
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZxNSrCqEjySZJhKF2qRLG5blxU.roa
File: nZxNSrCqEjySZJhKF2qRLG5blxU.roa (raw, json)
Hash identifier: QVhR7opTICCj/b3LMO9DT4Qnr/UA/kAjw96ZeNv95W4=
Subject key identifier: 9D:9C:4D:4A:B0:AA:12:3C:92:64:98:4A:17:6A:91:2C:6E:5B:97:15
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08CB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZxNSrCqEjySZJhKF2qRLG5blxU.roa
Signing time: Tue 31 Mar 2026 07:44:16 +0000
ROA not before: Tue 31 Mar 2026 07:44:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.13.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9D9C4D4AB0AA123C9264984A176A912C6E5B9715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:78:0c:c1:c8:df:b0:42:25:2c:46:86:21:
65:7d:c5:c3:15:38:ef:a7:15:02:5f:80:43:cd:d5:
69:99:f8:e4:3f:a2:18:9d:ec:be:21:b3:e0:7a:98:
81:0f:52:1d:1f:f7:21:18:05:85:b6:33:fe:0b:7a:
ae:86:38:b9:37:43:dc:3b:7c:d9:ae:72:b1:cc:9d:
8f:af:07:74:1f:64:7e:89:01:4e:02:ed:43:e3:3a:
ae:e4:ec:86:74:d8:33:c1:df:87:7a:81:5f:22:10:
17:6f:e7:14:69:fd:0c:32:37:aa:67:cb:36:8d:8c:
e7:10:e6:a9:a9:67:4a:d9:1e:e4:b4:a7:a5:30:3d:
d9:e5:b8:95:0a:d3:17:ba:49:0b:97:2c:1b:7c:8a:
9d:ea:7b:81:2f:c6:e7:fa:f5:0f:22:a6:3f:84:86:
4d:fb:f7:cb:dc:d0:a7:88:ed:4f:6b:1d:d5:6e:3b:
58:bb:de:5b:9f:3d:b0:be:c6:d9:a5:c2:42:4c:14:
e3:03:37:2e:b1:1b:e6:00:0a:f6:58:77:40:6c:a2:
1b:8f:aa:66:f5:c0:ee:40:5a:c8:63:76:00:a0:16:
d1:1f:f0:a8:eb:bf:99:09:59:6a:c4:b4:9e:45:96:
8b:4c:10:f8:43:91:0c:b1:f5:ce:12:a2:e2:31:26:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:4D:4A:B0:AA:12:3C:92:64:98:4A:17:6A:91:2C:6E:5B:97:15
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZxNSrCqEjySZJhKF2qRLG5blxU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.13.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:9c:f5:8a:41:a8:f9:d9:3d:04:ac:bf:5b:69:a3:5b:62:5f:
ee:03:0d:c6:cf:76:3f:a2:fa:7f:5f:39:00:13:a0:a5:68:4c:
cc:8d:74:45:15:f9:c6:70:b8:b8:bb:fc:e4:d4:f9:fb:23:ee:
09:36:93:97:88:9c:4f:8b:63:89:89:dd:91:eb:c8:38:52:bf:
f0:0f:e3:5b:02:7d:de:3e:ca:1e:82:9f:4f:32:57:b2:60:79:
b5:c9:93:de:95:df:cd:3e:11:ab:82:cd:97:ce:1f:59:d0:5e:
01:62:22:3d:ad:8f:3d:bb:fe:c5:3f:86:5c:53:d8:b2:83:ec:
6f:fa:13:a7:dd:c7:77:ce:8e:0a:48:d9:08:28:38:14:fe:59:
9d:d5:cc:35:ee:c5:10:8f:79:66:a2:62:b1:39:4f:4f:51:83:
34:03:72:e9:0a:d4:a1:59:ec:26:87:29:d7:93:95:83:3e:5e:
66:93:2b:6c:22:5a:53:97:6d:9a:4b:b3:1e:55:85:47:9d:cb:
bd:0b:5c:f2:b0:0c:74:3c:19:9f:43:ab:7c:7e:49:42:b2:0e:
b9:a4:8a:52:63:1a:81:cd:40:e8:a3:e9:f7:a1:76:9a:96:bf:
27:0f:21:87:f3:59:d9:4e:0f:03:f3:31:f7:c4:cb:a5:ac:2a:
40:21:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:53 2026 by rpki-client