
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa
File: U4m9nSllwU3LfcpjWK3-bFdZUbA.roa (raw, json)
Hash identifier: S00o0I8O/6bL/h2v1KU89nO1c+FEErKiFaqIbXI5BqM=
Subject key identifier: 53:89:BD:9D:29:65:C1:4D:CB:7D:CA:63:58:AD:FE:6C:57:59:51:B0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 089D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa
Signing time: Tue 31 Mar 2026 07:43:54 +0000
ROA not before: Tue 31 Mar 2026 07:43:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.199.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5389BD9D2965C14DCB7DCA6358ADFE6C575951B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:68:45:4c:b4:d8:f4:9f:b9:24:85:49:40:
7c:86:72:22:ec:41:42:8c:b0:dd:d8:c7:a1:cc:9d:
a0:90:f3:aa:49:b8:4f:2e:31:02:dd:53:d4:8d:c3:
92:cf:95:d0:f1:65:8c:70:2d:07:12:52:ce:6a:17:
21:b4:1a:49:c0:a4:4d:26:bb:75:85:53:34:e8:c7:
4b:7d:a9:56:21:37:77:75:da:23:90:66:9c:72:3c:
0c:ef:01:b3:e7:d5:de:df:55:a5:d3:15:92:46:2f:
59:0f:87:db:99:bf:2f:c2:d2:9a:4c:51:a0:47:78:
55:e0:e9:4a:7f:e1:18:6d:5a:e9:77:09:18:ad:09:
12:eb:a7:13:65:46:0b:ae:64:cc:a0:b9:28:1c:44:
4b:cf:6c:97:28:25:ae:9c:5e:35:b3:2a:eb:60:7e:
9b:d7:b5:9e:52:b1:1b:2f:c1:fa:e4:16:a1:dd:31:
f6:5b:93:b1:df:94:a1:96:b1:c2:91:31:66:3b:34:
f3:d1:bd:f8:d3:02:cf:20:ce:40:32:fa:41:e5:72:
35:43:8c:72:3d:40:3e:e0:03:36:2b:fa:0f:d8:ab:
d0:44:80:2f:38:09:08:50:9b:60:e3:7c:2f:b5:48:
43:88:b7:6b:5f:4c:41:36:e1:af:a0:df:d2:61:2e:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:BD:9D:29:65:C1:4D:CB:7D:CA:63:58:AD:FE:6C:57:59:51:B0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.199.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:4e:34:1f:57:29:fa:5a:6d:a0:5c:1c:a5:5b:0a:35:5a:82:
42:30:3e:8a:48:66:e7:1c:dc:76:a7:99:57:79:c0:0c:95:38:
b2:ce:5f:95:4e:9b:37:ec:6d:41:05:d5:0b:12:a2:06:25:2a:
9f:8e:4c:d6:51:81:01:0b:93:d9:5a:76:91:0a:62:a2:73:80:
48:06:fe:fa:7b:ed:87:47:98:ad:52:1d:12:6e:89:f1:a9:5c:
6c:5b:71:f4:a8:93:e0:42:8c:14:f8:b0:7c:b4:ae:17:83:5e:
b7:65:f8:7f:a6:05:9a:48:86:cd:6c:18:66:5d:35:9a:c1:cb:
86:a4:6d:73:a1:d8:1a:ea:60:70:e2:c2:14:98:8c:3c:41:69:
c2:9c:db:36:11:34:ae:b3:68:3b:5b:14:4f:17:0c:04:34:d1:
a4:f0:59:56:bb:88:13:d1:d2:dd:a2:30:bc:17:a1:2b:8f:6b:
df:4a:12:b4:40:a1:97:ea:81:bf:fb:16:51:35:20:e4:3c:38:
25:8f:ec:f3:c6:0a:e2:5b:55:d1:40:24:d8:6e:2c:c5:75:01:
7b:f7:9e:dd:6c:3b:de:56:21:a3:3d:2b:ca:8f:64:d2:43:e7:
66:85:50:a4:66:76:36:80:03:75:9a:95:21:b3:02:a8:07:42:
88:3f:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:41 2026 by rpki-client