
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa
File: dciUBecTfCQoZ02bNLdiMNRY2zs.roa (raw, json)
Hash identifier: P9uiqTTltzvXZexzOv0s3usPBgQduhc4Jq566Yv4OGs=
Subject key identifier: 75:C8:94:05:E7:13:7C:24:28:67:4D:9B:34:B7:62:30:D4:58:DB:3B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0825
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa
Signing time: Tue 31 Mar 2026 07:42:53 +0000
ROA not before: Tue 31 Mar 2026 07:42:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 59.140.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=75C89405E7137C2428674D9B34B76230D458DB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:33:f8:8c:1f:d9:b1:c0:9d:d2:e6:62:9d:
4f:fa:c0:af:49:90:5b:a1:36:5f:c5:5f:83:fb:d9:
e3:13:8f:8b:e9:d1:e1:85:9b:a8:8c:8b:c1:6f:cc:
71:11:b3:4b:b9:68:1d:d8:00:58:20:76:02:60:cd:
b8:b6:0b:ef:4f:2b:26:e0:2c:5b:61:d0:99:f3:a5:
d4:0f:80:14:ac:42:9f:58:d1:ea:77:35:0f:73:d1:
2e:c0:f3:59:bc:64:cb:96:7e:a5:10:9a:6d:b0:3d:
19:af:85:d3:6c:be:67:77:63:fe:29:ee:b1:8c:7d:
6f:fa:d2:71:b8:c0:63:f8:3a:75:0c:4f:d8:1b:df:
de:24:aa:7e:61:64:6b:8e:d8:c4:55:46:64:5e:bc:
a5:63:ca:56:ab:ac:af:29:74:c9:9b:9a:fc:3e:7c:
45:3c:13:96:b7:66:40:f3:d0:ab:73:a4:64:4c:c2:
81:2b:11:f0:33:c9:d0:4d:53:eb:06:12:df:42:b4:
13:b6:e3:62:ee:8d:3d:4a:80:09:18:8f:b4:c8:a9:
3b:17:82:d2:9a:54:3f:bf:e5:c8:e4:d4:f0:b2:a4:
b1:3b:2c:09:b3:81:fb:e2:a9:c3:8d:fa:09:39:47:
32:5a:4f:45:fb:e1:a0:0e:52:c8:73:de:48:9e:1d:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:94:05:E7:13:7C:24:28:67:4D:9B:34:B7:62:30:D4:58:DB:3B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa
sbgp-ipAddrBlock: critical
IPv4:
59.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:8d:7c:09:99:43:1d:cd:30:5f:98:cd:0a:fb:e5:c5:77:f1:
90:35:db:3d:c6:31:df:bc:c2:24:95:06:ef:6e:de:f7:c0:85:
eb:f1:91:9e:1a:8e:2b:a8:03:4b:44:74:8f:d3:4b:39:a8:ba:
e4:f4:46:34:ab:e2:6e:4e:1a:bb:f5:ea:6b:b9:11:39:a3:5e:
8e:6a:af:d9:c0:40:38:8a:b2:34:3a:54:ac:6b:9e:d8:7b:bd:
eb:0f:eb:b8:be:65:49:d4:c4:69:76:43:19:51:e2:1d:0c:90:
f5:69:a4:59:a6:c8:2a:cd:5c:88:c3:7d:24:1c:93:fc:d9:b4:
bd:13:af:e1:b9:32:ef:5a:bf:1e:ed:74:50:6b:27:b4:14:ee:
bd:c8:f4:62:0c:dc:7f:5b:30:14:c3:f2:4d:93:d4:b7:61:71:
92:e5:55:28:38:82:2a:f7:65:2f:5e:c6:b2:64:ad:02:9c:38:
39:35:3a:cb:46:85:da:fd:c0:79:05:a2:91:9d:23:c7:51:8f:
b5:e5:f4:27:e4:e4:f6:3b:98:af:53:44:73:c0:ba:2c:3b:e6:
0a:d4:92:70:23:a9:f3:2d:3f:54:56:b0:9d:a9:67:3f:96:6a:
5d:df:e7:03:ad:54:01:a7:90:4e:4c:11:36:21:f8:15:b7:d5:
44:be:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client