
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa
File: xduD7uFrpmlb78gMTP6DharQRHM.roa (raw, json)
Hash identifier: z/EltA7tUHixFT5fnJVaL/cgEsc/sk6rlAPxRmdVxMw=
Subject key identifier: C5:DB:83:EE:E1:6B:A6:69:5B:EF:C8:0C:4C:FE:83:85:AA:D0:44:73
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa
Signing time: Tue 31 Mar 2026 07:44:33 +0000
ROA not before: Tue 31 Mar 2026 07:44:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 202.164.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C5DB83EEE16BA6695BEFC80C4CFE8385AAD04473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:b0:b0:05:a0:ae:9b:4a:31:92:b7:09:0d:
a4:7b:6d:b7:8c:37:66:c4:02:02:79:d8:8c:8b:99:
56:e0:e3:ba:25:41:ca:8b:12:2a:16:68:05:25:41:
5e:52:6e:55:67:35:4a:3f:c9:0e:d8:2e:a8:84:77:
8c:b2:ef:06:75:07:27:8e:62:23:ce:05:6b:02:18:
83:d2:73:9d:80:f0:c7:cd:95:51:00:20:b5:8c:bd:
e3:f6:73:15:4d:26:1b:02:b8:31:4d:b3:96:94:52:
e0:10:e3:d6:06:63:a0:f5:c3:6a:bd:56:1d:ce:04:
34:a2:11:04:a9:96:e4:5e:49:75:93:8d:48:1b:f9:
e3:34:06:08:a3:3f:3b:26:bb:da:54:9e:7a:a9:6c:
dd:0e:7e:98:ed:d2:fd:cd:15:d6:26:70:14:97:e6:
84:9a:66:ce:cc:4f:fb:17:7f:87:54:83:0e:03:c7:
38:b2:06:50:bb:8f:46:1f:42:d8:85:ed:00:34:1d:
0e:c2:55:bd:6d:27:88:48:94:4e:72:06:17:12:72:
83:4d:4e:8f:6d:24:af:9b:bb:9a:ed:63:9e:ff:35:
0c:2a:02:5c:8c:09:71:7b:f2:ea:01:33:47:72:38:
b8:83:56:86:ed:5d:fe:94:14:bb:7c:0c:b1:66:10:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:83:EE:E1:6B:A6:69:5B:EF:C8:0C:4C:FE:83:85:AA:D0:44:73
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa
sbgp-ipAddrBlock: critical
IPv4:
202.164.64.0/19
Signature Algorithm: sha256WithRSAEncryption
54:5c:e2:b2:31:a9:0b:86:fa:59:93:ff:2c:c8:f5:33:55:2e:
f2:32:0f:25:bb:b9:f4:64:b7:20:79:33:8c:17:98:81:43:fd:
34:ae:85:d1:d6:20:09:14:8e:ea:8b:49:ad:a4:0e:92:83:8d:
57:ed:56:f4:c9:74:e7:0d:7c:0e:02:ea:c2:c7:5c:33:a4:f8:
56:48:9b:8a:21:26:1f:8c:ee:dc:49:6a:d9:f3:c6:40:b5:03:
41:4b:d9:dd:4d:63:ff:90:4c:47:e3:fe:52:77:47:7e:28:b1:
55:0e:82:91:c3:fc:7c:8e:7c:3e:1a:de:d1:3e:55:54:27:56:
9d:bb:02:2e:d7:ac:3e:68:94:ff:32:13:71:d8:32:93:f6:b9:
1f:a9:f6:6b:15:18:a7:62:15:19:04:7d:a5:5a:18:2c:bf:83:
e2:7a:4d:c0:83:a2:90:d2:de:80:a0:42:d1:88:9e:ae:bf:55:
08:c3:95:ab:1e:08:03:f0:4a:cd:06:15:cf:09:89:1d:87:c7:
2c:aa:e6:40:5f:35:31:76:55:a5:08:7b:8e:ab:bc:87:a3:1f:
03:75:80:8a:f2:17:48:54:4e:2a:58:e1:24:75:5a:6c:ce:3b:
91:5b:a7:50:38:b4:8c:17:23:57:71:3a:6a:e4:46:96:7b:8d:
f0:66:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:31 2026 by rpki-client