
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/STha4vHjBabyp_2TWVmhvUMIahk.roa
File: STha4vHjBabyp_2TWVmhvUMIahk.roa (raw, json)
Hash identifier: a6ktUgqUwyaNHkmFdhxEXgZWltt4buxitAFQkqCqZzc=
Subject key identifier: 49:38:5A:E2:F1:E3:05:A6:F2:A7:FD:93:59:59:A1:BD:43:08:6A:19
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 084C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/STha4vHjBabyp_2TWVmhvUMIahk.roa
Signing time: Tue 31 Mar 2026 07:43:14 +0000
ROA not before: Tue 31 Mar 2026 07:43:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 59.128.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=49385AE2F1E305A6F2A7FD935959A1BD43086A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:15:9c:46:9d:38:21:27:b0:fa:27:1b:6f:
f3:7b:4c:a2:55:82:66:44:3d:bb:84:b4:66:f2:cd:
18:f9:f5:8c:2b:c3:ba:e7:03:9a:62:22:8e:8b:f1:
fd:4d:05:02:78:0c:a5:19:4c:16:87:98:c3:25:90:
68:8a:91:f6:c1:09:0f:f8:f6:3e:8a:16:56:2c:2b:
4b:13:eb:de:13:6c:e1:ca:cc:09:f0:6e:9d:c8:6c:
18:69:2e:df:3a:10:74:7f:55:a0:98:09:16:4d:f6:
79:f3:86:e4:bb:8b:cb:e4:31:1c:cf:c0:a7:0d:eb:
36:a6:79:a4:ec:30:ff:07:68:1d:a6:58:0b:80:57:
e2:2f:00:3b:34:d6:6c:b3:bf:d0:50:72:e8:52:f0:
d2:41:8a:a3:6d:29:ad:c3:66:d6:69:55:92:31:48:
93:23:71:26:8e:9b:33:77:ae:0c:2e:ea:d0:7f:79:
32:4d:1b:81:74:20:03:64:d8:26:64:d5:6f:f9:ea:
6d:aa:d4:1c:fa:0e:d3:23:81:43:f8:ad:0c:ea:b5:
a1:5d:3e:81:54:eb:29:3f:02:8a:35:e9:06:92:fe:
1e:bc:c2:c3:e5:1b:27:72:9a:4f:55:fd:49:69:25:
cf:f0:0b:39:ed:5d:63:50:e8:71:54:66:fc:3b:75:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:38:5A:E2:F1:E3:05:A6:F2:A7:FD:93:59:59:A1:BD:43:08:6A:19
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/STha4vHjBabyp_2TWVmhvUMIahk.roa
sbgp-ipAddrBlock: critical
IPv4:
59.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
21:65:ad:5d:9b:b6:53:4d:1d:90:0a:a5:d7:92:47:ce:f4:b9:
b2:b6:40:77:e5:59:e7:a3:39:f0:78:46:b2:d4:f7:b2:54:e5:
d7:23:2f:42:83:dc:1a:30:4f:32:d0:d4:46:f5:c7:16:fc:e0:
90:2c:dd:09:8f:90:32:56:d5:c2:c6:93:0d:94:21:68:d2:e8:
20:57:05:21:d2:56:c6:df:95:cf:d0:3a:67:20:94:5c:83:df:
5b:37:14:37:47:8d:e9:0b:61:f4:76:b7:04:61:88:ef:d1:aa:
b1:ad:89:93:bd:e6:34:eb:76:61:9c:ba:c3:a0:bf:44:13:bf:
36:b7:ef:29:70:d5:97:81:3d:ba:b7:67:da:89:54:3b:da:7e:
fd:55:70:9b:ec:cf:8b:5c:98:67:1a:80:b1:49:52:02:c9:3d:
8a:b6:7a:65:db:f2:cb:a7:d8:e1:f9:89:9a:3a:41:79:9e:3f:
2f:ed:a4:bf:0e:8d:3c:23:f0:bb:fe:5b:24:94:be:8c:6c:e8:
f1:d4:05:68:f6:5f:f5:dd:33:98:09:b1:8a:fa:4a:48:af:be:
43:54:5d:ae:00:44:29:5e:12:12:6f:84:09:37:9e:96:7a:28:
ec:fd:c5:33:02:22:b3:03:f4:e2:3f:1a:88:c2:c5:0e:21:95:
79:86:90:48
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5Mzg1QUUyRjFFMzA1
QTZGMkE3RkQ5MzU5NTlBMUJENDMwODZBMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5ARWcRp04ISew+icbb/N7TKJVgmZEPbuEtGbyzRj59Ywrw7rn
A5piIo6L8f1NBQJ4DKUZTBaHmMMlkGiKkfbBCQ/49j6KFlYsK0sT694TbOHKzAnw
bp3IbBhpLt86EHR/VaCYCRZN9nnzhuS7i8vkMRzPwKcN6zameaTsMP8HaB2mWAuA
V+IvADs01myzv9BQcuhS8NJBiqNtKa3DZtZpVZIxSJMjcSaOmzN3rgwu6tB/eTJN
G4F0IANk2CZk1W/56m2q1Bz6DtMjgUP4rQzqtaFdPoFU6yk/Aoo16QaS/h68wsPl
Gydymk9V/UlpJc/wCzntXWNQ6HFUZvw7dbWJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSTha4vHjBabyp/2TWVmhvUMIahkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1NUaGE0dkhqQmFieXBfMlRXVm1odlVNSWFoay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc7gIAwDQYJKoZIhvcNAQELBQADggEB
ACFlrV2btlNNHZAKpdeSR870ubK2QHflWeejOfB4RrLU97JU5dcjL0KD3BowTzLQ
1Eb1xxb84JAs3QmPkDJW1cLGkw2UIWjS6CBXBSHSVsbflc/QOmcglFyD31s3FDdH
jekLYfR2twRhiO/RqrGtiZO95jTrdmGcusOgv0QTvza37ylw1ZeBPbq3Z9qJVDva
fv1VcJvsz4tcmGcagLFJUgLJPYq2emXb8sun2OH5iZo6QXmePy/tpL8OjTwj8Lv+
WySUvoxs6PHUBWj2X/XdM5gJsYr6SkivvkNUXa4ARCleEhJvhAk3npZ6KOz9xTMC
IrMD9OI/GojCxQ4hlXmGkEg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:41 2026 by rpki-client