
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dzobSNjxmMeY-phnjnExLVLtihQ.roa
File: dzobSNjxmMeY-phnjnExLVLtihQ.roa (raw, json)
Hash identifier: qSfLK4bJuQumdMsmfSys1jRx2rO4ab5RMHwxdxOFVdg=
Subject key identifier: 77:3A:1B:48:D8:F1:98:C7:98:FA:98:67:8E:71:31:2D:52:ED:8A:14
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0864
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dzobSNjxmMeY-phnjnExLVLtihQ.roa
Signing time: Tue 31 Mar 2026 07:43:27 +0000
ROA not before: Tue 31 Mar 2026 07:43:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.253.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=773A1B48D8F198C798FA98678E71312D52ED8A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:97:d0:bb:41:64:1f:7a:70:08:b8:a4:07:1a:
79:d4:5a:ae:4a:da:3b:46:71:7d:e8:fa:98:c5:18:
71:49:c5:5b:14:16:4f:d0:b3:ee:30:a4:74:b0:e5:
f3:fe:a6:a5:7e:45:6e:69:f7:66:5a:65:8b:67:bd:
3c:78:79:b2:11:0d:c9:4e:6a:69:9f:38:49:2d:3b:
66:b7:2c:90:ca:c1:1a:13:7e:c9:08:e3:9e:e9:36:
4d:d2:b7:dd:8d:59:2c:c7:46:c7:5d:33:61:4d:88:
b1:5f:b9:6d:e1:ce:df:f3:4f:3a:b9:dd:52:18:11:
6e:c3:ed:95:f0:d8:89:31:0a:c1:37:db:af:b0:9f:
6f:a9:f8:e7:63:11:01:51:6d:18:5a:2e:de:4c:94:
96:a2:8e:97:d7:5e:8f:39:7e:4b:77:b5:44:fe:9d:
a3:52:45:f8:33:60:a9:63:83:e8:ab:2b:57:d4:fa:
c0:fc:81:51:13:7e:c4:64:35:b6:a1:3b:2d:fa:56:
bf:36:80:3d:d7:be:2d:34:4e:c9:d4:96:26:64:c2:
e7:0b:31:10:ba:8d:e7:b0:1a:5c:e8:ef:3a:21:1a:
06:83:e2:1e:9c:8b:37:b3:5f:97:84:4f:7a:45:76:
63:bb:96:b7:c5:54:60:3a:bd:2a:79:8f:50:2c:cd:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:1B:48:D8:F1:98:C7:98:FA:98:67:8E:71:31:2D:52:ED:8A:14
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dzobSNjxmMeY-phnjnExLVLtihQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0f:cb:47:cf:14:f0:4d:d1:6e:c0:11:67:4a:32:c2:4d:78:
f3:1d:2a:07:4f:96:c3:b3:bb:5b:74:d3:b1:d0:50:95:93:67:
b6:6b:2b:33:b6:00:6f:77:45:61:4f:7b:e4:fd:f4:63:b1:dc:
44:1a:b5:9a:4a:e6:a4:5e:76:42:38:a2:52:c8:58:7a:ef:06:
ef:53:1a:df:c3:b3:9d:87:88:11:91:67:4a:a1:a0:9c:4c:1f:
2b:46:2c:79:43:60:0e:10:bf:b1:e7:39:90:18:61:bf:7d:7d:
ac:09:88:9a:3a:df:98:f2:e2:13:35:78:16:dc:0a:dd:c5:59:
6d:b4:c0:fc:b7:61:c5:43:62:75:9e:40:40:95:49:28:7e:a9:
b6:6d:af:7f:6c:3d:ee:68:0e:8d:26:e5:a1:71:7f:0a:40:1c:
35:36:0c:75:56:67:7f:5c:74:2d:b6:0a:e7:86:59:99:ca:78:
48:21:f4:07:aa:77:00:c2:0c:0d:6f:f3:42:a3:e0:85:ac:30:
95:d2:92:2d:3c:28:05:23:86:b2:6e:05:cf:d3:23:c2:d0:de:
3e:59:d7:cc:9d:6f:8e:e3:af:67:42:69:ab:4b:40:33:38:57:
34:4b:50:4b:05:c0:e0:ad:51:22:75:ca:20:e9:d4:75:c9:cb:
7f:b9:f9:f8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3M0ExQjQ4RDhGMTk4
Qzc5OEZBOTg2NzhFNzEzMTJENTJFRDhBMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3l9C7QWQfenAIuKQHGnnUWq5K2jtGcX3o+pjFGHFJxVsUFk/Q
s+4wpHSw5fP+pqV+RW5p92ZaZYtnvTx4ebIRDclOammfOEktO2a3LJDKwRoTfskI
457pNk3St92NWSzHRsddM2FNiLFfuW3hzt/zTzq53VIYEW7D7ZXw2IkxCsE326+w
n2+p+OdjEQFRbRhaLt5MlJaijpfXXo85fkt3tUT+naNSRfgzYKljg+irK1fU+sD8
gVETfsRkNbahOy36Vr82gD3Xvi00TsnUliZkwucLMRC6jeewGlzo7zohGgaD4h6c
izezX5eET3pFdmO7lrfFVGA6vSp5j1AszUGvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUdzobSNjxmMeY+phnjnExLVLtihQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2R6b2JTTmp4bU1lWS1waG5qbkV4TFZMdGloUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS/YEwDQYJKoZIhvcNAQELBQADggEB
AFkPy0fPFPBN0W7AEWdKMsJNePMdKgdPlsOzu1t007HQUJWTZ7ZrKzO2AG93RWFP
e+T99GOx3EQatZpK5qRedkI4olLIWHrvBu9TGt/Ds52HiBGRZ0qhoJxMHytGLHlD
YA4Qv7HnOZAYYb99fawJiJo635jy4hM1eBbcCt3FWW20wPy3YcVDYnWeQECVSSh+
qbZtr39sPe5oDo0m5aFxfwpAHDU2DHVWZ39cdC22CueGWZnKeEgh9AeqdwDCDA1v
80Kj4IWsMJXSki08KAUjhrJuBc/TI8LQ3j5Z18ydb47jr2dCaatLQDM4VzRLUEsF
wOCtUSJ1yiDp1HXJy3+5+fg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:45 2026 by rpki-client