
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa
File: sCiSnCT0oNoVfrvO3KptnrNau0o.roa (raw, json)
Hash identifier: jSGv2/OZHLNRzzu7TEvsqWYrv0ph8yBRGSKDL94hv4k=
Subject key identifier: B0:28:92:9C:24:F4:A0:DA:15:7E:BB:CE:DC:AA:6D:9E:B3:5A:BB:4A
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 084D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa
Signing time: Tue 31 Mar 2026 07:43:15 +0000
ROA not before: Tue 31 Mar 2026 07:43:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 124.215.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B028929C24F4A0DA157EBBCEDCAA6D9EB35ABB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:d3:38:1a:b0:72:59:27:30:ff:64:4c:8a:
9c:79:9d:56:c4:b0:5b:5c:49:c5:58:28:f1:79:89:
90:aa:93:ce:2d:77:14:0e:a7:7d:2c:ad:5c:b3:d9:
87:67:f9:b5:f8:28:7e:0e:70:15:81:e9:6e:f9:41:
d5:49:ce:e9:76:fc:79:9e:3e:20:c5:f4:0f:c9:9e:
79:86:3a:7c:a8:f9:93:7f:11:95:63:38:0d:15:74:
1e:7c:55:57:1c:86:71:d5:0d:11:cd:53:d6:e4:42:
e0:f5:3e:fe:9c:75:67:74:48:30:75:71:94:58:db:
9b:b8:d8:88:48:c0:eb:1a:ad:4f:43:2a:60:92:85:
2b:c2:ad:1f:b7:9b:5c:e2:b2:64:69:c4:26:7a:79:
ae:45:02:57:91:20:74:3f:5e:00:1e:74:6e:cc:6a:
41:e6:02:19:5a:ce:88:06:d6:b3:e2:db:12:b7:c6:
6c:76:c0:65:18:3c:f1:8b:2d:4f:b7:39:41:8d:91:
f9:36:79:dd:a2:e0:f4:c2:55:6c:5a:20:62:5a:3f:
bf:24:37:a5:41:30:e0:1f:c1:a0:49:b4:74:ea:08:
85:ac:10:51:6a:a2:86:7c:c3:33:8d:48:1a:3e:1d:
90:6c:d7:32:07:37:ae:65:74:84:01:7c:e5:4f:40:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:92:9C:24:F4:A0:DA:15:7E:BB:CE:DC:AA:6D:9E:B3:5A:BB:4A
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa
sbgp-ipAddrBlock: critical
IPv4:
124.215.192.0/19
Signature Algorithm: sha256WithRSAEncryption
82:c0:60:5f:be:dd:0c:20:d1:bf:93:20:42:f8:f4:9f:98:55:
b5:08:a9:23:19:1c:7d:32:b9:44:53:43:4e:b7:7d:b1:ff:bf:
e8:7a:a0:1e:97:7e:78:46:bf:ff:a9:4c:4f:57:fe:a6:29:1f:
90:a6:40:a0:49:6e:67:f8:66:14:41:cc:6f:6b:77:5d:55:d7:
43:4b:31:f4:ce:34:c6:59:9f:a8:eb:ef:9f:e5:30:fb:1e:34:
36:48:3b:cf:96:44:c1:fe:ab:a1:1b:11:e3:77:6e:8a:4f:e3:
5d:59:4a:84:72:7c:75:bb:cd:e5:5d:4c:ff:34:cd:85:4a:a2:
84:9f:ad:25:ad:de:99:b4:b1:c8:89:ad:f9:a6:85:22:5e:55:
4c:a6:bc:2c:a4:bd:13:34:df:21:72:66:5e:ca:1b:da:df:e3:
06:04:dc:68:5c:9a:2c:71:6e:68:e5:e6:2d:87:c7:17:cd:64:
17:03:a3:6c:06:b1:0d:e3:d2:b3:32:3c:ad:ce:55:9b:f1:c9:
02:00:c6:1f:65:c0:a5:ce:3c:e5:22:b3:3e:fa:6e:a3:3c:47:
91:79:56:48:e6:05:f8:c3:50:62:c8:8d:98:57:2c:6b:de:ad:
dd:6d:d8:ae:c0:a4:4a:98:08:fd:b9:d7:6a:4a:83:d8:ce:a7:
82:f0:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:43 2026 by rpki-client