
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa
File: gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa (raw, json)
Hash identifier: Ix8tOcSmjEYWM4G1WzYlIvvhzEepS3o/+w0n0F05c/I=
Subject key identifier: 83:3A:A2:C0:FA:A7:2F:90:CF:DB:1B:A4:D5:6A:FB:EB:8A:0A:B8:A4
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08D8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa
Signing time: Tue 31 Mar 2026 07:44:22 +0000
ROA not before: Tue 31 Mar 2026 07:44:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.10.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=833AA2C0FAA72F90CFDB1BA4D56AFBEB8A0AB8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:49:b7:81:e5:e2:f5:c4:d6:c6:de:89:a6:
15:a5:bd:a7:38:99:75:ea:7c:b0:3f:d6:fc:ca:56:
83:b9:f3:ce:ad:26:f3:22:75:fa:d5:8d:01:b2:f1:
74:ad:2d:45:27:93:54:aa:eb:01:c2:3c:ac:09:42:
c5:bd:75:4b:91:b6:55:e2:92:1e:b5:58:5d:94:48:
9c:d5:75:24:05:4e:7d:bb:53:21:b8:9d:3f:69:17:
b6:10:ba:6d:c1:d3:d4:ab:41:ef:ab:4d:ea:24:a4:
8f:4f:43:33:70:88:d9:1c:d3:fd:19:25:23:9b:50:
fa:8e:a3:7d:f3:eb:9a:d6:fd:6a:3b:b8:76:59:50:
04:00:13:21:e9:5f:89:8b:f1:0f:cb:c7:40:d5:23:
8d:9f:63:d8:d1:e2:80:9a:9c:02:ae:05:78:5b:53:
1b:0e:07:d5:de:eb:1a:f5:91:10:13:b4:0e:f1:1a:
11:50:a8:c2:fc:cb:a6:22:82:2c:c8:5b:20:90:81:
d4:d3:a1:6c:62:2a:96:6b:0b:c3:43:9e:45:5c:ab:
77:1b:95:4b:71:b5:ab:8f:90:eb:85:1f:f3:35:0f:
41:82:fb:89:3e:4b:d2:2c:c4:82:fb:de:9b:08:8c:
55:66:43:cd:72:cc:d3:75:76:d1:75:24:42:2c:29:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:A2:C0:FA:A7:2F:90:CF:DB:1B:A4:D5:6A:FB:EB:8A:0A:B8:A4
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa
sbgp-ipAddrBlock: critical
IPv4:
211.10.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2d:e3:ac:01:31:77:a2:fe:74:88:0e:e5:4d:7d:61:52:eb:
28:0a:db:ef:44:61:c6:3b:d7:be:77:57:b9:b0:69:eb:44:05:
64:9c:49:5f:ef:78:ed:62:0d:0a:67:3e:b3:0d:98:86:af:5c:
e1:e9:97:6b:7a:8d:04:26:ad:c9:70:da:40:46:09:58:06:73:
b5:e3:b7:a7:bb:61:80:09:44:98:44:fb:08:0f:d5:de:f1:ab:
6a:d4:dd:f2:4e:0f:c2:7f:77:31:af:fe:e9:99:a6:68:36:ce:
ea:90:b7:7f:5e:4f:dd:a7:59:ce:4c:f6:a5:2a:4e:af:b0:fd:
92:a6:db:ca:9a:87:3d:27:1b:f1:eb:f6:b6:92:cb:86:67:e1:
9a:b7:6a:a2:59:2a:97:3b:40:4f:e7:1c:85:1a:6d:b6:63:28:
57:a2:30:9b:c0:f8:42:68:29:bb:01:9e:0b:44:7d:cd:06:a3:
71:12:cc:5a:87:c8:8c:14:77:cc:96:cf:c4:f6:69:dd:4d:b0:
77:22:b4:a0:fc:e6:6f:7c:80:34:d2:d3:49:a6:6c:73:0f:70:
3b:82:2f:44:35:be:4b:b2:ce:69:43:89:0a:c1:13:b8:3a:38:
bc:fe:2f:9b:ee:ae:de:8a:f9:e7:ff:82:33:99:49:8f:f3:4b:
2c:73:58:93
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgzM0FBMkMwRkFBNzJG
OTBDRkRCMUJBNEQ1NkFGQkVCOEEwQUI4QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/w0m3geXi9cTWxt6JphWlvac4mXXqfLA/1vzKVoO5886tJvMi
dfrVjQGy8XStLUUnk1Sq6wHCPKwJQsW9dUuRtlXikh61WF2USJzVdSQFTn27UyG4
nT9pF7YQum3B09SrQe+rTeokpI9PQzNwiNkc0/0ZJSObUPqOo33z65rW/Wo7uHZZ
UAQAEyHpX4mL8Q/Lx0DVI42fY9jR4oCanAKuBXhbUxsOB9Xe6xr1kRATtA7xGhFQ
qML8y6YigizIWyCQgdTToWxiKpZrC8NDnkVcq3cblUtxtauPkOuFH/M1D0GC+4k+
S9IsxIL73psIjFVmQ81yzNN1dtF1JEIsKY3fAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgzqiwPqnL5DP2xuk1Wr764oKuKQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2d6cWl3UHFuTDVEUDJ4dWsxV3I3NjRvS3VLUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTCrEwDQYJKoZIhvcNAQELBQADggEB
AI0t46wBMXei/nSIDuVNfWFS6ygK2+9EYcY71753V7mwaetEBWScSV/veO1iDQpn
PrMNmIavXOHpl2t6jQQmrclw2kBGCVgGc7Xjt6e7YYAJRJhE+wgP1d7xq2rU3fJO
D8J/dzGv/umZpmg2zuqQt39eT92nWc5M9qUqTq+w/ZKm28qahz0nG/Hr9raSy4Zn
4Zq3aqJZKpc7QE/nHIUabbZjKFeiMJvA+EJoKbsBngtEfc0Go3ESzFqHyIwUd8yW
z8T2ad1NsHcitKD85m98gDTS00mmbHMPcDuCL0Q1vkuyzmlDiQrBE7g6OLz+L5vu
rt6K+ef/gjOZSY/zSyxzWJM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:33 2026 by rpki-client