
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRr1_-7WSrp62VLMvOCXll3mQvA.roa
File: cRr1_-7WSrp62VLMvOCXll3mQvA.roa (raw, json)
Hash identifier: T6o9pl9cuDp1d+PcOgYQAXNdrJl7ro9sR0ziSd0aaSo=
Subject key identifier: 71:1A:F5:FF:EE:D6:4A:BA:7A:D9:52:CC:BC:E0:97:96:5D:E6:42:F0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07FE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRr1_-7WSrp62VLMvOCXll3mQvA.roa
Signing time: Tue 31 Mar 2026 07:42:35 +0000
ROA not before: Tue 31 Mar 2026 07:42:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 121.111.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=711AF5FFEED64ABA7AD952CCBCE097965DE642F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:a6:9c:7e:f5:31:4c:1f:bb:d3:3c:9f:4b:
b4:42:5a:76:85:73:0e:d9:78:d7:1b:8b:e7:d1:79:
73:f4:ef:15:70:a6:e5:4d:71:e9:fa:0b:56:50:c2:
68:5a:47:01:e5:99:a7:d0:ef:54:5d:0a:19:1c:e6:
ae:97:15:9a:55:8e:a3:9c:92:2c:b2:43:0a:95:7e:
f4:25:c4:6b:19:45:58:0e:ea:bf:a1:e0:26:b8:b6:
28:e2:52:28:f7:d9:18:80:46:e9:73:49:14:4c:4a:
ee:22:30:c2:c2:99:89:1d:06:61:eb:c9:34:ce:e3:
79:8a:99:c9:ed:0f:db:62:57:33:c4:69:b0:49:ae:
6f:f7:9d:06:84:7f:d5:6f:31:bd:00:8a:80:6c:cf:
f6:36:5e:f5:c8:9f:d6:a1:e3:4d:45:5e:d9:26:58:
a0:a7:cc:27:87:74:2e:38:9c:75:be:9e:5f:53:8d:
1a:78:11:98:29:b5:6d:de:c2:88:51:1d:f9:df:a5:
56:11:35:21:bc:38:df:5b:06:7e:0f:6c:b7:1e:54:
7a:ef:23:ef:bb:c6:7a:a6:3c:aa:28:a7:65:30:38:
c8:c6:a1:ae:75:75:64:68:82:10:b7:72:e2:08:3f:
e1:0f:8a:3b:93:db:b3:fc:f6:bf:de:25:f0:d8:cb:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:F5:FF:EE:D6:4A:BA:7A:D9:52:CC:BC:E0:97:96:5D:E6:42:F0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRr1_-7WSrp62VLMvOCXll3mQvA.roa
sbgp-ipAddrBlock: critical
IPv4:
121.111.224.0/19
Signature Algorithm: sha256WithRSAEncryption
76:6e:a4:c2:da:92:a1:d3:c7:53:d2:55:f4:6d:ff:e2:dc:bd:
a6:c3:3e:e6:08:dc:41:d3:a9:ca:a8:75:88:7c:a9:8f:ca:9a:
02:fb:f9:85:d0:5b:20:81:b1:40:6f:50:20:27:f3:0d:5e:fa:
c2:4e:51:2a:b9:c5:c3:2a:48:9f:36:7b:ac:df:29:e1:7b:34:
21:66:96:f4:f6:6b:89:aa:43:2c:1c:90:fc:a0:d2:4b:68:22:
c8:c9:40:24:e4:f9:65:72:9c:02:bc:f1:b5:0e:2a:29:27:ec:
28:b8:fe:ae:94:6b:76:13:f0:b9:75:06:c9:e6:7a:11:d8:ae:
1c:a2:d2:06:dc:54:5f:d0:55:a2:02:fa:0b:21:d5:a8:83:7e:
61:58:ea:66:af:8c:40:7f:46:c7:4a:60:98:75:e1:ff:6d:4d:
29:45:68:a0:ee:b9:08:43:d1:0e:31:d1:6f:12:26:59:b0:35:
df:21:45:dd:5a:f4:0c:a2:fa:56:1c:44:1b:b9:4e:e8:e8:c2:
dc:f7:b4:8e:38:5d:67:c8:ba:de:8b:a0:b1:d9:12:76:ac:81:
1e:3d:6a:6d:68:56:be:b7:32:ea:4d:4f:d1:11:01:c6:00:df:
89:16:bf:37:e2:f0:5d:22:8d:93:a7:1c:3b:ab:e4:cf:0a:10:
21:63:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:15 2026 by rpki-client