
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GSCPq9gyVEnpSIxtW5Wd2esOeDk.roa
File: GSCPq9gyVEnpSIxtW5Wd2esOeDk.roa (raw, json)
Hash identifier: lI6XrWGYS713IdmED3/B/G5LvoDLl3ESKjXeuSbNGiw=
Subject key identifier: 19:20:8F:AB:D8:32:54:49:E9:48:8C:6D:5B:95:9D:D9:EB:0E:78:39
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0819
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GSCPq9gyVEnpSIxtW5Wd2esOeDk.roa
Signing time: Tue 31 Mar 2026 07:42:48 +0000
ROA not before: Tue 31 Mar 2026 07:42:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 118.154.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:42:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=19208FABD8325449E9488C6D5B959DD9EB0E7839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:4d:4e:e2:ff:e1:e1:b6:6b:ef:9b:b5:93:
50:49:32:20:7c:f1:17:e1:d6:f6:67:9b:a0:52:a3:
8b:15:8d:77:57:d0:21:a8:55:f2:1c:d8:de:21:84:
ad:d9:e2:02:a8:98:87:f2:ff:a5:51:62:10:58:b5:
50:82:7b:4b:8a:bf:53:1d:a3:02:fa:4e:c8:df:19:
b4:7c:3c:3b:e4:5f:a1:ed:8e:b5:72:9b:cd:bf:06:
a1:ed:2f:fb:49:3e:3b:f5:c1:c8:0d:e3:15:a6:c8:
92:83:f5:74:0a:4d:37:af:52:97:e3:d8:0a:6b:59:
bf:f3:e3:c7:63:d9:c8:8e:ff:38:0e:6a:f3:57:74:
49:f2:5b:0d:a0:1b:e1:35:04:bb:d4:86:5e:2f:67:
a0:dc:1f:64:50:ea:ed:4b:d9:88:e7:78:7c:7d:ba:
32:ee:3a:55:b1:d0:8f:54:3d:4c:bd:52:a2:f1:56:
54:99:97:1c:f0:aa:0a:73:32:87:79:8e:e9:10:ff:
88:cf:e1:b4:b6:53:7b:7a:21:ef:e9:60:df:db:55:
c3:c2:1e:d9:08:48:ce:2b:65:b9:1a:ab:29:c9:60:
ab:a1:d3:10:fd:f7:ba:db:fa:6d:bd:5b:e3:12:38:
76:49:c0:e4:ca:ee:9d:18:28:8b:4f:22:48:0a:54:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:8F:AB:D8:32:54:49:E9:48:8C:6D:5B:95:9D:D9:EB:0E:78:39
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GSCPq9gyVEnpSIxtW5Wd2esOeDk.roa
sbgp-ipAddrBlock: critical
IPv4:
118.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:58:c0:a8:4a:3f:53:bf:2a:30:7b:ae:dd:dd:b5:ba:50:d3:
c3:3f:2c:10:c7:62:b7:c5:b2:02:7d:e1:4e:af:f5:3b:6a:89:
1a:74:4a:48:0a:50:82:ae:d3:52:a5:73:c8:29:65:02:d8:62:
9b:21:4a:0b:94:54:7e:e8:9c:af:ec:9b:aa:6d:66:cf:5e:d6:
92:bf:ff:2b:ef:88:3a:59:21:9d:fe:86:34:ec:df:3b:3f:b5:
a3:af:d8:b0:68:01:28:b1:ce:ee:32:4c:55:0b:c7:21:90:d2:
b8:d3:bd:63:ff:94:8c:d4:db:91:ea:40:7c:31:4b:bb:c8:d2:
a3:e4:1b:8a:72:86:21:3d:f6:9f:6e:16:90:8e:cf:71:0f:c6:
43:92:91:68:7e:e6:d6:9e:d9:94:f9:80:f7:16:fc:79:56:ec:
58:f4:47:b8:75:c5:a1:05:d0:81:9b:ed:6b:ba:d1:85:5c:4c:
b8:0b:a1:24:1c:dd:dd:20:14:a6:38:2f:29:19:53:57:6d:44:
51:f4:23:2c:80:1b:e8:a9:ad:cf:15:23:41:3b:6f:48:b0:e5:
fa:fe:1c:fa:7c:a8:e1:af:fe:0e:9c:99:79:02:ec:c4:88:7a:
dd:58:62:e8:47:ce:58:97:ef:00:91:66:96:32:7f:18:1e:5a:
cf:29:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:06 2026 by rpki-client