
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9TrKpGOKQtBVnjs8idgw_D9QE4.roa
File: S9TrKpGOKQtBVnjs8idgw_D9QE4.roa (raw, json)
Hash identifier: mIFNQnVcgPf0LZNbP2lfY7JIJGMfQaJxXRQyuk0h7Yc=
Subject key identifier: 4B:D4:EB:2A:91:8E:29:0B:41:56:78:EC:F2:27:60:C3:F0:FD:40:4E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0870
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9TrKpGOKQtBVnjs8idgw_D9QE4.roa
Signing time: Tue 31 Mar 2026 07:43:33 +0000
ROA not before: Tue 31 Mar 2026 07:43:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.198.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4BD4EB2A918E290B415678ECF22760C3F0FD404E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:9e:03:ea:14:6d:c9:13:ad:6f:db:69:eb:
e6:0a:c8:15:5b:e1:ab:2a:8e:35:91:01:a4:ca:5a:
c2:aa:93:f0:92:ae:aa:b0:8e:37:12:68:48:6c:83:
63:82:d2:3f:59:14:3b:ab:1d:cb:bf:4e:c0:24:a0:
81:3e:13:2a:e8:ae:bf:67:07:ca:df:1b:d8:ab:13:
61:62:14:06:b8:0e:35:18:d9:7c:05:f8:86:34:13:
6c:72:e3:1a:ad:26:f5:4d:2e:4d:9e:76:d3:ad:a3:
df:62:e5:fc:a4:6a:50:76:3d:60:7b:1f:65:be:c2:
be:99:bd:e6:4b:9b:28:1b:72:2b:e2:b0:5b:71:c8:
54:28:4b:37:1c:a0:27:ca:a1:85:aa:f2:9c:6a:61:
3a:7d:b0:9f:81:f7:3c:51:c2:eb:3b:7d:25:68:23:
24:1d:90:93:3c:23:0a:65:bc:9c:a4:1b:a2:3c:e2:
7b:be:88:95:db:d0:d2:ee:d2:ce:4a:c1:35:dd:ef:
1b:ff:18:ee:0f:ef:5a:e8:70:0c:6c:30:eb:40:ee:
e8:12:0c:46:c9:d7:9d:6d:06:d0:71:95:de:46:59:
f3:a8:3d:e2:b6:93:33:20:8e:51:ff:cc:c6:85:a2:
10:ec:5a:cf:ac:7a:5c:06:03:46:1c:97:b1:d6:b6:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:EB:2A:91:8E:29:0B:41:56:78:EC:F2:27:60:C3:F0:FD:40:4E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9TrKpGOKQtBVnjs8idgw_D9QE4.roa
sbgp-ipAddrBlock: critical
IPv4:
210.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1f:b5:76:17:c0:7a:b2:6a:3c:ee:2d:ad:03:fc:25:5f:4c:
ce:ab:91:b8:7b:b9:be:06:c2:e0:35:8f:9e:8f:0f:ee:14:ca:
e0:c0:ad:33:58:aa:c5:a8:df:c4:63:80:cf:cc:53:a7:dd:7c:
f8:db:64:fa:d0:64:45:f3:83:09:7a:03:15:e6:15:f1:be:a0:
55:d1:0c:b0:a5:c1:e4:df:91:a0:3b:e3:44:c9:23:bf:a9:cf:
ce:b0:6c:a2:31:17:93:d8:a4:c1:7c:38:a1:85:1d:30:09:32:
da:0d:91:91:27:dc:af:40:d2:91:be:97:71:a4:66:b3:a6:66:
3c:d6:e7:78:1e:fe:ed:54:1e:f0:ff:09:1b:55:79:83:b9:cd:
0b:fe:f3:1a:08:25:f9:6b:bc:90:26:a4:85:b7:f4:20:ad:a2:
12:93:e7:d6:56:9d:fd:3b:03:b3:2e:02:c4:f7:00:2a:2b:06:
89:3c:bc:1b:7f:a8:4b:2a:15:a5:b4:77:83:74:14:17:49:6c:
1e:32:d1:e2:4b:07:ba:6b:77:3e:b8:60:67:18:99:2f:67:8d:
12:f0:a2:58:21:0b:19:7b:64:a9:3a:35:80:d6:40:d5:c2:5e:
cb:e0:3a:b4:db:57:56:88:3b:2e:41:c7:59:b1:ec:cc:aa:17:
77:ea:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:41 2026 by rpki-client