
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xexJ54D7PVakqSakadsKOFEDGZY.roa
File: xexJ54D7PVakqSakadsKOFEDGZY.roa (raw, json)
Hash identifier: /nIOW+1FA0U/q0+5iOVhj8lS9ap3nts8Bkqhk2lw6MU=
Subject key identifier: C5:EC:49:E7:80:FB:3D:56:A4:A9:26:A4:69:DB:0A:38:51:03:19:96
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 083E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xexJ54D7PVakqSakadsKOFEDGZY.roa
Signing time: Tue 31 Mar 2026 07:43:08 +0000
ROA not before: Tue 31 Mar 2026 07:43:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 125.49.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C5EC49E780FB3D56A4A926A469DB0A3851031996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:e9:73:03:0c:4d:32:7e:14:b4:b8:fa:1d:
9f:92:cf:30:7e:64:56:74:c5:e3:64:97:73:a9:a5:
03:63:93:ee:6e:bb:77:86:f8:e4:ed:f6:fb:df:00:
ca:b1:de:8f:77:8a:a6:47:ce:58:52:e3:a8:7d:5a:
74:44:d8:c1:b9:b5:42:91:78:5a:6a:1d:50:b0:97:
b8:b6:c7:9c:91:6f:65:bb:5b:67:3c:eb:35:06:86:
9c:fe:8d:f6:98:45:55:18:05:1a:01:7e:00:d1:f5:
d3:66:32:74:55:3b:c6:d7:1b:97:48:d1:e3:05:73:
6a:69:8c:0a:d0:3a:53:7a:cf:65:4f:34:05:34:f0:
40:1f:64:e2:d0:21:42:e5:da:6a:50:50:0e:a9:85:
7b:57:2a:c0:33:b3:f8:f7:3a:60:6c:73:b2:79:af:
c4:c0:6b:15:51:32:81:b6:6e:4f:0d:4c:40:c2:d4:
99:a7:11:3d:1c:11:6a:50:db:b3:a8:64:ee:df:ff:
22:f4:12:f9:af:ff:d6:59:69:d9:f3:ed:44:20:3e:
25:08:fd:01:49:db:90:4e:ec:10:ec:07:77:cd:2d:
a4:73:19:e7:ad:e7:32:0d:e1:2d:e5:df:f6:b5:25:
06:a3:9a:a6:23:f4:53:f4:30:db:4c:91:dc:78:29:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:49:E7:80:FB:3D:56:A4:A9:26:A4:69:DB:0A:38:51:03:19:96
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xexJ54D7PVakqSakadsKOFEDGZY.roa
sbgp-ipAddrBlock: critical
IPv4:
125.49.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:90:3e:85:9c:6b:57:b5:8b:87:12:32:93:6a:a6:bd:97:1c:
21:00:22:e2:e9:80:48:6f:30:27:07:0e:e8:8a:3a:39:e7:4a:
f5:95:eb:e7:e9:1e:96:09:4f:eb:94:01:c4:e7:09:9a:8d:5a:
3a:98:5e:3b:69:4a:e5:52:45:c2:24:c1:04:9e:ff:49:b2:f0:
95:c1:24:f7:96:49:49:d4:d7:ce:ff:56:61:8f:8c:d1:de:e6:
b4:e3:31:00:0a:23:fe:ce:9b:5a:ba:81:1f:42:9a:57:cc:a8:
f4:46:f4:6c:af:c7:06:14:0b:6a:57:31:07:07:70:da:0b:2c:
75:a5:10:ba:4a:2d:35:9f:dc:de:41:11:c3:02:84:db:e7:bb:
5c:53:62:23:e3:8e:b2:3d:31:46:85:e6:4a:c0:df:25:52:6b:
9c:bf:d8:bf:44:6a:e6:9e:3f:26:4a:35:da:c7:73:64:2c:76:
5d:e4:16:61:3d:9b:b1:76:a3:26:9c:1f:4f:fa:59:0c:54:c3:
58:ba:80:79:95:53:c0:9e:a7:b4:6f:4e:4d:4b:bb:47:54:3c:
dc:c0:9b:3c:a7:ff:98:e3:10:de:cf:90:fa:cc:17:f3:22:3b:
41:2e:4a:f8:0d:d3:8d:b9:53:fb:3a:35:96:01:ab:99:2b:7d:
7f:7c:4f:65
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1RUM0OUU3ODBGQjNE
NTZBNEE5MjZBNDY5REIwQTM4NTEwMzE5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+0+lzAwxNMn4UtLj6HZ+SzzB+ZFZ0xeNkl3OppQNjk+5uu3eG
+OTt9vvfAMqx3o93iqZHzlhS46h9WnRE2MG5tUKReFpqHVCwl7i2x5yRb2W7W2c8
6zUGhpz+jfaYRVUYBRoBfgDR9dNmMnRVO8bXG5dI0eMFc2ppjArQOlN6z2VPNAU0
8EAfZOLQIULl2mpQUA6phXtXKsAzs/j3OmBsc7J5r8TAaxVRMoG2bk8NTEDC1Jmn
ET0cEWpQ27OoZO7f/yL0Evmv/9ZZadnz7UQgPiUI/QFJ25BO7BDsB3fNLaRzGeet
5zIN4S3l3/a1JQajmqYj9FP0MNtMkdx4KVbjAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUxexJ54D7PVakqSakadsKOFEDGZYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3hleEo1NEQ3UFZha3FTYWthZHNLT0ZFREdaWS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB9MTANBgkqhkiG9w0BAQsFAAOCAQEA
CpA+hZxrV7WLhxIyk2qmvZccIQAi4umASG8wJwcO6Io6OedK9ZXr5+kelglP65QB
xOcJmo1aOpheO2lK5VJFwiTBBJ7/SbLwlcEk95ZJSdTXzv9WYY+M0d7mtOMxAAoj
/s6bWrqBH0KaV8yo9Eb0bK/HBhQLalcxBwdw2gssdaUQukotNZ/c3kERwwKE2+e7
XFNiI+OOsj0xRoXmSsDfJVJrnL/Yv0Rq5p4/Jko12sdzZCx2XeQWYT2bsXajJpwf
T/pZDFTDWLqAeZVTwJ6ntG9OTUu7R1Q83MCbPKf/mOMQ3s+Q+swX8yI7QS5K+A3T
jblT+zo1lgGrmSt9f3xPZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:36 2026 by rpki-client