
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PfTe08RwrqrU0XUS9b-xemCdff4.roa
File: PfTe08RwrqrU0XUS9b-xemCdff4.roa (raw, json)
Hash identifier: fEMPBUCgD9ITVp/bwOxm8HB/eW9KaiNn0+oXBqcJaL0=
Subject key identifier: 3D:F4:DE:D3:C4:70:AE:AA:D4:D1:75:12:F5:BF:B1:7A:60:9D:7D:FE
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 089A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PfTe08RwrqrU0XUS9b-xemCdff4.roa
Signing time: Tue 31 Mar 2026 07:43:53 +0000
ROA not before: Tue 31 Mar 2026 07:43:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.250.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3DF4DED3C470AEAAD4D17512F5BFB17A609D7DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:96:bb:4d:70:bc:c8:d7:52:d7:66:50:ad:
8f:61:b4:06:d2:5a:46:da:76:36:f7:96:76:14:6a:
71:7f:27:d6:ea:27:c8:01:5a:ba:c7:8b:56:6d:71:
f8:3b:7d:3c:f4:8d:a8:61:51:79:b5:89:e3:40:d2:
ed:39:22:e2:0c:bf:f6:4e:c8:3f:27:d6:57:68:11:
c4:f8:fb:9a:0c:cf:a8:c1:9c:fe:e4:82:d2:8e:8c:
9d:34:b4:b8:7b:f1:e4:49:33:04:61:68:42:ac:8c:
48:c4:81:bf:5d:65:0c:f5:af:4e:30:4f:d9:de:79:
1f:29:a2:b5:3c:31:4c:2d:84:9d:c6:8b:09:31:dc:
15:5d:4d:13:05:13:3a:9b:9a:81:06:85:4b:e3:6e:
36:78:d4:40:42:72:1a:e4:ba:d4:14:90:1e:39:63:
9e:5c:95:c5:98:dc:2e:a7:09:85:45:26:52:dd:f9:
00:d0:76:40:df:81:7d:95:e1:85:d3:87:bb:1a:45:
72:12:2c:3e:24:c4:85:9f:b6:8a:10:4a:aa:cb:83:
9a:ae:2d:22:da:85:95:f0:79:07:6c:60:bc:cf:fa:
8e:14:99:4a:6f:54:b4:54:24:45:aa:6b:95:4e:9c:
4c:a8:79:7f:25:f6:88:a6:f8:78:9b:27:01:0b:63:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:DE:D3:C4:70:AE:AA:D4:D1:75:12:F5:BF:B1:7A:60:9D:7D:FE
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PfTe08RwrqrU0XUS9b-xemCdff4.roa
sbgp-ipAddrBlock: critical
IPv4:
210.250.58.0/23
Signature Algorithm: sha256WithRSAEncryption
25:e2:4e:d1:95:f8:06:be:7b:24:7b:7b:db:9e:1f:63:3f:22:
49:ef:c1:76:bc:38:2c:ad:6c:5f:38:55:97:ba:af:43:13:cd:
90:76:44:bf:b2:13:69:1f:57:38:b2:ca:00:2d:5e:fb:af:c5:
dd:c8:4f:65:a2:a8:11:df:f6:1f:e3:e8:01:ed:b7:ab:fe:eb:
1c:e8:21:e2:93:6e:e2:18:8e:0a:7b:5e:2d:c5:60:c7:83:6e:
1e:01:92:78:e6:ef:56:19:df:23:d3:40:1b:ad:ac:18:ce:94:
8e:74:d9:43:df:85:3e:3d:3f:38:c0:4f:14:d7:6a:0d:85:23:
fa:b3:bd:a4:9d:d8:75:17:17:7d:60:7c:e7:4d:84:87:76:a0:
5f:62:54:fb:ce:9f:a9:cc:2a:f9:02:81:92:a9:c8:60:db:8c:
76:7d:82:2b:fd:f5:d7:72:1e:20:1e:02:4b:c2:a8:7d:78:a7:
95:ec:af:74:4a:0f:7b:53:27:c7:75:09:52:fa:b6:4f:75:8d:
b0:07:03:da:ee:3a:17:9a:74:a3:0a:05:59:f4:ae:76:fc:f6:
3b:57:7a:c5:d7:59:a3:c2:d1:a9:f7:3f:e7:91:a5:3b:3b:e7:
7d:22:e7:63:f6:36:b1:d8:c0:87:e2:ee:3b:96:46:6c:76:6f:
13:93:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:23 2026 by rpki-client