
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TU5PpEE9pFmmlD71fSwsdCENh94.roa
File: TU5PpEE9pFmmlD71fSwsdCENh94.roa (raw, json)
Hash identifier: M1J4adezQBeND1ra2u3bZqR723T6AThirRKrbHWGAek=
Subject key identifier: 4D:4E:4F:A4:41:3D:A4:59:A6:94:3E:F5:7D:2C:2C:74:21:0D:87:DE
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0792
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TU5PpEE9pFmmlD71fSwsdCENh94.roa
Signing time: Tue 31 Mar 2026 07:41:41 +0000
ROA not before: Tue 31 Mar 2026 07:41:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 106.174.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4D4E4FA4413DA459A6943EF57D2C2C74210D87DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:eb:98:b4:14:69:f0:91:7c:c3:9b:1d:24:
3d:84:1f:c3:52:bd:77:a9:c3:41:f7:9c:6e:ba:d9:
ce:50:31:04:83:75:66:7f:fa:fb:85:9d:9a:9f:d0:
7f:ef:6d:dd:82:77:29:2c:05:1c:c4:75:f6:0b:25:
3f:90:88:62:fa:be:ef:15:ce:3f:90:2b:fa:b3:23:
49:5d:16:2b:77:7c:97:9e:85:75:74:0d:b5:32:8c:
b4:e0:b7:12:1e:24:de:6a:53:b1:51:fe:41:39:43:
f3:90:11:75:10:56:9d:6c:7a:72:f8:6c:e9:46:b1:
c2:ef:dd:1b:c7:2a:03:da:9f:55:d5:f8:9a:a2:90:
24:e0:e4:c6:7f:a9:e0:cf:05:05:d4:00:ef:8d:13:
60:f1:ba:96:12:af:25:f7:d9:95:99:97:3b:41:4d:
2b:d0:99:79:34:14:27:05:6e:ff:2b:c1:ee:7f:82:
13:f8:56:02:b6:2d:a4:6f:4f:13:00:f8:f8:10:5b:
c8:81:65:1b:d6:03:51:97:cf:3e:ae:46:d5:25:fe:
0c:d5:05:5b:69:c1:b9:b9:3d:e4:02:92:6b:ca:b7:
72:83:69:45:09:01:f3:e5:a4:2b:b4:70:9f:97:c4:
16:60:d5:a5:ec:41:02:54:9f:8a:aa:a4:07:0d:c0:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:4F:A4:41:3D:A4:59:A6:94:3E:F5:7D:2C:2C:74:21:0D:87:DE
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TU5PpEE9pFmmlD71fSwsdCENh94.roa
sbgp-ipAddrBlock: critical
IPv4:
106.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:81:13:6e:06:2f:01:f1:26:c8:b1:6f:15:22:58:42:39:bf:
7a:3d:01:c5:e1:85:37:7a:9f:ef:c2:5a:63:b0:e7:5f:2d:51:
64:fd:d4:3e:56:40:0b:0a:42:cd:ba:78:4d:b2:19:87:c0:0f:
79:6c:05:68:d6:23:3f:f5:e5:1d:96:9a:3b:76:3b:7e:5c:f7:
e2:2f:1e:10:78:0e:e8:49:ee:c9:c6:8b:a0:f4:d4:bb:1d:2a:
6a:97:6a:2e:ee:3f:46:a5:ec:28:40:fb:95:85:35:ba:4c:76:
aa:17:7b:66:72:0c:f5:2c:b4:a8:a2:1b:e7:7f:75:72:f9:19:
0f:9e:fe:da:59:58:8c:d9:64:49:c8:e1:5e:84:55:10:fd:de:
22:ce:8c:68:a3:93:f8:cd:d5:7a:24:c8:56:2b:96:e4:56:11:
72:e0:44:d4:5a:66:57:71:43:8d:2d:ad:76:1f:48:23:6a:f0:
d0:b7:3c:4a:99:0b:42:56:80:62:9e:1a:f2:f2:60:6d:e0:cb:
25:86:70:97:b6:fb:ce:01:ec:89:ce:bd:a1:0a:c9:cd:02:cb:
fa:19:ed:56:bd:4e:36:10:e8:33:6c:ed:72:fc:10:2f:b0:be:
e6:f7:a4:ca:73:b1:5f:98:3b:dd:36:0d:df:a5:ff:2b:94:dd:
c0:47:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:43 2026 by rpki-client