
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa
File: brgHL2CfpOcooEkiLY6Sr3T3nqI.roa (raw, json)
Hash identifier: gEkHIpf6YbUD4f3FSaltllE0NkyagqbzEmiA1EYA86w=
Subject key identifier: 6E:B8:07:2F:60:9F:A4:E7:28:A0:49:22:2D:8E:92:AF:74:F7:9E:A2
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0904
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa
Signing time: Tue 31 Mar 2026 07:44:40 +0000
ROA not before: Tue 31 Mar 2026 07:44:40 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 124.109.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:40 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6EB8072F609FA4E728A049222D8E92AF74F79EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:06:75:02:92:33:0a:2c:0b:c4:9b:be:c0:
0c:78:36:46:82:0b:b8:df:c3:36:70:05:77:fb:52:
39:05:87:60:50:58:54:b6:e5:39:bf:46:17:c2:14:
c6:cc:9a:05:c1:5a:6d:e9:aa:5f:64:3c:b5:57:5b:
25:66:e3:84:19:ec:6b:e9:c5:6f:45:c7:6a:c1:b2:
03:10:3d:ae:2e:5b:bc:d9:9c:34:f1:44:75:d1:55:
93:4f:af:f9:ed:7a:07:d5:21:2f:45:89:3b:5d:45:
30:8c:eb:ce:a1:be:9a:31:bb:ee:89:dd:16:a8:c2:
ca:56:0a:ae:6b:a1:68:04:06:1d:fa:64:73:6b:97:
07:ad:25:9f:44:49:b1:5d:06:b6:9b:0c:2b:7b:b0:
f8:6c:31:e3:ab:5d:fe:a4:70:34:dd:41:c7:27:69:
92:d4:10:87:56:8a:6d:30:e7:d7:a5:eb:77:42:39:
4f:1d:50:60:e2:93:d3:47:7e:9c:70:08:23:8a:ec:
d9:12:bb:d6:ad:c1:64:2b:40:42:c0:65:3b:c4:f2:
9a:ac:f9:b2:93:d4:66:c2:08:7a:1d:94:7e:74:c3:
23:ef:9e:7c:97:4e:5c:14:2e:ac:67:ec:ca:f4:ab:
ec:63:a5:b4:b6:0d:93:17:d3:d4:d2:bd:ab:f7:cc:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:07:2F:60:9F:A4:E7:28:A0:49:22:2D:8E:92:AF:74:F7:9E:A2
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa
sbgp-ipAddrBlock: critical
IPv4:
124.109.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3b:ff:a4:a4:bf:16:3f:a4:c5:ac:4e:5f:35:8e:f6:fe:ac:7f:
b9:4e:29:34:48:d9:a6:0b:92:92:d7:5f:45:09:0d:d6:ef:cf:
93:2c:f1:bf:dd:30:a0:6d:56:e2:6d:97:c4:18:11:74:29:71:
c6:07:51:de:4c:f5:4f:00:37:60:e4:55:1e:e9:65:96:fa:e7:
58:07:66:d7:e9:ac:af:71:38:39:d5:57:9b:92:aa:65:05:bc:
3d:8c:ae:cc:49:f4:19:e2:b9:dd:10:ca:a8:17:79:1a:ad:fe:
5a:5c:69:65:89:2d:22:ee:77:ca:7b:42:35:8f:23:bf:bb:75:
16:80:f0:38:46:aa:e1:b2:c4:13:56:f4:2a:23:81:6a:b3:ed:
e0:99:21:ba:5b:6f:47:1f:ae:52:12:76:48:79:42:55:ac:c1:
d8:ca:18:d6:c1:27:3d:87:e2:14:1c:c7:21:38:8a:bc:13:23:
bc:31:8f:d3:93:f2:ac:b3:87:e4:e7:56:c5:11:78:a4:71:be:
bc:b3:d0:1c:6d:e2:a7:f9:36:30:c5:08:a0:d7:95:ea:f7:fd:
0e:f6:7c:dd:f8:a9:d0:79:87:e6:44:8b:ce:d0:06:51:62:76:
61:b0:ae:82:0a:5d:85:be:11:af:87:4c:55:72:27:85:ef:b4:
6f:32:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:44 2026 by rpki-client