
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa
File: ezYdjeBOXTCpp2BoNlPntpGEucA.roa (raw, json)
Hash identifier: LktHY3jkDbIhslA+DeEyU+jr0TQpQKQtbmEPSGScDGs=
Subject key identifier: 7B:36:1D:8D:E0:4E:5D:30:A9:A7:60:68:36:53:E7:B6:91:84:B9:C0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 088F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa
Signing time: Tue 31 Mar 2026 07:43:47 +0000
ROA not before: Tue 31 Mar 2026 07:43:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.254.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7B361D8DE04E5D30A9A760683653E7B69184B9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:57:09:c9:6d:0d:a6:59:0b:59:66:1a:7b:
5a:2a:e8:0c:b7:1b:f4:84:e7:b9:51:7e:c4:bd:4b:
55:69:7b:e4:f7:28:0b:5e:d8:c4:f0:31:0d:d5:28:
18:e1:ee:79:24:e0:b5:a5:5a:a8:fa:8a:1f:27:c7:
6a:3b:a4:df:85:be:b2:bf:7b:09:30:dd:07:65:18:
d1:32:42:47:6f:18:df:8e:c9:32:4e:a9:d4:97:ef:
a5:8f:d5:12:6c:e5:e7:39:6d:e4:25:09:31:ca:04:
4b:de:04:58:57:d8:45:be:2e:43:c7:ad:cc:64:39:
4e:7e:de:ca:4e:98:50:7f:24:06:96:73:c0:ff:13:
74:c5:ca:bd:1a:39:e5:5b:59:72:8a:d5:bf:8d:90:
a2:14:b7:bc:17:fc:e7:9e:e9:6a:c4:57:49:d8:5b:
79:3e:1a:4f:67:e8:e7:f7:d2:8f:62:80:91:f2:39:
b5:1b:c6:35:df:af:5a:e1:53:52:8b:e5:54:b0:eb:
29:5e:b3:84:6a:12:3e:e8:08:67:94:02:8a:da:e2:
be:d9:91:48:71:3b:58:97:af:3c:d5:6f:5b:51:4a:
a6:c0:ad:85:c4:ae:dc:8b:d6:77:30:0a:4a:fe:a9:
20:6c:83:d7:b3:df:eb:3a:b3:a2:98:54:b4:d1:e0:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:1D:8D:E0:4E:5D:30:A9:A7:60:68:36:53:E7:B6:91:84:B9:C0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.254.120.0/22
Signature Algorithm: sha256WithRSAEncryption
29:2c:83:9c:1c:45:51:79:6f:06:0a:4b:66:b5:db:52:2b:93:
a2:75:58:6c:2c:d7:5c:48:87:ac:6f:f1:6c:47:9e:89:a1:b7:
c8:8d:ad:12:ff:42:85:0b:13:ed:b9:e0:06:f4:1e:27:b2:be:
e7:09:b0:e9:9c:9f:12:13:aa:c4:ac:88:c8:ee:11:21:3b:0e:
89:98:39:d2:7a:bc:78:4b:6d:ec:e9:7b:60:e1:db:53:73:27:
13:5a:95:71:bc:11:5f:0c:18:3c:e1:8d:4b:e4:11:84:10:4b:
71:32:4c:97:7b:12:bb:96:ad:61:88:8d:8c:c3:98:0b:88:ef:
8f:c1:10:ae:4b:8c:dd:f5:24:09:02:12:7c:64:9f:3d:e3:5b:
40:66:b0:da:ca:90:40:98:71:8d:98:c0:06:97:8c:ab:1c:92:
20:80:02:77:2c:81:06:da:20:4f:af:19:8d:1a:80:d4:5c:2c:
cd:ce:1a:9c:f6:26:76:d9:c9:b9:5f:b8:da:3f:5e:b7:77:05:
b1:c4:6f:f0:78:d3:e4:b1:11:cd:5f:b7:31:95:f6:dd:54:3f:
c9:ad:87:38:f0:c4:a7:f6:5e:a6:c7:d4:b2:05:f1:ed:9a:6c:
15:d9:24:31:58:e8:0a:7a:d7:3d:3a:3b:9d:d1:ee:37:1b:83:
e7:62:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:23 2026 by rpki-client