
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa
File: YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa (raw, json)
Hash identifier: 8e+pXEQcI4wXwNgeNPRqWKWoJlC+Jr8Q7ktkYSDW+cQ=
Subject key identifier: 62:89:8F:3A:EE:1F:9B:FB:0A:24:F9:E6:43:70:1E:45:BB:B6:2A:20
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0922
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa
Signing time: Tue 31 Mar 2026 07:44:52 +0000
ROA not before: Tue 31 Mar 2026 07:44:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24279
IP address blocks: 14.15.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=62898F3AEE1F9BFB0A24F9E643701E45BBB62A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:34:4e:bd:48:5e:aa:98:ac:e9:da:fe:55:
52:45:be:aa:2d:34:ed:ca:a2:1a:5c:d4:41:d7:30:
3c:09:69:ad:19:65:3d:a6:25:0b:40:2c:b4:e8:9f:
ec:b4:cd:d2:ef:18:c5:fb:38:d7:a3:7e:b6:48:3e:
0c:7a:d4:49:da:df:ee:8d:51:c6:a9:ea:6d:1c:a6:
fe:38:ca:9e:f4:61:14:f6:a0:d3:7c:b5:85:3d:c2:
ae:4d:fd:c4:36:75:9c:7a:ed:d4:0c:7f:41:bc:d7:
d8:7d:2d:c0:2c:4c:e8:cf:ad:4c:d1:6a:4c:bb:3a:
37:88:62:17:10:e8:2d:67:4f:ec:ce:29:8d:61:77:
94:2b:ea:ef:a2:5c:21:37:7a:ce:54:3d:7b:5d:5f:
b3:8b:7a:74:16:49:39:3a:93:15:a2:c4:01:d1:90:
58:4c:6c:d9:3f:fe:9d:57:2e:4d:2f:28:95:d5:81:
16:2e:44:0d:34:5a:d7:c5:fb:c1:bc:d6:bb:28:b3:
dd:0b:42:ff:69:c0:12:3d:5a:9e:ba:2a:00:99:1c:
bf:2d:86:75:b4:9e:c7:64:7f:7d:e4:34:1c:d3:83:
d7:6d:a9:64:38:4b:ae:d1:0d:52:a4:85:72:85:f5:
1e:d7:9a:ee:85:07:0f:08:ba:92:33:25:a2:b6:8f:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:8F:3A:EE:1F:9B:FB:0A:24:F9:E6:43:70:1E:45:BB:B6:2A:20
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa
sbgp-ipAddrBlock: critical
IPv4:
14.15.64.0/21
Signature Algorithm: sha256WithRSAEncryption
67:2c:2e:97:db:ef:12:80:ba:0b:3f:6d:ec:a4:c5:70:d7:14:
b6:28:c7:10:e0:b2:4e:1c:84:ae:dc:7b:b1:1f:50:af:b4:58:
22:b1:d2:7a:44:ed:c5:97:3e:b1:89:a9:fe:0f:41:da:ad:ed:
a3:5c:ca:62:45:af:fc:34:ed:b5:2d:c6:9d:a8:a4:97:91:b0:
21:eb:6d:1a:71:36:e8:82:8f:ae:53:20:f5:c8:ee:46:42:5b:
4d:ec:c4:b4:9a:86:97:df:ec:72:f9:19:e9:ae:06:a4:f6:5c:
43:a0:98:19:f0:54:f5:c5:88:e5:e6:76:30:5d:7d:0a:e0:07:
bf:2b:df:5d:3b:43:4a:73:fe:77:14:5b:c0:32:ee:87:b3:81:
bf:8e:00:1c:ac:10:dd:bf:ad:f3:6a:80:d7:fa:f8:e7:31:27:
d1:9b:ba:7b:6e:81:a9:8d:eb:cd:a8:db:b1:8b:1a:e7:7f:a9:
4e:2b:63:02:b2:1d:dc:08:fd:35:59:26:a8:6b:dd:2b:2a:14:
6c:1b:6c:be:ea:20:88:55:b8:07:63:9c:de:7b:31:ac:c0:6a:
4c:1c:bd:38:f9:b9:5f:ff:d0:dc:0d:3b:17:c3:6f:22:ec:44:
82:63:5b:4e:f4:60:b5:2d:9e:9e:c4:5d:38:6f:b6:b2:0e:95:
65:50:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:24 2026 by rpki-client