
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rk6oiwKtZNnUVnscDSBXh6cTvEQ.roa
File: rk6oiwKtZNnUVnscDSBXh6cTvEQ.roa (raw, json)
Hash identifier: 6MrBFf04Dm3j5ftqP9PW4aRqf/Rn2jSH21P+gqDSFwU=
Subject key identifier: AE:4E:A8:8B:02:AD:64:D9:D4:56:7B:1C:0D:20:57:87:A7:13:BC:44
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 085F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rk6oiwKtZNnUVnscDSBXh6cTvEQ.roa
Signing time: Tue 31 Mar 2026 07:43:25 +0000
ROA not before: Tue 31 Mar 2026 07:43:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 125.55.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE4EA88B02AD64D9D4567B1C0D205787A713BC44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:86:3e:43:8d:5f:40:b0:d5:cb:41:3e:bb:
94:3a:ec:1b:f7:1b:d2:49:a6:db:c7:a8:0e:2c:26:
73:2b:43:4c:11:ac:0c:15:10:3c:af:b4:ba:ec:32:
5b:3b:4f:51:ba:3e:01:0d:60:3b:6c:ed:95:84:ce:
68:2c:cf:e4:3a:e2:01:d9:76:f8:4e:a9:81:f8:8a:
ae:e9:28:35:75:8a:2f:8f:28:85:86:bd:c9:e4:ec:
d6:71:49:7f:bb:92:3a:16:7f:66:78:16:5c:d6:d1:
5c:22:52:c8:c1:05:82:ea:3a:ff:81:a0:4d:2e:c5:
c4:3e:4a:59:41:de:ec:36:66:05:ce:64:c6:44:22:
dc:9f:64:6c:cf:cb:41:ba:1e:56:a2:c6:7b:e5:f0:
be:e6:97:3c:12:d8:e5:08:f0:9f:5d:09:73:25:e6:
2e:7e:4b:36:6b:ca:20:3f:1c:92:3c:1b:4e:be:5f:
51:bb:ef:78:1d:4e:4f:8c:90:11:11:5d:c9:1f:6a:
07:4c:c9:23:f7:46:82:c5:de:09:15:c2:cd:56:39:
d1:58:09:19:96:1d:ed:0e:4a:36:bb:43:85:a8:c6:
e0:ef:01:de:a2:0f:50:ca:61:8e:63:df:06:59:04:
3e:d0:1e:00:70:0c:5c:46:44:07:6c:67:cb:3e:dc:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:A8:8B:02:AD:64:D9:D4:56:7B:1C:0D:20:57:87:A7:13:BC:44
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rk6oiwKtZNnUVnscDSBXh6cTvEQ.roa
sbgp-ipAddrBlock: critical
IPv4:
125.55.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:36:88:e0:4b:75:98:b7:62:61:0a:20:bc:ba:c8:04:b7:a2:
6d:b9:69:f3:a2:f3:17:31:32:7f:58:9f:cc:33:63:5d:54:75:
6c:54:4f:a4:fc:ee:b3:d1:13:08:d3:49:2d:84:d4:85:bf:e0:
20:57:77:31:22:e3:b8:1b:c5:8c:f3:52:6a:7c:54:be:33:f1:
f6:5b:fe:e2:61:73:4c:bd:69:c1:37:47:00:31:2b:18:50:3c:
55:c8:1d:34:f8:18:bb:70:b0:fa:4f:f1:73:26:c4:48:1b:f8:
87:bb:b2:d4:01:8e:89:48:b7:de:de:5b:c3:0b:63:0a:c0:e0:
74:76:a5:5c:29:50:8c:84:4a:8c:cf:86:68:8f:4c:01:99:83:
2c:37:ae:21:05:46:ff:f2:e0:50:14:fc:7f:d7:1e:dd:af:9e:
da:10:14:6e:a6:28:04:ed:6e:50:c6:a0:b4:bc:8c:83:be:af:
c4:29:e7:99:79:40:3c:4e:ef:8b:49:de:17:70:bf:b8:52:78:
c9:c4:9d:49:84:77:46:13:f1:34:80:83:4d:42:04:89:59:88:
2a:da:3c:21:63:62:6a:7a:a5:0e:5c:05:88:9b:fd:21:50:a0:
76:f7:32:23:a0:81:68:ea:85:5b:58:d9:38:0a:67:04:1f:67:
bc:d4:e9:5b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFNEVBODhCMDJBRDY0
RDlENDU2N0IxQzBEMjA1Nzg3QTcxM0JDNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEeoY+Q41fQLDVy0E+u5Q67Bv3G9JJptvHqA4sJnMrQ0wRrAwV
EDyvtLrsMls7T1G6PgENYDts7ZWEzmgsz+Q64gHZdvhOqYH4iq7pKDV1ii+PKIWG
vcnk7NZxSX+7kjoWf2Z4FlzW0VwiUsjBBYLqOv+BoE0uxcQ+SllB3uw2ZgXOZMZE
ItyfZGzPy0G6Hlaixnvl8L7mlzwS2OUI8J9dCXMl5i5+SzZryiA/HJI8G06+X1G7
73gdTk+MkBERXckfagdMySP3RoLF3gkVws1WOdFYCRmWHe0OSja7Q4WoxuDvAd6i
D1DKYY5j3wZZBD7QHgBwDFxGRAdsZ8s+3IMXAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUrk6oiwKtZNnUVnscDSBXh6cTvEQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3JrNm9pd0t0Wk5uVVZuc2NEU0JYaDZjVHZFUS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB9NzANBgkqhkiG9w0BAQsFAAOCAQEA
tjaI4Et1mLdiYQogvLrIBLeibblp86LzFzEyf1ifzDNjXVR1bFRPpPzus9ETCNNJ
LYTUhb/gIFd3MSLjuBvFjPNSanxUvjPx9lv+4mFzTL1pwTdHADErGFA8VcgdNPgY
u3Cw+k/xcybESBv4h7uy1AGOiUi33t5bwwtjCsDgdHalXClQjIRKjM+GaI9MAZmD
LDeuIQVG//LgUBT8f9ce3a+e2hAUbqYoBO1uUMagtLyMg76vxCnnmXlAPE7vi0ne
F3C/uFJ4ycSdSYR3RhPxNICDTUIEiVmIKto8IWNianqlDlwFiJv9IVCgdvcyI6CB
aOqFW1jZOApnBB9nvNTpWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:32 2026 by rpki-client