
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa
File: PJRJV34s8JcLHrt9fVFumkMtZOU.roa (raw, json)
Hash identifier: 69k0cSKyf8MhAwErFn46NqBGEcGVbmxo4/w6RrTJ+KM=
Subject key identifier: 3C:94:49:57:7E:2C:F0:97:0B:1E:BB:7D:7D:51:6E:9A:43:2D:64:E5
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08CA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa
Signing time: Tue 31 Mar 2026 07:44:15 +0000
ROA not before: Tue 31 Mar 2026 07:44:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 218.230.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3C9449577E2CF0970B1EBB7D7D516E9A432D64E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:60:a5:71:8f:2e:73:0a:1f:4f:37:70:37:
11:29:8a:f4:4e:1d:e4:b1:52:90:cd:6b:20:0f:d5:
e9:42:88:31:7a:a4:4b:37:c7:3b:4a:55:55:c0:16:
d2:a9:11:b0:ba:49:b1:0b:f4:aa:63:b7:d9:c2:e8:
98:37:0d:8c:19:67:5e:db:0f:a1:7f:6f:2b:f0:4a:
f8:9e:cb:c8:06:e7:f2:3e:5d:41:5e:29:56:1b:8e:
66:11:f6:f1:a4:ab:e1:1e:53:11:af:15:c2:6a:56:
f0:4f:40:67:93:ae:40:f0:30:4e:36:11:b9:50:c6:
3b:01:f4:0a:56:0a:aa:2e:78:a6:9d:07:db:fa:41:
c5:09:e9:ae:d5:67:78:b8:52:dc:86:03:56:36:96:
d6:04:eb:bb:0d:d4:6b:fc:56:9a:b9:cc:75:aa:ae:
31:ad:f3:ee:fd:de:f2:d0:27:5e:5f:8b:ca:3c:ed:
e1:b7:0e:ab:d3:bf:78:b3:a8:2e:ec:48:3a:63:3b:
09:99:99:d8:6a:45:cd:a5:2c:8a:3d:5b:81:51:49:
11:11:0b:48:5b:c9:37:55:c2:3d:d4:61:89:89:1c:
e6:38:0c:9d:d6:75:e2:de:03:e3:6e:1a:22:db:bf:
a3:db:f8:a5:27:89:a4:1e:ad:42:e1:65:b8:c8:8e:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:49:57:7E:2C:F0:97:0B:1E:BB:7D:7D:51:6E:9A:43:2D:64:E5
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa
sbgp-ipAddrBlock: critical
IPv4:
218.230.0.0/17
Signature Algorithm: sha256WithRSAEncryption
02:c1:34:7a:d3:f3:af:81:ab:6d:77:0e:f5:68:d8:69:b7:3f:
60:79:13:88:3f:b3:99:ff:73:91:e0:cf:bf:7c:01:f3:17:20:
b8:38:fb:dc:7a:72:3f:b2:00:12:29:a7:1c:54:fa:77:b0:0c:
c7:e0:79:06:92:eb:a2:eb:6f:f8:61:dc:b7:88:b9:3f:ee:af:
9e:1c:a0:86:af:2c:2c:e9:64:4a:fe:d1:22:95:dc:a9:19:81:
d3:81:a3:b4:80:73:53:ae:ba:9a:97:2c:5a:f4:33:7e:5d:de:
ab:9f:6c:7a:57:5e:53:b7:71:4c:a6:91:fe:4c:17:67:a4:07:
01:14:d3:05:c8:4a:c9:0e:ee:33:d6:2f:48:b5:87:2f:76:01:
78:d4:8a:40:bc:2b:1b:e6:bb:89:33:04:54:25:a9:67:c7:2f:
f9:dd:8e:79:5b:f2:d8:57:5e:6d:60:e2:ef:1a:5b:18:9a:8b:
f7:02:b9:98:65:44:9c:44:9f:f3:85:ad:43:62:0f:78:8e:b6:
ed:34:ed:2c:8a:2e:61:49:1d:a3:40:b5:12:87:25:58:71:64:
51:78:3e:5a:7b:db:95:49:44:77:a9:85:55:17:49:45:65:01:
21:3c:ac:7c:a0:1f:68:68:65:9c:7b:8f:fa:03:84:37:60:4b:
8d:d0:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:22 2026 by rpki-client