
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xA0zAlejJ_-ClM5KJuMVnQb-m_k.roa
File: xA0zAlejJ_-ClM5KJuMVnQb-m_k.roa (raw, json)
Hash identifier: gdqk3auUz5SoQSMSlOb/2lRhoKKLg0sCJxUQWI0Nrio=
Subject key identifier: C4:0D:33:02:57:A3:27:FF:82:94:CE:4A:26:E3:15:9D:06:FE:9B:F9
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 07D5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xA0zAlejJ_-ClM5KJuMVnQb-m_k.roa
Signing time: Tue 31 Mar 2026 07:42:14 +0000
ROA not before: Tue 31 Mar 2026 07:42:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 111.87.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C40D330257A327FF8294CE4A26E3159D06FE9BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:17:82:67:4b:ab:73:12:57:df:8d:39:de:
11:40:4d:f0:4b:ca:57:58:e8:e8:a4:f1:a3:4d:a9:
92:bb:0b:5a:9c:be:04:b4:56:dd:72:fe:86:63:ea:
17:24:e3:b3:3f:b3:66:73:92:07:39:e8:80:97:6f:
ae:5a:d1:62:6c:30:cb:dc:81:58:07:41:46:8b:b9:
87:df:bb:41:ca:c4:f5:f4:53:bd:a3:c3:17:a6:d3:
bd:4e:eb:39:4c:e5:e6:1c:0d:69:d3:00:26:31:c3:
5f:d5:6e:3e:af:94:6b:e0:ff:4c:9e:1b:2b:de:7c:
49:48:d5:87:27:66:6a:65:e9:1d:c0:5d:c6:46:f3:
e6:f3:0c:de:b7:af:d9:c0:1d:a1:6e:09:5b:ac:19:
58:41:08:ed:75:0f:40:6e:6e:62:ff:43:fd:18:c5:
fe:ee:3e:d7:24:3a:5d:68:1c:20:90:02:72:0f:3b:
53:1b:37:4b:c7:04:a1:69:4b:c6:76:dd:64:9c:77:
aa:cb:64:ad:44:0c:47:33:70:0f:4b:6c:a9:84:87:
23:e1:14:63:3d:70:91:05:c1:3e:9c:cc:61:c5:4b:
88:2c:f2:ba:14:13:d7:61:d8:e3:4f:d3:96:79:b0:
f3:62:0e:af:d6:d2:50:99:cd:64:12:bf:20:5d:93:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:33:02:57:A3:27:FF:82:94:CE:4A:26:E3:15:9D:06:FE:9B:F9
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xA0zAlejJ_-ClM5KJuMVnQb-m_k.roa
sbgp-ipAddrBlock: critical
IPv4:
111.87.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b6:08:d5:30:74:e8:6b:02:71:a3:c5:cf:7e:dd:e3:16:9b:de:
c4:a0:70:89:6c:af:14:97:0a:64:5f:50:23:db:aa:8f:a7:db:
b3:e6:83:88:5e:76:1b:b2:6e:3f:5d:1d:f9:4a:49:bb:a0:c6:
bf:0c:c5:2c:15:a2:19:4a:c7:0e:df:5f:15:b6:cf:2d:35:87:
b5:a0:bd:29:fe:9c:d1:39:5f:f7:7a:44:2d:65:7a:bc:ff:71:
ec:32:90:80:24:9a:bb:49:15:38:f2:74:03:ff:b2:b4:d5:3f:
78:f2:cd:20:f7:4b:1b:28:33:8c:c5:35:87:e9:38:d1:6e:88:
d3:65:c6:61:b8:22:e7:5b:fe:b1:a7:e2:92:e4:23:3b:e1:6e:
e9:0d:f6:ca:80:2c:da:c4:e9:13:93:3a:53:fa:2a:34:ff:c0:
d6:77:9a:4b:05:8d:48:ac:3b:fe:b6:1f:68:ca:5f:ef:aa:80:
66:72:0a:2f:b8:cc:b1:ca:2a:92:f6:e1:a0:09:e8:9d:c3:8c:
40:e9:ab:5e:d5:a2:fa:69:d7:60:05:58:37:ba:80:3a:25:f6:
73:0f:bf:49:03:f6:f3:69:40:b2:1c:9a:83:24:10:bf:40:17:
fc:f4:a6:c1:0f:01:f9:96:a8:e2:28:21:17:01:98:57:73:85:
5a:f6:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:15 2026 by rpki-client