
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbsm3uulXwPoLEE2nIFcy7qEylI.roa
File: xbsm3uulXwPoLEE2nIFcy7qEylI.roa (raw, json)
Hash identifier: JNgNCPf1XPo2iVeStZlHiKSln2zEBc9PfhrQppjywss=
Subject key identifier: C5:BB:26:DE:EB:A5:5F:03:E8:2C:41:36:9C:81:5C:CB:BA:84:CA:52
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0829
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbsm3uulXwPoLEE2nIFcy7qEylI.roa
Signing time: Tue 31 Mar 2026 07:42:55 +0000
ROA not before: Tue 31 Mar 2026 07:42:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 111.96.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C5BB26DEEBA55F03E82C41369C815CCBBA84CA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:7d:6e:b2:e4:af:b5:0a:2d:4a:b9:ba:1b:
22:7e:d0:9e:4a:92:35:85:d4:6e:fd:5e:59:e8:3c:
27:60:fc:e7:5a:a6:0f:18:7d:86:17:9b:d4:57:77:
89:4d:35:0d:08:ee:9e:84:c5:33:fe:fa:d5:52:3e:
8d:82:29:f4:3b:28:2c:94:c1:54:1e:ab:7e:cc:d3:
4b:cc:79:c5:7a:49:be:b0:11:ab:0a:d7:1b:d3:7d:
25:95:35:94:00:07:9a:c1:07:f4:f2:02:9c:a9:e0:
42:ca:9c:f6:45:4d:9f:d5:7a:d3:4f:59:da:38:81:
a9:7b:35:c6:44:7a:e2:e6:b1:92:d6:77:16:96:fd:
54:89:5a:d3:10:f3:2b:ea:1b:be:f7:23:a6:ce:76:
0d:de:f1:37:ba:e7:3d:1c:03:89:cc:7a:9f:c5:d9:
ee:6f:93:69:77:96:06:e6:09:9b:18:bd:99:bd:fb:
4c:9d:4a:5a:21:ca:0b:e7:e1:38:fc:ce:88:e2:f8:
28:d7:8d:1e:3d:fb:33:3c:be:57:b5:04:93:4d:ce:
b8:f6:30:74:97:86:9d:5c:f6:fd:12:f5:bb:92:31:
ec:d7:1f:ff:11:37:5a:68:0b:11:2f:2e:20:68:7d:
c1:2e:23:5a:d4:81:90:1d:6c:21:3c:6a:62:a7:f6:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:26:DE:EB:A5:5F:03:E8:2C:41:36:9C:81:5C:CB:BA:84:CA:52
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbsm3uulXwPoLEE2nIFcy7qEylI.roa
sbgp-ipAddrBlock: critical
IPv4:
111.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:d2:ed:cf:e5:0f:3b:06:95:9a:9b:b4:50:6f:11:2f:18:c3:
dc:66:f2:ed:c5:06:76:80:13:bc:b5:c0:a0:f0:92:5c:7d:59:
b9:85:e5:7e:2c:e9:25:81:b7:37:f6:ea:b9:05:4f:4a:9b:68:
09:b3:57:a6:63:6f:2b:e6:21:ae:b9:59:0e:3d:2e:d7:27:c6:
ed:38:3c:1a:a2:87:f4:b6:2e:f4:b8:63:cf:ba:3a:03:5f:f9:
49:97:99:f1:36:72:72:50:a6:0e:79:c7:39:1e:ab:ff:47:dc:
e9:30:c7:00:d4:db:70:31:f9:41:3d:68:a9:a5:7d:5f:20:bb:
93:a0:13:ea:82:3e:fb:22:cb:64:a3:40:85:5c:d9:4e:2b:91:
d4:28:67:54:bc:13:ed:a5:51:99:0e:12:7b:ec:0e:37:70:88:
38:c8:2c:7b:91:f1:74:de:fd:f6:f8:71:d4:b5:cd:0f:b4:c5:
35:b4:2a:d5:52:2e:6c:34:fd:5a:28:6f:a0:26:e9:39:ec:cc:
02:eb:a8:e2:3d:30:ed:48:b6:56:8e:d4:8a:38:f2:63:e0:0c:
0c:2a:7e:0b:39:7b:8c:53:ca:72:0c:34:fa:33:b9:96:33:51:
79:ee:9a:22:3d:f8:9e:9e:4a:d8:90:12:97:40:34:f2:6d:46:
ba:43:ea:8a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1QkIyNkRFRUJBNTVG
MDNFODJDNDEzNjlDODE1Q0NCQkE4NENBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9x31usuSvtQotSrm6GyJ+0J5KkjWF1G79XlnoPCdg/Odapg8Y
fYYXm9RXd4lNNQ0I7p6ExTP++tVSPo2CKfQ7KCyUwVQeq37M00vMecV6Sb6wEasK
1xvTfSWVNZQAB5rBB/TyApyp4ELKnPZFTZ/VetNPWdo4gal7NcZEeuLmsZLWdxaW
/VSJWtMQ8yvqG773I6bOdg3e8Te65z0cA4nMep/F2e5vk2l3lgbmCZsYvZm9+0yd
Slohygvn4Tj8zoji+CjXjR49+zM8vle1BJNNzrj2MHSXhp1c9v0S9buSMezXH/8R
N1poCxEvLiBofcEuI1rUgZAdbCE8amKn9lTjAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUxbsm3uulXwPoLEE2nIFcy7qEylIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3hic20zdXVsWHdQb0xFRTJuSUZjeTdxRXlsSS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBvYDANBgkqhkiG9w0BAQsFAAOCAQEA
UNLtz+UPOwaVmpu0UG8RLxjD3Gby7cUGdoATvLXAoPCSXH1ZuYXlfizpJYG3N/bq
uQVPSptoCbNXpmNvK+YhrrlZDj0u1yfG7Tg8GqKH9LYu9Lhjz7o6A1/5SZeZ8TZy
clCmDnnHOR6r/0fc6TDHANTbcDH5QT1oqaV9XyC7k6AT6oI++yLLZKNAhVzZTiuR
1ChnVLwT7aVRmQ4Se+wON3CIOMgse5HxdN799vhx1LXND7TFNbQq1VIubDT9Wihv
oCbpOezMAuuo4j0w7Ui2Vo7UijjyY+AMDCp+Czl7jFPKcgw0+jO5ljNRee6aIj34
np5K2JASl0A08m1GukPqig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:24 2026 by rpki-client