
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oJ2bjZDSoxPXBGvsFKC3DwxDL1E.roa
File: oJ2bjZDSoxPXBGvsFKC3DwxDL1E.roa (raw, json)
Hash identifier: R3is6AQuvb/acjeJdUOCoL2YZptUgwhNRF3ystA0fYU=
Subject key identifier: A0:9D:9B:8D:90:D2:A3:13:D7:04:6B:EC:14:A0:B7:0F:0C:43:2F:51
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08A5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oJ2bjZDSoxPXBGvsFKC3DwxDL1E.roa
Signing time: Tue 31 Mar 2026 07:43:57 +0000
ROA not before: Tue 31 Mar 2026 07:43:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 61.204.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213 (0x8a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A09D9B8D90D2A313D7046BEC14A0B70F0C432F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:29:0b:99:20:0b:f1:43:e2:6f:24:f2:37:
57:24:4a:fe:df:5d:21:ca:db:32:a6:ec:66:81:19:
c7:68:f7:25:80:c0:24:8e:25:1e:88:2d:80:e5:5d:
59:60:35:58:7b:c4:15:17:86:53:6c:af:0c:f3:aa:
41:a6:fd:b5:60:5f:47:5a:1b:94:fb:42:b4:a2:bb:
52:f4:a8:81:1a:19:22:67:e2:48:b1:a0:aa:91:3a:
a6:a7:7a:76:60:29:5c:33:01:58:6a:56:88:f8:56:
49:d6:df:b2:59:27:ce:b8:07:bc:7e:2f:50:f1:29:
63:35:9c:68:d5:98:db:29:b2:94:d7:ef:8c:7b:99:
45:23:a1:c4:43:3d:c5:22:2a:16:4e:f0:a9:fc:34:
3f:22:99:09:64:3f:b9:61:d2:86:c8:c6:29:94:7f:
0b:e6:02:12:2a:c8:a5:20:20:7f:14:cf:58:87:fd:
89:2a:97:32:fb:46:73:50:53:72:51:49:e0:8b:28:
83:dd:e4:13:31:57:ea:1a:e4:13:c0:71:9f:60:6a:
fc:d5:19:7b:a4:68:87:60:b6:e7:bd:c2:5e:52:7b:
dd:45:eb:6d:76:72:ac:d8:f1:8c:7a:7f:0f:5f:b6:
99:2a:5d:7b:c2:99:3e:b9:71:a2:ee:cb:cc:95:c5:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:9B:8D:90:D2:A3:13:D7:04:6B:EC:14:A0:B7:0F:0C:43:2F:51
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oJ2bjZDSoxPXBGvsFKC3DwxDL1E.roa
sbgp-ipAddrBlock: critical
IPv4:
61.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2c:fd:5e:7a:5d:5e:d0:0b:85:4a:d2:5c:36:db:9c:d0:83:54:
ed:ea:be:ac:88:83:8a:90:ee:ee:fd:74:58:94:87:9e:d6:7b:
c0:11:b6:a0:63:ee:70:7d:31:65:40:c2:13:41:2a:89:8e:d2:
99:17:0a:ab:3d:d0:6b:36:32:81:b5:2f:df:00:6f:f1:65:45:
2f:6d:56:ef:d0:57:1a:4a:c9:fc:4f:0d:3c:50:e6:df:5c:3f:
d7:ac:c9:76:f9:94:f5:9a:58:b0:80:86:cc:4e:3c:6e:78:2e:
53:e0:50:bb:2a:6b:20:5d:0b:26:8f:65:26:f3:f1:e5:06:db:
c3:c1:a4:7f:ed:75:5b:40:d0:db:34:e4:01:a2:e2:b2:01:26:
bc:a2:bd:bd:e0:c8:00:86:98:b7:96:ed:03:df:19:45:a2:fa:
3f:8e:0f:da:31:99:b8:2d:51:c2:ad:92:01:ba:75:a2:19:0a:
81:dc:5b:09:70:68:f2:e3:7f:35:88:11:a1:23:ac:59:6d:6c:
33:12:77:c2:0b:da:39:b9:d9:a2:dc:e3:89:38:8f:75:df:70:
af:17:f8:62:cf:01:17:69:e0:95:fc:d2:6e:08:81:50:85:1d:
07:55:bd:fd:96:e4:12:29:d5:e6:e2:07:ba:d8:74:75:0b:16:
bf:be:b1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:46 2026 by rpki-client