
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa
File: kId7Y4lXohzpvdo3hp-udbQwVgM.roa (raw, json)
Hash identifier: CWEwsLZJ/fmkA0bQRVNs0OvxPz4YPDQwV/otDfytb2c=
Subject key identifier: 90:87:7B:63:89:57:A2:1C:E9:BD:DA:37:86:9F:AE:75:B4:30:56:03
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 090E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa
Signing time: Tue 31 Mar 2026 07:44:43 +0000
ROA not before: Tue 31 Mar 2026 07:44:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.125.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=90877B638957A21CE9BDDA37869FAE75B4305603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:80:7c:4c:d1:95:df:f9:fb:bd:da:bd:da:
6d:7e:33:01:4f:df:90:a4:a2:6f:30:54:22:cd:7f:
ca:ec:16:7c:1c:d2:2f:86:b4:7a:f2:ee:83:6b:f4:
f6:2d:d1:0c:e6:9a:d7:55:d5:50:83:b8:d1:c1:1c:
fc:7e:80:49:68:12:dc:e5:c3:02:1d:95:30:b5:58:
43:c3:40:3c:2c:65:06:d5:5a:eb:69:d0:33:bc:9b:
b9:14:76:1b:45:31:9c:24:53:cc:8c:63:a6:e2:cd:
5c:ca:b8:89:8f:4a:ff:ac:c5:06:27:84:1d:b2:ab:
26:8f:a9:89:bf:56:11:f2:b1:e0:7c:dc:59:f1:d3:
cf:2b:9c:bd:84:a6:dd:d0:52:69:c7:4d:7e:ce:17:
17:1a:d8:9b:65:65:94:ce:f4:06:aa:bf:34:59:20:
69:52:ec:34:ec:b9:b7:0f:37:7a:2e:22:76:5c:a9:
a4:2e:85:84:d5:03:f5:d6:33:9a:ec:84:7c:fa:de:
7b:89:ee:0e:76:7f:40:2a:75:7d:cb:d8:d5:9d:38:
8c:cf:db:f0:73:44:3d:45:45:b0:8b:cf:98:88:a7:
c9:9a:c2:a8:0b:71:d5:56:ed:6b:bd:46:75:66:c3:
42:a0:e7:1a:46:33:69:04:4a:fb:97:60:d9:2d:3e:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:7B:63:89:57:A2:1C:E9:BD:DA:37:86:9F:AE:75:B4:30:56:03
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:a7:06:33:ca:d0:44:c9:fb:bf:80:11:f0:54:1d:b9:2b:9c:
ed:20:c4:0e:6f:a5:2f:c8:8b:1e:fd:66:71:32:7a:dd:71:c8:
c3:c2:e6:93:b8:b1:bb:f3:42:eb:68:4b:1d:fe:18:a8:31:43:
c0:43:da:76:6f:b2:de:69:53:42:6e:82:c7:07:c4:23:15:d2:
58:18:1e:0e:70:e2:03:4d:c0:95:51:50:7e:0b:29:61:f0:34:
dd:c5:6c:17:80:27:bf:88:00:1d:80:46:4b:ed:9d:c6:79:58:
2b:71:80:df:bb:d1:fe:54:98:2f:55:f9:15:14:e6:4a:7d:22:
a9:8c:54:57:f0:29:e1:d9:eb:00:4d:38:42:98:ae:af:19:e7:
46:42:c0:e9:04:f5:04:aa:51:08:6a:ee:9d:d2:34:0f:40:ff:
76:87:d5:57:31:5c:8e:bf:e1:bf:f5:5d:77:90:62:1e:06:a4:
c6:31:6a:74:87:c0:6f:9b:91:7c:68:4b:e5:f6:79:af:85:0a:
5a:c8:6e:e7:60:03:c7:49:9c:93:db:5e:f1:5b:a7:ec:0e:2b:
4c:d8:b9:66:d8:6f:5e:19:2e:f6:02:39:32:b1:28:74:89:9c:
10:56:41:8a:fc:e7:15:ca:34:20:c4:1d:21:ee:2c:d4:e1:89:
2a:5d:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:03 2026 by rpki-client