
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pKcyV7Ux5rWtm3RsGw4vGGL0JyE.roa
File: pKcyV7Ux5rWtm3RsGw4vGGL0JyE.roa (raw, json)
Hash identifier: lOUBQNUfyKiCxdxkOmIGfuSBwJSuIxLuvmqadFV2KuM=
Subject key identifier: A4:A7:32:57:B5:31:E6:B5:AD:9B:74:6C:1B:0E:2F:18:62:F4:27:21
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0832
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pKcyV7Ux5rWtm3RsGw4vGGL0JyE.roa
Signing time: Tue 31 Mar 2026 07:42:59 +0000
ROA not before: Tue 31 Mar 2026 07:42:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 59.133.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A4A73257B531E6B5AD9B746C1B0E2F1862F42721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:a4:0b:bd:9d:66:a2:33:04:a6:6b:e8:8d:
d6:bd:81:78:6c:39:dd:e3:31:bc:2b:83:64:e2:7c:
99:ea:3c:b1:9b:d5:bf:59:71:da:8a:e7:8b:93:23:
80:19:ea:5a:1f:78:f7:39:38:1b:35:be:ae:43:67:
1b:c6:74:72:b8:74:3e:30:14:84:96:60:2c:06:41:
1e:14:7d:ee:fc:6f:28:ff:18:73:ef:aa:72:1c:42:
17:62:b9:d1:bb:04:75:92:a9:e6:36:51:54:dd:77:
5f:0d:a0:0a:17:ed:30:25:cc:62:e4:71:cb:0c:ee:
ac:fc:dd:73:70:61:4f:03:18:0f:23:ce:91:88:ab:
ff:39:bb:da:f7:a5:05:05:19:79:63:f8:fb:26:cd:
58:15:da:b1:83:7f:f1:93:75:64:dd:aa:a6:09:7b:
be:3c:cb:12:b9:39:80:ee:a2:c8:5a:e3:51:1b:4a:
15:8f:29:d9:ca:7b:78:af:2f:c4:06:ed:c5:d5:b4:
79:b5:89:2a:c9:89:37:42:f4:34:17:99:95:9a:23:
df:21:73:16:28:42:28:8e:ae:9b:bf:da:c7:42:b7:
de:41:86:e1:32:bc:ca:a3:0c:33:58:4c:9f:83:24:
28:8e:11:0d:69:e6:37:c3:92:57:b1:3e:e3:77:6a:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:32:57:B5:31:E6:B5:AD:9B:74:6C:1B:0E:2F:18:62:F4:27:21
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pKcyV7Ux5rWtm3RsGw4vGGL0JyE.roa
sbgp-ipAddrBlock: critical
IPv4:
59.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:88:fd:22:87:a9:07:bf:66:fd:b9:23:bb:c7:8d:a8:e3:8a:
76:40:80:7b:9b:c1:ac:eb:0b:0e:dd:f2:eb:e1:b0:65:c8:09:
ce:b8:f5:41:55:73:8a:a2:b3:2d:83:d4:98:83:9f:16:b6:be:
38:3e:cd:68:dc:48:d9:71:48:5c:20:6d:c0:9c:da:db:63:a9:
a9:73:bb:c5:14:52:d2:a5:4c:28:9c:ac:a5:3b:69:6d:05:53:
af:17:00:47:cf:db:ba:00:ec:fc:0e:08:5b:3c:60:fa:6b:e9:
4a:88:cd:af:36:4a:b7:7e:3f:b4:43:0f:a8:b3:23:cf:aa:8d:
8f:39:a7:fd:e3:da:33:03:6d:a0:ce:71:e8:a7:0f:ab:57:f8:
5b:1e:0e:ae:c3:f4:17:1b:88:a3:5a:d7:86:f3:1b:a5:ea:6c:
d6:8e:d8:d8:a3:de:ae:b0:93:21:d2:c2:9d:68:db:da:0a:31:
86:c2:aa:2b:6a:bd:83:bd:35:61:46:cd:85:8b:b6:94:ea:ff:
ae:38:c4:b6:12:0a:13:ac:7d:ca:f1:cc:c7:50:0d:f4:b7:25:
b3:ff:ac:fd:4d:0a:bd:df:97:a4:8c:e9:36:13:be:f2:d0:e4:
21:2e:c8:d4:f7:0b:2e:a6:ca:46:67:04:7d:95:bc:92:1b:5b:
ad:7d:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:15 2026 by rpki-client