
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0gvRGEn7Ozwlp2zx_5nUwH5UsI.roa
File: v0gvRGEn7Ozwlp2zx_5nUwH5UsI.roa (raw, json)
Hash identifier: uP9PWcfB8CYrJRN3JjLNSIYsulhyXLbxRToI3eHYp1M=
Subject key identifier: BF:48:2F:44:61:27:EC:EC:F0:96:9D:B3:C7:FE:67:53:01:F9:52:C2
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08AD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0gvRGEn7Ozwlp2zx_5nUwH5UsI.roa
Signing time: Tue 31 Mar 2026 07:44:01 +0000
ROA not before: Tue 31 Mar 2026 07:44:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 211.1.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BF482F446127ECECF0969DB3C7FE675301F952C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:82:c5:32:c4:59:07:72:bd:f1:7a:31:cc:
97:47:7b:f7:dd:16:b4:56:d7:a2:89:68:2e:ef:50:
e8:a8:9a:66:fa:b6:77:67:e8:de:51:4b:20:94:14:
21:cd:19:78:56:15:46:dc:79:38:60:4a:02:59:a3:
c6:a3:53:22:57:f1:23:d4:48:f5:22:a3:67:2e:a7:
3c:12:01:81:5e:49:3c:bf:c3:ad:6c:af:8a:a9:ad:
b7:28:db:02:f1:cd:72:40:e7:80:2a:36:6f:a4:cd:
01:ac:21:94:ed:c7:1a:56:ae:15:51:a4:29:43:bb:
69:ff:cf:ca:f4:40:2c:2b:e1:d5:50:1c:37:30:95:
c9:13:50:2d:cb:f9:48:69:c8:45:5c:60:88:b1:77:
40:a1:c0:b0:c4:e8:a5:d9:f2:f4:a3:71:80:f3:ea:
bc:80:c5:66:f3:89:c2:4a:60:ef:95:64:41:c2:f2:
58:53:ab:28:25:b7:e3:0c:36:43:5c:3d:ef:63:c0:
2f:b4:6c:cb:98:c9:19:4e:4f:84:bd:f5:44:fb:70:
e7:f1:47:be:f6:28:7c:c5:24:70:2a:d0:c2:83:94:
1e:87:0f:71:bf:81:1e:62:4b:6d:3f:0f:8d:a9:ef:
f4:b1:9e:6c:fa:cd:66:93:ca:f7:59:15:b3:c8:32:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:2F:44:61:27:EC:EC:F0:96:9D:B3:C7:FE:67:53:01:F9:52:C2
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0gvRGEn7Ozwlp2zx_5nUwH5UsI.roa
sbgp-ipAddrBlock: critical
IPv4:
211.1.70.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f8:8d:63:b2:ea:26:73:dc:c5:f7:31:be:4e:ad:05:56:80:
60:53:ce:65:63:63:74:d9:47:23:c1:f2:c3:37:f8:87:4c:1a:
c5:9a:0f:16:0e:e6:ce:e2:1e:fb:75:2a:ed:b3:4b:df:53:94:
3f:28:76:cd:fd:70:f7:4c:93:4b:24:89:2a:34:ff:14:53:94:
c8:b6:2b:66:0f:b8:88:76:d8:6c:75:ea:3a:10:80:b0:98:31:
98:21:01:be:3b:63:ae:6e:13:85:65:87:d6:db:7e:05:cd:ee:
3f:89:cc:85:e5:da:24:80:18:4c:25:17:4e:96:11:83:af:8e:
84:f8:fc:04:1e:c5:ff:2c:ef:44:16:fe:83:85:5e:53:26:5f:
fd:c8:c5:c8:5f:0f:06:98:1a:cc:bb:df:60:06:42:f3:10:42:
dc:4b:fd:a0:a8:97:d3:80:3a:06:ce:dc:28:40:ab:0e:b3:db:
32:e2:95:42:4f:d3:36:52:a6:28:d1:79:ea:41:a5:b1:72:a3:
b5:ae:da:70:29:be:39:62:5a:c0:44:6e:45:7d:e7:8c:59:a3:
b3:dd:a3:62:6f:86:f8:b9:17:2d:7d:6d:d1:25:54:ea:41:c6:
ad:a9:62:79:7f:25:3d:74:99:58:0c:17:54:ad:ff:6c:5b:11:
94:7e:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:02:10 2026 by rpki-client