
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa
File: xQHqda39Xzt5Y5732HVbAv4od48.roa (raw, json)
Hash identifier: JaCwsb+CnrrUNwpc5EI4Tlc2JMC+lgRoG4Zmz/DL+Gg=
Subject key identifier: C5:01:EA:75:AD:FD:5F:3B:79:63:9E:F7:D8:75:5B:02:FE:28:77:8F
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 082B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa
Signing time: Tue 31 Mar 2026 07:42:55 +0000
ROA not before: Tue 31 Mar 2026 07:42:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 106.128.0.0/11 maxlen: 11
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C501EA75ADFD5F3B79639EF7D8755B02FE28778F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:ae:fa:2f:81:11:7b:6a:ce:19:06:da:ec:
4c:ef:c1:f3:3c:3a:a6:62:ca:21:25:58:92:f4:34:
49:85:0b:b0:72:b0:7e:5d:75:c2:ef:1f:f8:b3:39:
ac:1d:42:c7:03:ec:bb:bd:23:99:2f:ae:0b:39:68:
16:eb:a1:7c:c2:32:be:73:7f:38:fc:10:79:b2:10:
03:f4:45:29:9c:9f:a6:be:0c:90:5e:3c:dc:f8:12:
1b:14:16:07:c6:30:d5:dc:48:24:2e:8e:54:d9:a0:
ff:bc:0b:b0:33:90:c1:27:3f:e2:fe:67:92:3c:a7:
c6:1a:d7:a4:a6:ac:c3:69:1a:a0:71:9b:36:7f:25:
0d:da:e7:c6:37:d0:35:bf:51:f9:0e:43:b4:3c:f9:
e3:43:56:e0:d7:d3:82:88:3a:d4:3d:ad:94:c0:1c:
1d:5d:89:0f:1c:f1:cd:f4:af:0a:28:11:69:55:b3:
1f:c6:16:48:e4:55:00:3f:f3:ae:e8:94:10:8f:97:
97:ce:52:bc:5a:3e:31:01:e0:b3:75:3c:a2:4f:d9:
83:9b:d6:a0:7d:6a:32:5e:cd:3d:8c:ec:52:9b:75:
f5:90:ee:aa:bc:77:4d:c1:21:6f:2b:78:b0:bd:e4:
c0:2d:14:25:c5:97:58:d2:e2:64:86:03:1a:0e:c2:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:EA:75:AD:FD:5F:3B:79:63:9E:F7:D8:75:5B:02:FE:28:77:8F
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa
sbgp-ipAddrBlock: critical
IPv4:
106.128.0.0/11
Signature Algorithm: sha256WithRSAEncryption
69:df:45:73:3e:d6:c7:15:6b:f7:3b:de:b9:2e:8c:4e:98:e6:
95:ba:6e:86:2b:7b:5b:26:cd:60:d1:2f:dd:9b:e5:25:17:33:
21:45:e6:9e:dd:21:64:40:b3:c5:47:00:59:f8:b1:29:54:ed:
03:80:75:d0:9c:80:35:2a:b3:72:5d:91:23:c6:3a:ed:27:25:
e0:2b:f6:6a:ac:d5:73:2d:3f:f0:56:68:32:3c:06:00:c7:5d:
ee:1b:20:3a:58:8d:3c:19:04:fe:84:cb:ef:40:5d:88:98:a2:
09:e7:97:62:43:68:f7:a8:b7:4c:bd:54:4d:b6:38:c3:ae:cd:
a1:54:68:49:3c:a4:3b:fa:47:80:c0:b6:88:09:10:90:db:dd:
f0:40:b5:f2:3a:e9:4d:6a:de:de:6f:26:7d:e5:39:f9:99:1b:
58:f7:52:67:9b:ab:0e:10:69:da:2f:d8:31:9b:bf:c7:3c:7c:
d6:12:76:52:3d:e1:a9:ac:a5:5e:f5:fb:bf:49:05:d8:32:13:
54:d9:5b:37:d9:ec:38:f3:56:d6:7d:76:20:6b:6b:5c:d8:01:
3c:d4:00:a6:ee:5a:3c:e1:75:e7:55:ae:a5:5d:af:d9:c1:20:
30:61:97:f9:eb:78:d4:93:c1:18:61:5d:d7:2f:d6:1b:6e:b7:
40:56:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:10 2026 by rpki-client