
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QDoWGj6hU4JUmU8M3qs8gTsXVcY.roa
File: QDoWGj6hU4JUmU8M3qs8gTsXVcY.roa (raw, json)
Hash identifier: MtKnIcSIr/92EklgGARHo6FpFun3Z4Sv5U6s6AnC7e8=
Subject key identifier: 40:3A:16:1A:3E:A1:53:82:54:99:4F:0C:DE:AB:3C:81:3B:17:55:C6
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QDoWGj6hU4JUmU8M3qs8gTsXVcY.roa
Signing time: Tue 31 Mar 2026 07:41:53 +0000
ROA not before: Tue 31 Mar 2026 07:41:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 118.152.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=403A161A3EA1538254994F0CDEAB3C813B1755C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:ca:d6:e4:7b:27:a0:27:0e:0f:b9:91:f0:
4d:c7:aa:65:0c:fa:b3:dc:0c:e3:c8:7a:f2:84:cf:
0a:81:5b:b4:9b:0d:9e:56:70:c8:51:09:52:20:6c:
7c:57:ec:88:08:51:79:f8:a0:46:dd:3b:ed:d6:ea:
af:51:51:cc:7a:9d:f2:3d:da:6c:d7:4e:26:24:66:
fa:64:06:9d:40:d3:fc:81:cc:eb:da:17:e1:10:81:
ef:9c:bc:47:c7:86:37:94:d6:25:96:e0:bf:59:9e:
54:b2:f6:ce:2b:65:7b:0a:1a:5f:89:f4:72:fa:af:
7e:17:05:a8:63:be:dc:bf:0a:df:7b:9a:41:3a:83:
6b:23:bb:f2:76:34:fb:91:08:c5:27:b5:97:95:67:
66:08:11:50:56:e3:50:d6:b6:37:20:00:0b:de:9c:
fb:b2:f2:b2:d2:3c:b1:43:da:5c:c1:73:a8:4b:59:
c8:c1:93:56:a8:00:62:2a:7a:1a:7d:da:85:2d:69:
d0:6b:9d:3e:a6:aa:1f:75:26:fd:93:eb:f8:03:1d:
8f:3f:5c:50:82:06:39:82:ce:3b:f5:c0:ee:55:a7:
93:b4:a9:a1:9e:66:9a:84:6f:25:10:bd:03:f5:07:
a9:42:ff:95:5c:24:20:d0:8f:52:a5:6e:28:29:fc:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:16:1A:3E:A1:53:82:54:99:4F:0C:DE:AB:3C:81:3B:17:55:C6
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QDoWGj6hU4JUmU8M3qs8gTsXVcY.roa
sbgp-ipAddrBlock: critical
IPv4:
118.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:87:61:4c:e8:81:3b:72:8e:ec:be:bf:18:33:8e:53:65:3c:
f6:87:e1:e9:df:86:bc:22:d4:79:cd:92:81:42:e6:fa:c7:9b:
20:41:10:bc:46:09:c2:79:15:a6:08:93:0d:77:90:0b:b0:73:
71:96:cf:cd:ef:df:93:87:a6:64:7a:95:cf:62:c5:0a:df:11:
c2:0c:4c:d1:05:e4:43:8d:29:e5:2b:4f:98:a0:ee:bb:1c:58:
97:98:33:c0:f0:62:76:d7:37:10:23:eb:3e:22:27:20:48:aa:
dc:5f:c1:a8:b0:49:4a:cb:d3:db:cf:f1:ba:a9:8c:0a:3a:e0:
ff:d9:d4:22:bb:16:a6:21:c8:b9:71:66:6d:76:d7:31:37:83:
c0:51:12:88:f0:d3:06:fe:2a:a3:73:3e:63:1b:e7:15:5f:1b:
c3:f7:1f:2e:1a:88:5e:d5:8f:c2:19:bb:13:a0:dc:9d:0a:94:
dc:a5:e0:51:69:ab:13:91:61:ad:8c:8f:34:32:1a:fb:56:7f:
d1:5b:51:fb:54:2f:13:b9:3c:c9:d7:3f:aa:b7:83:02:63:d0:
22:a3:37:11:9b:a0:2d:ec:e8:e2:b7:6b:54:7a:a7:4b:16:27:
67:93:64:f0:f3:71:0e:a2:4d:9d:5f:49:20:77:25:ce:79:33:
9f:3d:59:47
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxNTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwM0ExNjFBM0VBMTUz
ODI1NDk5NEYwQ0RFQUIzQzgxM0IxNzU1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDxsrW5HsnoCcOD7mR8E3HqmUM+rPcDOPIevKEzwqBW7SbDZ5W
cMhRCVIgbHxX7IgIUXn4oEbdO+3W6q9RUcx6nfI92mzXTiYkZvpkBp1A0/yBzOva
F+EQge+cvEfHhjeU1iWW4L9ZnlSy9s4rZXsKGl+J9HL6r34XBahjvty/Ct97mkE6
g2sju/J2NPuRCMUntZeVZ2YIEVBW41DWtjcgAAvenPuy8rLSPLFD2lzBc6hLWcjB
k1aoAGIqehp92oUtadBrnT6mqh91Jv2T6/gDHY8/XFCCBjmCzjv1wO5Vp5O0qaGe
ZpqEbyUQvQP1B6lC/5VcJCDQj1Klbigp/IO5AgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUQDoWGj6hU4JUmU8M3qs8gTsXVcYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1FEb1dHajZoVTRKVW1VOE0zcXM4Z1RzWFZjWS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB2mDANBgkqhkiG9w0BAQsFAAOCAQEA
a4dhTOiBO3KO7L6/GDOOU2U89ofh6d+GvCLUec2SgULm+sebIEEQvEYJwnkVpgiT
DXeQC7BzcZbPze/fk4emZHqVz2LFCt8RwgxM0QXkQ40p5StPmKDuuxxYl5gzwPBi
dtc3ECPrPiInIEiq3F/BqLBJSsvT28/xuqmMCjrg/9nUIrsWpiHIuXFmbXbXMTeD
wFESiPDTBv4qo3M+YxvnFV8bw/cfLhqIXtWPwhm7E6DcnQqU3KXgUWmrE5FhrYyP
NDIa+1Z/0VtR+1QvE7k8ydc/qreDAmPQIqM3EZugLezo4rdrVHqnSxYnZ5Nk8PNx
DqJNnV9JIHclznkznz1ZRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:40 2026 by rpki-client