
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tnLM1V9FhQDodASB7-QC0vRwpWk.roa
File: tnLM1V9FhQDodASB7-QC0vRwpWk.roa (raw, json)
Hash identifier: Yji7xu1nhzWU54NgIPL2XTRcolliSUcD7X5mVwF2B2I=
Subject key identifier: B6:72:CC:D5:5F:45:85:00:E8:74:04:81:EF:E4:02:D2:F4:70:A5:69
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0762
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tnLM1V9FhQDodASB7-QC0vRwpWk.roa
Signing time: Tue 31 Mar 2026 07:41:19 +0000
ROA not before: Tue 31 Mar 2026 07:41:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.4.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B672CCD55F458500E8740481EFE402D2F470A569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:9c:b4:a7:71:3e:16:0e:99:15:68:0d:56:
38:0a:ea:96:5b:0b:e7:03:a1:04:c4:a1:91:9c:68:
74:7a:f0:6d:7e:5d:b1:df:c3:f5:a1:56:fc:3c:f3:
90:93:ce:22:c0:27:f5:b9:0f:60:75:1b:69:f3:8e:
e4:42:aa:5b:08:f9:44:aa:e7:50:a1:f4:e8:43:47:
14:29:e1:5c:a2:9c:93:5a:bd:fc:b2:10:e5:cb:b5:
93:94:94:45:21:f2:65:39:de:49:bb:f9:30:dc:1b:
49:27:a8:d5:5e:1c:68:b5:0d:51:05:08:87:98:19:
50:3c:7d:6c:f1:f1:a0:8a:98:41:36:d4:2a:99:ee:
ec:a8:2d:7a:7b:48:5b:8b:31:c0:5e:5a:ef:ef:57:
38:1c:07:87:8c:f0:f7:cf:77:e1:ee:0c:58:03:c7:
60:f0:b2:09:ea:08:e5:9b:d2:df:1e:67:6a:3a:25:
6a:d1:93:f8:55:56:47:df:6c:2b:15:dd:92:a1:df:
ba:18:e6:84:3b:24:74:b3:62:f3:1f:2d:2e:9b:cd:
27:8c:cf:91:a1:76:35:48:24:67:d6:b0:de:c9:3e:
94:5b:66:47:5f:ca:de:7d:e6:d2:b8:42:f7:57:25:
b0:fc:93:1b:1a:40:1b:56:02:ce:90:d1:62:5f:03:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:CC:D5:5F:45:85:00:E8:74:04:81:EF:E4:02:D2:F4:70:A5:69
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tnLM1V9FhQDodASB7-QC0vRwpWk.roa
sbgp-ipAddrBlock: critical
IPv4:
211.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:0e:ca:02:f9:67:a4:d5:b4:78:a5:1d:00:43:a5:73:89:88:
a9:07:34:a8:76:44:87:22:a7:16:53:3f:88:2e:52:8c:e9:80:
a0:f4:76:cd:d8:19:81:18:bb:3c:ab:5e:77:32:97:5a:58:56:
8f:b5:19:97:93:e1:d7:3d:36:64:77:b3:64:f3:4e:11:27:d8:
49:3f:f1:4e:4c:85:b5:f5:70:37:16:7e:29:fd:82:95:e0:a4:
f8:7f:78:ef:a0:56:50:1a:60:9a:51:87:4b:2b:6d:c9:62:03:
00:ed:4f:2d:f1:5a:3c:6b:93:f0:24:3f:76:1c:c0:ce:d5:88:
aa:d2:f3:bd:68:d6:22:c0:61:c9:ed:a6:40:31:ed:69:94:bd:
05:49:68:ab:5f:b4:16:a9:44:93:35:6e:87:ca:f1:2a:5e:20:
40:08:73:f3:76:a1:98:bd:cd:28:e2:cc:89:12:1a:0e:24:98:
13:9a:04:eb:16:51:a3:fc:f1:1e:08:34:65:00:3f:5c:4f:73:
c5:a5:be:e4:56:a7:18:8b:a9:90:c6:a4:74:3b:ef:b7:92:19:
3d:32:4a:27:7a:8a:4d:76:0c:b1:78:c7:02:54:dd:7b:fe:b4:
c6:19:93:8f:1d:11:24:da:15:e4:19:02:45:5f:c2:c3:f5:80:
62:3e:8a:fa
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxMTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2NzJDQ0Q1NUY0NTg1
MDBFODc0MDQ4MUVGRTQwMkQyRjQ3MEE1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMBpy0p3E+Fg6ZFWgNVjgK6pZbC+cDoQTEoZGcaHR68G1+XbHf
w/WhVvw885CTziLAJ/W5D2B1G2nzjuRCqlsI+USq51Ch9OhDRxQp4VyinJNavfyy
EOXLtZOUlEUh8mU53km7+TDcG0knqNVeHGi1DVEFCIeYGVA8fWzx8aCKmEE21CqZ
7uyoLXp7SFuLMcBeWu/vVzgcB4eM8PfPd+HuDFgDx2DwsgnqCOWb0t8eZ2o6JWrR
k/hVVkffbCsV3ZKh37oY5oQ7JHSzYvMfLS6bzSeMz5GhdjVIJGfWsN7JPpRbZkdf
yt595tK4QvdXJbD8kxsaQBtWAs6Q0WJfA4yrAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUtnLM1V9FhQDodASB7+QC0vRwpWkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3RuTE0xVjlGaFFEb2RBU0I3LVFDMHZSd3BXay5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTBDANBgkqhkiG9w0BAQsFAAOCAQEA
Jw7KAvlnpNW0eKUdAEOlc4mIqQc0qHZEhyKnFlM/iC5SjOmAoPR2zdgZgRi7PKte
dzKXWlhWj7UZl5Ph1z02ZHezZPNOESfYST/xTkyFtfVwNxZ+Kf2CleCk+H9476BW
UBpgmlGHSyttyWIDAO1PLfFaPGuT8CQ/dhzAztWIqtLzvWjWIsBhye2mQDHtaZS9
BUloq1+0FqlEkzVuh8rxKl4gQAhz83ahmL3NKOLMiRIaDiSYE5oE6xZRo/zxHgg0
ZQA/XE9zxaW+5FanGIupkMakdDvvt5IZPTJKJ3qKTXYMsXjHAlTde/60xhmTjx0R
JNoV5BkCRV/Cw/WAYj6K+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:47 2026 by rpki-client