
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kWHJ-yP33oQbrpVHaUqoRKB-WxI.roa
File: kWHJ-yP33oQbrpVHaUqoRKB-WxI.roa (raw, json)
Hash identifier: eb5HGsWbvto3BRsAUZVPga5amjfuntQ+pp4BW9j7sl4=
Subject key identifier: 91:61:C9:FB:23:F7:DE:84:1B:AE:95:47:69:4A:A8:44:A0:7E:5B:12
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0914
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kWHJ-yP33oQbrpVHaUqoRKB-WxI.roa
Signing time: Tue 31 Mar 2026 07:44:46 +0000
ROA not before: Tue 31 Mar 2026 07:44:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.235.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9161C9FB23F7DE841BAE9547694AA844A07E5B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:8c:5f:f2:01:59:db:fd:63:e2:b6:d8:9e:
2e:ba:dd:c2:e0:71:0b:82:02:7f:f4:c7:af:31:7f:
59:f7:95:de:f4:a1:37:65:cf:fa:b6:56:82:cb:3b:
83:f5:81:8f:72:ef:94:c0:68:42:44:ab:64:f8:14:
f1:f3:c3:f1:d1:94:6a:d8:32:dd:c0:a4:88:b0:ae:
45:6a:d3:da:5c:87:db:2f:d8:b9:78:f5:9d:d5:30:
d6:a7:d8:0a:8b:a7:a1:5a:07:78:2e:fe:85:68:25:
8e:21:80:26:0f:73:1c:60:fe:bc:1b:a4:bb:d8:ca:
98:7c:4a:0c:ea:10:31:dd:30:f5:de:26:21:e4:f9:
7e:d1:97:f0:f0:cf:6c:db:6f:88:cf:71:2c:21:f1:
b4:91:6d:55:02:72:d8:c1:4c:27:f5:8e:52:1e:64:
fa:19:8b:89:bb:13:3c:79:9f:b2:3b:09:41:75:80:
82:d4:20:0e:bd:bb:c8:08:8e:6d:49:05:2b:27:d9:
23:4c:5b:99:8a:61:48:48:3d:ea:90:1a:18:d0:db:
87:6d:59:d7:6f:7c:78:f7:b3:10:c2:fe:fb:b3:e3:
2d:a7:0e:70:5a:78:85:2d:a7:36:6c:91:53:af:db:
e3:34:87:7b:35:36:84:37:39:60:41:42:43:7f:f9:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:C9:FB:23:F7:DE:84:1B:AE:95:47:69:4A:A8:44:A0:7E:5B:12
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kWHJ-yP33oQbrpVHaUqoRKB-WxI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.235.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:9d:f9:30:3d:ad:87:f7:28:7f:b8:1b:77:3e:16:66:07:36:
0e:8e:c8:12:e3:da:88:f3:48:b4:fa:90:7c:b5:28:6f:53:48:
ac:4e:94:df:f5:8f:31:72:fe:9d:fd:d4:d6:bb:2c:50:29:3f:
15:da:c8:c8:88:df:a9:ab:f4:26:5c:7c:54:b2:e6:59:d4:7a:
60:9e:0d:3b:db:94:9b:0e:38:b4:cb:1e:73:86:6f:6a:83:27:
a2:f2:a8:be:25:f7:9d:f8:a3:c5:9d:45:91:2b:bd:5b:23:80:
c9:d5:2a:a1:d9:e0:fe:6d:ff:49:ea:a5:b9:58:9c:aa:bc:b2:
5c:21:11:74:36:5d:85:41:f8:4d:f4:4f:0c:b1:81:13:55:c7:
b3:e5:23:39:12:91:67:ae:e4:47:66:ee:ab:a7:b5:a3:c8:20:
31:0d:57:a0:af:3e:76:81:01:25:f5:a0:9a:8e:50:ca:af:88:
77:95:6c:e1:7a:b0:97:fc:dd:22:0b:8c:d9:2e:ac:02:83:a9:
24:3d:9a:52:c5:27:e9:13:1e:9f:9b:2c:1b:2e:5f:41:24:89:
55:c5:32:d0:98:c1:db:44:a8:5f:d6:95:1e:c2:e5:67:1f:67:
ee:14:f8:cc:5d:97:a2:dc:7e:e6:e9:7e:47:d4:37:48:9c:86:
80:d4:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:42 2026 by rpki-client