:
2f:d8:85:a0:b7:31:1b:c9:e0:47:c7:8e:d2:40:25:
0d:7f:5e:71:e0:a9:5a:d1:50:35:07:5a:19:61:cd:
ea:f7:81:54:14:9b:85:b0:80:79:5b:f7:0b:b9:ab:
fa:6f:20:e2:2a:fc:8b:f0:53:ae:a5:d5:b9:a3:40:
f2:e0:96:98:7c:e5:3c:29:45:9e:31:ec:b3:42:07:
41:45:da:41:ae:e8:50:87:08:01:ff:2c:ec:e3:9e:
9f:75:c3:a1:20:8c:04:6f:cc:5f:34:ab:51:25:4b:
63:59:3e:64:ae:ac:77:e3:a1:80:1c:86:cc:ba:5f:
1a:31:88:a6:4e:22:62:68:af:94:ba:77:55:15:9b:
6d:fa:83:e0:03:14:e1:d8:b1:ff:06:2c:8c:c5:97:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:BE:E0:13:02:93:EA:64:8D:E2:A5:C6:78:C7:83:D5:36:EE:C1
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Nna-4BMCk-pkjeKlxnjHg9U27sE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.238.128.0/17
Signature Algorithm: sha256WithRSAEncryption
69:ed:c1:e9:5c:41:8b:84:a7:a7:77:4b:fa:73:e7:0f:cc:b6:
d2:6b:54:83:a9:3a:36:04:38:0a:f6:9c:fa:5e:ca:e5:0e:13:
f9:a4:7c:78:b6:ae:14:47:bb:63:d1:d6:d6:fa:8f:69:5e:51:
35:44:a0:3a:74:12:60:b5:31:90:98:dc:7c:7c:c9:91:49:77:
78:57:af:60:db:a6:08:fa:64:54:f8:b5:c2:5f:3c:5b:12:81:
37:9d:87:94:41:49:ce:b6:f5:d7:95:b7:1d:74:57:99:38:12:
2f:bb:16:89:dc:bb:e4:cc:fe:9d:4c:cd:91:db:72:a1:d6:76:
8a:61:81:84:0e:10:da:2e:c6:c1:35:87:f9:90:4d:fe:26:4d:
68:45:43:46:10:02:90:18:06:a1:0b:56:7a:29:98:53:a9:28:
fe:94:a5:1b:16:76:36:7f:ad:7a:63:d1:06:77:76:4f:0d:3f:
df:07:54:bd:85:f1:23:61:9f:24:8f:2d:00:8e:d1:69:78:a2:
2f:d9:c3:5c:0c:04:38:f3:b8:0c:49:d0:b6:88:0c:14:0c:a2:
31:42:ae:65:eb:2b:1c:e1:20:a5:1d:38:b5:f1:3f:94:fe:76:
94:c7:54:58:e7:bf:9a:79:18:28:0f:e7:a8:05:3f:ed:e8:ec:
a8:96:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:34 2026 by rpki-client