
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Y9aPwMw_fOSmW5osQuiD3d4TwjA.roa
File: Y9aPwMw_fOSmW5osQuiD3d4TwjA.roa (raw, json)
Hash identifier: I+S1sbVRjjGwksYF6qJy5IhZdMI1T8r313fOAiQSrp4=
Subject key identifier: 63:D6:8F:C0:CC:3F:7C:E4:A6:5B:9A:2C:42:E8:83:DD:DE:13:C2:30
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08D1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Y9aPwMw_fOSmW5osQuiD3d4TwjA.roa
Signing time: Tue 31 Mar 2026 07:44:19 +0000
ROA not before: Tue 31 Mar 2026 07:44:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.255.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=63D68FC0CC3F7CE4A65B9A2C42E883DDDE13C230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:ba:ff:03:4f:57:55:0b:d0:46:71:af:0b:
3a:06:40:0e:0e:d6:2d:69:d5:b1:23:08:7a:e3:30:
b1:0c:b1:a0:2f:13:57:69:af:57:bd:2f:50:93:4f:
1c:04:1a:aa:e6:85:10:e6:38:72:11:fe:07:b3:5c:
39:a8:9d:25:1d:71:e8:f0:f6:56:f4:9b:30:05:36:
81:4e:d5:e9:5f:24:0d:b9:30:89:2f:3f:6c:98:2c:
dd:c1:3f:45:28:12:fd:d1:0f:e8:ae:04:86:e9:97:
38:2c:0f:83:b8:16:f7:e8:6e:22:67:0f:d1:9e:2c:
99:37:13:14:6a:d7:52:89:00:eb:f2:98:d1:52:32:
2d:76:49:52:ef:6e:77:e1:73:9f:5f:8e:30:08:43:
0e:57:b9:fd:08:dc:d3:15:e6:5c:98:48:ca:5f:5c:
08:d6:7c:a3:5e:86:24:f2:82:e6:98:2a:bd:03:5d:
d3:6a:02:db:05:9d:ea:a1:5d:6c:6e:20:e3:b8:4f:
d3:6c:95:69:db:5d:7e:3a:80:b5:4e:af:fd:12:ab:
94:a0:ac:7a:10:4d:17:67:b2:45:74:a7:f3:02:17:
fe:93:2e:df:e1:fd:2b:91:09:65:56:55:ec:67:0f:
1b:ba:fe:53:81:03:fc:ab:6d:42:ab:1b:23:09:84:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:8F:C0:CC:3F:7C:E4:A6:5B:9A:2C:42:E8:83:DD:DE:13:C2:30
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Y9aPwMw_fOSmW5osQuiD3d4TwjA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.255.192.0/19
Signature Algorithm: sha256WithRSAEncryption
59:da:a2:b0:b1:6f:a5:36:1e:a4:5f:37:5e:71:c3:43:f6:33:
5b:65:b6:8f:cb:79:de:25:8b:52:ea:45:f2:6d:21:ba:cf:db:
57:7a:fd:55:0e:95:fd:74:71:19:16:51:16:f1:43:01:f4:2b:
0f:58:86:1b:7e:83:37:b9:fb:5a:57:b4:15:8c:40:e2:34:c2:
98:fc:eb:52:4a:72:bf:b6:27:d9:52:a2:ae:6c:37:6b:df:85:
b8:26:ed:4e:ca:83:f6:ce:4d:b0:b1:68:c3:10:f0:f9:bd:27:
33:3f:fe:ba:b4:67:af:72:9f:1b:ea:30:6a:69:79:51:16:f8:
54:1f:94:0f:20:d0:0f:46:5d:5c:de:4e:c9:1e:1a:39:9c:61:
15:ed:0d:8e:bb:8f:55:f0:18:98:49:9c:44:d0:7a:04:68:36:
0b:99:c7:df:13:0e:96:3b:f5:5e:38:b5:33:f0:9d:44:1c:67:
e1:1c:94:bf:2d:20:5d:25:0d:ee:e9:b6:35:c1:4e:53:9d:29:
7a:1c:39:a4:1a:70:b4:5b:95:56:c9:08:7b:b5:c7:ae:ab:3f:
27:41:fb:aa:ba:29:27:31:72:93:b2:d9:a1:d6:15:a2:72:8f:
6e:ad:cc:57:95:c2:b5:43:21:ae:5a:5f:cc:1f:03:d2:8e:7f:
22:82:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:31 2026 by rpki-client