
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YEfYiG7CZNXFiSk25OE6v0RAM60.roa
File: YEfYiG7CZNXFiSk25OE6v0RAM60.roa (raw, json)
Hash identifier: ipush06LZymtn4GfheP9lOild5AmBYAnMNziql8ZVVs=
Subject key identifier: 60:47:D8:88:6E:C2:64:D5:C5:89:29:36:E4:E1:3A:BF:44:40:33:AD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 088C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YEfYiG7CZNXFiSk25OE6v0RAM60.roa
Signing time: Tue 31 Mar 2026 07:43:45 +0000
ROA not before: Tue 31 Mar 2026 07:43:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.235.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6047D8886EC264D5C5892936E4E13ABF444033AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:c5:dd:40:0a:b6:07:66:4c:07:b0:fd:45:
f1:99:6e:c2:ca:a1:9a:2b:38:35:df:96:a3:fd:09:
2d:a9:2b:32:db:57:b5:a7:f1:68:4c:1e:47:dc:26:
99:3d:0f:68:00:25:15:ff:88:60:51:7a:28:a3:78:
d6:05:cb:b2:54:48:8e:a7:80:7b:dd:14:bd:31:06:
02:bf:66:78:d4:38:e8:f4:a5:87:51:1a:af:e6:c6:
c8:00:4c:78:bd:a0:61:a6:d8:87:26:e2:b3:aa:ef:
f8:c0:cd:e6:ba:86:a6:ac:e7:67:8f:97:cd:bb:de:
cb:70:4a:9b:5a:83:b4:ed:7a:76:6b:3d:6b:1e:9a:
8f:ac:d7:cd:1d:cb:3a:a3:82:61:01:cf:cd:98:00:
0b:f3:7c:61:d2:72:16:c3:c1:23:ae:39:da:55:66:
19:df:69:51:e6:57:72:56:89:bb:21:7f:cc:01:fc:
6b:7f:8e:25:02:b1:c7:b8:2c:b2:e3:0d:3e:82:60:
41:7c:3c:0a:04:c8:8d:c7:db:69:33:ee:63:9a:72:
81:a7:94:a1:57:10:1a:96:b1:8b:bc:7a:67:35:bc:
b6:7b:67:b6:13:2b:4f:93:23:e5:50:24:10:1a:21:
53:dc:c8:68:ab:3c:62:0b:41:f2:2b:c9:7e:03:43:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:D8:88:6E:C2:64:D5:C5:89:29:36:E4:E1:3A:BF:44:40:33:AD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YEfYiG7CZNXFiSk25OE6v0RAM60.roa
sbgp-ipAddrBlock: critical
IPv4:
210.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
01:e3:c0:6f:70:b0:e8:63:89:91:95:a8:fb:9e:de:10:bf:6b:
65:12:d8:df:f0:45:eb:1f:d7:d8:ff:e9:53:3f:5c:af:6c:ca:
d3:c4:6b:e2:5d:c4:83:70:e5:6a:18:ba:d3:e3:53:ff:a4:bb:
df:ec:fc:38:03:d9:d5:2f:60:44:7c:f9:6d:3a:28:bb:b3:3f:
ef:cc:6c:59:22:9c:0e:4d:36:68:11:6f:d4:1f:e4:c5:5c:aa:
3e:af:fc:90:2c:49:0d:2b:7f:64:d5:1e:fc:cc:8b:9b:ea:6e:
77:ac:9a:a7:e0:45:14:a8:e9:1d:94:91:1e:65:14:22:af:e3:
ac:2d:f6:39:6d:06:eb:1d:de:af:8b:3d:5e:34:a4:ce:a4:28:
77:0e:87:9c:c1:9c:0e:d1:60:c7:32:c0:9a:9a:dc:04:ba:9e:
6a:73:74:59:95:f1:2d:38:35:3c:dc:b2:05:c3:07:89:95:c7:
8b:9c:51:14:65:f7:38:8a:6b:9b:52:32:f3:22:b4:e5:d5:fa:
82:09:5a:17:f9:3f:ac:61:e3:bd:b1:41:b1:cb:d8:16:d5:f5:
f7:f8:28:ba:e1:99:2d:9d:7e:b0:f4:b2:83:30:92:6d:e1:5a:
36:f5:9d:3c:50:19:c0:5e:13:97:b4:31:3c:87:52:e5:6c:6a:
56:f0:5a:17
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzNDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwNDdEODg4NkVDMjY0
RDVDNTg5MjkzNkU0RTEzQUJGNDQ0MDMzQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/RcXdQAq2B2ZMB7D9RfGZbsLKoZorODXflqP9CS2pKzLbV7Wn
8WhMHkfcJpk9D2gAJRX/iGBReiijeNYFy7JUSI6ngHvdFL0xBgK/ZnjUOOj0pYdR
Gq/mxsgATHi9oGGm2Icm4rOq7/jAzea6hqas52ePl8273stwSptag7TtenZrPWse
mo+s180dyzqjgmEBz82YAAvzfGHSchbDwSOuOdpVZhnfaVHmV3JWibshf8wB/Gt/
jiUCsce4LLLjDT6CYEF8PAoEyI3H22kz7mOacoGnlKFXEBqWsYu8emc1vLZ7Z7YT
K0+TI+VQJBAaIVPcyGirPGILQfIryX4DQwnhAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUYEfYiG7CZNXFiSk25OE6v0RAM60wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1lFZllpRzdDWk5YRmlTazI1T0U2djBSQU02MC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbS60AwDQYJKoZIhvcNAQELBQADggEB
AAHjwG9wsOhjiZGVqPue3hC/a2US2N/wResf19j/6VM/XK9sytPEa+JdxINw5WoY
utPjU/+ku9/s/DgD2dUvYER8+W06KLuzP+/MbFkinA5NNmgRb9Qf5MVcqj6v/JAs
SQ0rf2TVHvzMi5vqbnesmqfgRRSo6R2UkR5lFCKv46wt9jltBusd3q+LPV40pM6k
KHcOh5zBnA7RYMcywJqa3AS6nmpzdFmV8S04NTzcsgXDB4mVx4ucURRl9ziKa5tS
MvMitOXV+oIJWhf5P6xh472xQbHL2BbV9ff4KLrhmS2dfrD0soMwkm3hWjb1nTxQ
GcBeE5e0MTyHUuVsalbwWhc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:27 2026 by rpki-client