
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xbp5iYAlDpVdUIb9XSpVSkMvwE0.roa
File: Xbp5iYAlDpVdUIb9XSpVSkMvwE0.roa (raw, json)
Hash identifier: RzKauGGb7A+gbL0KjDvONqw0n2cUItT+5oGynCrDBW8=
Subject key identifier: 5D:BA:79:89:80:25:0E:95:5D:50:86:FD:5D:2A:55:4A:43:2F:C0:4D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 084F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xbp5iYAlDpVdUIb9XSpVSkMvwE0.roa
Signing time: Tue 31 Mar 2026 07:43:15 +0000
ROA not before: Tue 31 Mar 2026 07:43:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 106.186.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5DBA798980250E955D5086FD5D2A554A432FC04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:8d:5c:b2:7b:40:82:26:26:9d:a9:2f:21:
c4:82:ca:94:b6:94:e7:a9:db:91:bc:0e:29:72:73:
6f:5e:a1:e2:a3:bf:cf:50:cc:f6:55:51:74:86:24:
91:07:f5:8f:32:65:20:54:6c:20:4a:3b:71:22:fb:
2c:96:1b:51:5a:90:78:2b:c5:37:d3:fe:15:cf:63:
a6:1e:aa:67:52:c5:e0:3b:a5:27:4d:c4:17:38:f5:
9e:d1:61:e2:ed:0f:84:0f:c9:cf:c7:c0:aa:d4:72:
1c:65:ab:99:bb:55:6a:f1:6b:b4:09:06:91:64:6b:
2c:ca:f7:e1:9b:bb:5e:e4:88:f8:2c:45:e9:48:63:
0a:5a:f3:84:62:91:2e:2a:60:15:8b:c0:e6:95:66:
ea:a9:04:68:6c:d9:af:eb:6c:9b:91:34:fc:0e:6e:
7c:88:54:85:c9:10:a2:ae:0c:66:28:98:f8:a6:c1:
db:67:4a:fd:e5:31:dd:d3:12:f6:27:4e:63:ca:07:
1b:23:40:83:e3:d5:f6:c7:1f:39:ec:91:06:7a:6c:
41:df:69:49:e3:a4:b7:d3:0b:64:d3:5f:b9:3e:fe:
2c:47:68:51:3b:fa:50:e0:36:c8:30:fa:51:2f:42:
c9:1b:68:74:2d:b1:b2:f3:56:a4:a9:5f:71:f3:20:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:79:89:80:25:0E:95:5D:50:86:FD:5D:2A:55:4A:43:2F:C0:4D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xbp5iYAlDpVdUIb9XSpVSkMvwE0.roa
sbgp-ipAddrBlock: critical
IPv4:
106.186.86.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0e:d9:44:2e:45:20:47:74:6e:e0:f2:14:95:55:c8:e5:b5:
c3:09:db:88:6c:94:14:3b:7f:e9:da:c4:0a:ff:ac:b4:25:2f:
02:ea:22:5b:5f:c2:10:29:40:e6:73:29:a0:6b:d7:a3:92:c5:
df:bb:2f:7a:d7:b5:1b:83:bd:c5:f0:d9:77:19:ed:0f:ba:47:
49:d9:6e:75:eb:19:0e:cd:48:58:dd:1c:b6:1c:d9:fd:b3:a6:
04:f0:ac:0f:05:24:10:a5:50:4e:bc:69:ce:51:40:a6:15:67:
b7:46:7d:56:7b:96:00:ac:16:52:72:a0:bc:30:1c:a4:dd:e5:
37:b9:04:e3:3e:2c:3b:17:ae:52:ed:6f:92:86:9d:c5:ac:d3:
b2:dc:2a:bd:5f:13:30:81:d3:ad:d1:62:ee:17:45:ef:3a:ca:
48:26:f4:36:f3:5b:fa:fd:3b:f7:9c:d1:47:ac:51:a2:13:30:
35:9a:b5:6d:1b:7b:28:6b:1a:5f:41:3f:ad:36:2c:06:b1:00:
5c:47:74:02:65:db:20:63:e3:b6:7f:73:eb:fe:67:1b:d4:5b:
b0:c9:dc:69:01:67:a4:f5:c0:4a:4c:fa:84:f8:ba:d0:34:10:
a0:b0:a0:fa:54:d3:c3:03:9a:40:47:8f:78:6d:d9:97:69:30:
9b:70:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:38 2026 by rpki-client