
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wGE2qZVWuULMDIqcpt2XHEZwrBY.roa
File: wGE2qZVWuULMDIqcpt2XHEZwrBY.roa (raw, json)
Hash identifier: +IpQAgwps6OzKMapLP+TkhachDxVnao7Zd6P1W1fQ/4=
Subject key identifier: C0:61:36:A9:95:56:B9:42:CC:0C:8A:9C:A6:DD:97:1C:46:70:AC:16
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0756
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wGE2qZVWuULMDIqcpt2XHEZwrBY.roa
Signing time: Sun 01 Feb 2026 01:29:07 +0000
ROA not before: Sun 01 Feb 2026 01:29:07 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 2516
IP address blocks: 14.10.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Feb 1 01:29:07 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=C06136A99556B942CC0C8A9CA6DD971C4670AC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:2d:f9:5c:a2:2c:36:04:e0:a2:be:53:75:
85:8c:4d:f3:4a:c1:f2:88:e7:cd:79:6c:f5:8c:83:
93:02:c6:43:7a:f0:19:53:71:fa:63:f0:af:43:c5:
27:bd:5a:9c:49:50:b2:b3:28:dc:b1:84:46:35:4b:
29:07:80:9a:ba:96:a2:57:bf:66:55:da:af:7b:74:
95:af:93:ed:1d:ed:38:57:88:3b:e5:a5:32:50:ef:
b1:1e:a2:98:07:7c:d7:db:ff:e7:a3:cd:32:c6:84:
92:53:ab:1b:1b:59:66:c0:72:ec:91:f0:31:42:89:
ac:4f:1c:0d:df:c5:75:1f:52:31:d3:21:a4:01:b6:
00:be:5a:ff:15:0a:04:0e:a0:ff:30:a1:ee:c0:fd:
0d:80:b6:61:88:98:11:29:f4:84:fe:36:e3:bf:f6:
33:ca:e4:e9:ad:25:c0:60:95:27:10:96:da:4c:c3:
01:72:ff:ee:e6:5e:2a:fb:b3:dc:91:78:35:3e:1a:
61:84:c6:5d:b8:58:50:7f:84:8b:2e:64:6c:18:70:
e5:9e:d5:b6:51:f9:ee:11:5e:2c:de:d8:65:9f:7e:
23:d6:37:fe:0f:b1:ec:b1:6a:3d:4a:76:04:27:14:
dd:3a:42:6c:95:61:a9:ac:62:e5:8f:25:f9:70:01:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:61:36:A9:95:56:B9:42:CC:0C:8A:9C:A6:DD:97:1C:46:70:AC:16
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wGE2qZVWuULMDIqcpt2XHEZwrBY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.10.0.0/15
Signature Algorithm: sha256WithRSAEncryption
86:88:f2:a4:47:94:69:47:cf:19:ba:d8:b7:1a:e6:36:31:d7:
c5:e0:3f:b9:5e:0c:b5:23:80:b8:52:db:89:d6:b8:a2:6d:7b:
fc:19:4f:41:61:bc:51:60:d9:42:0e:8d:37:5a:fe:81:f7:e7:
d9:bc:76:52:03:dc:71:99:a1:fe:df:41:d9:3c:6d:51:54:6f:
27:3b:63:fa:d9:0e:97:78:ff:00:4b:d1:c1:a4:74:24:62:ac:
35:df:f2:6e:b8:98:c7:37:c2:38:d0:e1:8c:72:56:3a:b8:4b:
37:40:d9:66:4a:7f:5d:59:bd:82:71:9f:68:d1:00:66:01:a9:
74:9a:66:1c:79:cc:4c:3a:73:f1:6c:1e:9d:a3:c7:1a:e8:23:
b9:ae:5e:8a:31:ad:d9:20:ca:6b:8b:6f:15:98:f4:fe:47:16:
a9:bb:6e:8b:25:47:50:7d:43:41:77:ee:47:9c:97:06:58:14:
80:82:ee:47:b9:fa:ce:ec:5c:86:0a:70:ed:ca:2c:8e:29:9b:
16:0e:07:fa:6b:cf:e4:af:66:dc:41:aa:e2:74:a7:ef:b9:78:
ab:fe:94:69:aa:26:09:fd:bf:ea:6c:01:90:f6:e9:d8:e0:22:
a6:b0:db:b7:a0:72:06:02:56:50:0f:3a:18:ab:0c:d7:54:df:
8b:83:1f:50
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAyMDEw
MTI5MDdaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMwNjEzNkE5OTU1NkI5
NDJDQzBDOEE5Q0E2REQ5NzFDNDY3MEFDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJmS35XKIsNgTgor5TdYWMTfNKwfKI5815bPWMg5MCxkN68BlT
cfpj8K9DxSe9WpxJULKzKNyxhEY1SykHgJq6lqJXv2ZV2q97dJWvk+0d7ThXiDvl
pTJQ77EeopgHfNfb/+ejzTLGhJJTqxsbWWbAcuyR8DFCiaxPHA3fxXUfUjHTIaQB
tgC+Wv8VCgQOoP8woe7A/Q2AtmGImBEp9IT+NuO/9jPK5OmtJcBglScQltpMwwFy
/+7mXir7s9yReDU+GmGExl24WFB/hIsuZGwYcOWe1bZR+e4RXize2GWffiPWN/4P
seyxaj1KdgQnFN06QmyVYamsYuWPJflwAZznAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUwGE2qZVWuULMDIqcpt2XHEZwrBYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3dHRTJxWlZXdVVMTURJcWNwdDJYSEVad3JCWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEOCjANBgkqhkiG9w0BAQsFAAOCAQEAhojypEeUaUfPGbrYtxrmNjHXxeA/
uV4MtSOAuFLbida4om17/BlPQWG8UWDZQg6NN1r+gffn2bx2UgPccZmh/t9B2Txt
UVRvJztj+tkOl3j/AEvRwaR0JGKsNd/ybriYxzfCONDhjHJWOrhLN0DZZkp/XVm9
gnGfaNEAZgGpdJpmHHnMTDpz8WwenaPHGugjua5eijGt2SDKa4tvFZj0/kcWqbtu
iyVHUH1DQXfuR5yXBlgUgILuR7n6zuxchgpw7cosjimbFg4H+mvP5K9m3EGq4nSn
77l4q/6UaaomCf2/6mwBkPbp2OAiprDbt6ByBgJWUA86GKsM11Tfi4MfUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:04:37 2026 by rpki-client