
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa
File: ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa (raw, json)
Hash identifier: 96PxwPRkJoikXNQouiHaT/EQ7FsS4J8KWLtGx/YEqeE=
Subject key identifier: BA:5E:D3:2D:1B:34:68:B3:51:A8:60:6E:29:B3:4D:12:F8:63:36:36
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0863
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa
Signing time: Tue 31 Mar 2026 07:43:26 +0000
ROA not before: Tue 31 Mar 2026 07:43:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.1.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BA5ED32D1B3468B351A8606E29B34D12F8633636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:9b:3b:8f:67:d9:6e:81:f1:b3:41:0e:49:
8a:95:18:50:89:4d:c6:8c:06:71:f4:b7:d3:7c:dd:
f4:f6:73:88:08:97:d9:12:cb:76:72:46:75:37:bd:
7d:b6:5b:02:f4:06:ee:21:ba:59:17:4f:f8:56:12:
1e:50:5b:53:c7:c5:08:79:d7:71:c9:00:d3:50:0f:
9e:d4:4f:21:c5:76:7a:34:59:06:76:61:73:b0:28:
ff:39:db:0c:c3:b0:c1:c6:ea:20:56:c1:6a:35:51:
87:2c:ed:7b:30:02:ae:ba:ff:83:c3:4e:55:a9:85:
3f:6a:02:9e:9e:6e:e4:d4:2d:82:7f:6c:87:5c:98:
cb:32:09:e1:d4:83:18:91:a3:3c:bf:16:cf:20:fb:
19:8e:c6:4d:b7:f4:d0:aa:e2:b7:ed:b4:5c:75:6c:
6d:0e:09:43:05:61:7f:2d:68:69:d5:70:e8:f7:6f:
14:20:06:6b:a9:ad:e7:e5:4f:2b:ec:90:14:33:5f:
1c:5b:0d:7e:c8:9c:a8:25:6e:e0:23:40:2b:30:67:
e2:a6:f2:62:10:96:d5:8b:27:8a:5c:10:7a:55:61:
42:ea:eb:2a:f9:d2:ac:07:c4:19:a9:d9:2b:55:09:
95:10:68:2e:60:7f:ec:ea:11:7d:f2:31:48:8a:c3:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:D3:2D:1B:34:68:B3:51:A8:60:6E:29:B3:4D:12:F8:63:36:36
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.1.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cd:6f:3c:68:7e:1d:33:a9:f8:61:36:4a:07:9f:39:57:df:
3c:49:3f:9d:32:e3:7d:50:2d:ea:49:72:f4:f7:a7:f7:7b:4f:
cf:cf:f5:35:89:ec:2b:d8:ea:63:a1:dc:67:9c:27:ad:69:d4:
44:d0:72:8f:fb:02:17:3a:f7:de:c7:8f:d8:f7:99:52:61:d3:
46:83:53:8d:fb:d6:4c:56:a4:78:2d:1e:b3:1d:a0:69:84:61:
78:f0:82:d6:51:cf:f9:f7:0c:ac:ff:59:1a:18:c2:a3:ad:fc:
a4:30:f9:da:90:b5:d8:40:a2:ce:03:13:00:58:50:1c:dc:77:
80:1e:5d:de:af:bf:b2:4e:d5:28:e2:c6:dc:7c:04:45:45:c0:
e5:ed:07:47:29:37:a9:e6:d1:7c:8b:26:69:67:4e:39:97:5b:
a9:72:36:66:d8:62:77:5f:b8:06:4c:0b:b6:13:4b:c0:e3:bd:
ff:78:a0:3c:14:ea:73:59:ab:28:a8:f3:20:15:6d:51:70:ad:
cf:e5:80:09:de:e5:80:05:37:3d:09:f9:0a:af:cc:bb:9d:57:
3f:71:f9:05:d3:7a:18:fa:52:64:14:67:79:dd:0e:06:af:ce:
93:87:8b:58:fd:81:33:80:fc:36:ae:9c:06:a4:a6:f4:29:71:
34:11:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:21 2026 by rpki-client