
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa
File: o_VmvbtdeWnSFuqvdblMDoUbt9U.roa (raw, json)
Hash identifier: f2RrB6WeSFppW6i5+kQu8oPW7YILgexaduZk1KwQf8o=
Subject key identifier: A3:F5:66:BD:BB:5D:79:69:D2:16:EA:AF:75:B9:4C:0E:85:1B:B7:D5
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07DA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa
Signing time: Tue 31 Mar 2026 07:42:17 +0000
ROA not before: Tue 31 Mar 2026 07:42:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 61.200.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A3F566BDBB5D7969D216EAAF75B94C0E851BB7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:5d:2f:11:7a:1e:a2:72:c8:ec:9a:ee:0a:
ea:f9:a7:31:58:90:3d:50:80:5e:57:44:f1:de:1c:
09:86:2f:c5:87:ee:fc:c7:b2:96:53:f8:2f:2c:27:
7f:e3:97:3b:0d:e0:1c:4c:aa:27:56:e7:41:91:ea:
10:0c:3b:c5:fd:82:44:1d:63:e0:5d:c9:98:0f:aa:
e1:f4:cb:33:28:2e:62:25:dd:e1:e6:a3:7d:ed:63:
bb:b2:15:e1:e8:00:2a:9c:5e:4a:61:fc:67:9a:e9:
50:70:04:da:f5:83:a6:e2:8b:df:9a:64:fb:52:fe:
d5:a3:bf:99:80:13:7a:1f:ba:37:9f:a3:10:e7:fa:
3a:36:73:24:f2:31:71:e6:6c:fa:9e:e2:70:a0:30:
1c:35:04:bd:bd:b0:9a:75:8d:40:3e:18:c5:43:32:
76:80:7b:9d:88:90:e7:70:bc:34:a0:51:6f:67:19:
4b:89:9f:95:59:d5:df:ee:19:b6:bd:99:f3:5f:e7:
ad:bc:6f:63:db:cb:38:cd:15:c5:61:dc:cd:5d:98:
8e:07:4a:2d:a2:1b:18:4a:a1:85:88:26:a5:0e:05:
5d:83:38:49:97:6e:17:ed:ea:f0:61:90:e6:94:07:
f1:c2:13:fa:74:29:9e:ad:1f:ab:e0:8c:bb:d3:f3:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:66:BD:BB:5D:79:69:D2:16:EA:AF:75:B9:4C:0E:85:1B:B7:D5
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa
sbgp-ipAddrBlock: critical
IPv4:
61.200.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:8c:56:40:42:0b:c6:41:32:61:56:7e:2f:90:2b:6f:31:cb:
64:c8:a4:74:4f:7c:e8:d4:da:54:a3:8f:cb:41:6b:18:e4:b4:
f6:95:5c:7c:ad:58:04:2c:77:c3:41:26:f5:a7:76:db:73:17:
42:e0:12:bb:88:7f:98:a5:6c:be:62:6b:2b:20:92:27:4e:64:
0b:3c:32:ed:3d:03:c4:b7:c1:6a:cb:a0:dd:dc:2d:3a:09:eb:
e6:af:21:35:51:02:c0:70:50:0a:17:7a:2d:1d:c1:91:cb:3a:
a4:f6:af:51:5a:d9:eb:29:c5:0a:ca:aa:c3:5c:aa:94:cd:3e:
f0:53:b3:cb:89:69:32:c3:fe:4d:f8:2e:a5:26:7f:1f:53:43:
5e:93:41:7e:7a:6f:65:27:bc:99:97:1f:08:dd:ae:1a:2a:9e:
59:2c:99:a8:97:84:e1:22:d4:46:19:be:2c:a7:e8:a0:9a:ea:
31:6d:c5:18:4c:18:89:ac:e6:a0:1d:7a:44:42:15:61:37:af:
01:f3:cf:85:3f:ef:ed:95:f8:b9:b3:55:e1:05:1e:65:69:10:
5c:bc:16:67:17:d5:4c:26:f4:7a:67:8d:f6:a8:a5:32:e4:70:
29:14:1d:06:0f:62:2f:cc:a3:8d:fa:b5:7f:e7:d2:d8:0f:5b:
b9:9d:31:bb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzRjU2NkJEQkI1RDc5
NjlEMjE2RUFBRjc1Qjk0QzBFODUxQkI3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8QV0vEXoeonLI7JruCur5pzFYkD1QgF5XRPHeHAmGL8WH7vzH
spZT+C8sJ3/jlzsN4BxMqidW50GR6hAMO8X9gkQdY+BdyZgPquH0yzMoLmIl3eHm
o33tY7uyFeHoACqcXkph/Gea6VBwBNr1g6bii9+aZPtS/tWjv5mAE3ofujefoxDn
+jo2cyTyMXHmbPqe4nCgMBw1BL29sJp1jUA+GMVDMnaAe52IkOdwvDSgUW9nGUuJ
n5VZ1d/uGba9mfNf5628b2PbyzjNFcVh3M1dmI4HSi2iGxhKoYWIJqUOBV2DOEmX
bhft6vBhkOaUB/HCE/p0KZ6tH6vgjLvT83LDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUo/VmvbtdeWnSFuqvdblMDoUbt9UwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL29fVm12YnRkZVduU0Z1cXZkYmxNRG9VYnQ5VS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9yIAwDQYJKoZIhvcNAQELBQADggEB
AAmMVkBCC8ZBMmFWfi+QK28xy2TIpHRPfOjU2lSjj8tBaxjktPaVXHytWAQsd8NB
JvWndttzF0LgEruIf5ilbL5iaysgkidOZAs8Mu09A8S3wWrLoN3cLToJ6+avITVR
AsBwUAoXei0dwZHLOqT2r1Fa2espxQrKqsNcqpTNPvBTs8uJaTLD/k34LqUmfx9T
Q16TQX56b2UnvJmXHwjdrhoqnlksmaiXhOEi1EYZviyn6KCa6jFtxRhMGIms5qAd
ekRCFWE3rwHzz4U/7+2V+LmzVeEFHmVpEFy8FmcX1Uwm9HpnjfaopTLkcCkUHQYP
Yi/Mo436tX/n0tgPW7mdMbs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:49 2026 by rpki-client