
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YQhnPJvC1eRD2daLIZ5xRdNccHQ.roa
File: YQhnPJvC1eRD2daLIZ5xRdNccHQ.roa (raw, json)
Hash identifier: qHIx9J2tq9msoWTyjYRaSxen5OFGv2rn+P12BvlLkeY=
Subject key identifier: 61:08:67:3C:9B:C2:D5:E4:43:D9:D6:8B:21:9E:71:45:D3:5C:70:74
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08B6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YQhnPJvC1eRD2daLIZ5xRdNccHQ.roa
Signing time: Tue 31 Mar 2026 07:44:06 +0000
ROA not before: Tue 31 Mar 2026 07:44:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.253.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6108673C9BC2D5E443D9D68B219E7145D35C7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:6a:2e:be:1c:0a:20:0e:73:9b:4f:b4:77:
1a:91:50:8a:d1:d4:08:48:7c:46:1f:20:bf:37:1f:
8a:80:ce:cc:6b:04:a8:43:4f:8b:96:21:8e:aa:5b:
8b:80:0b:a1:8f:1d:a5:4b:85:40:0c:92:e6:b6:dd:
2e:70:4a:9d:7a:30:51:4a:19:e0:a8:19:8d:12:2f:
41:8f:3a:e0:a6:73:a4:6b:dd:1e:91:df:a0:93:56:
78:1b:29:37:e7:e2:36:31:4b:0d:41:0d:c2:d9:13:
26:e1:3e:ff:01:a7:fe:f2:72:ed:52:78:a1:e5:e4:
40:f0:2c:ef:f1:93:ed:f6:1c:bd:fb:ab:11:f6:ab:
7f:75:ae:68:82:41:79:3b:c1:38:05:60:b8:53:d9:
de:2a:2b:02:90:96:28:0b:ef:28:6a:b4:f7:16:38:
3e:16:65:bb:62:76:93:39:30:0f:62:69:65:85:d3:
85:d3:a2:03:4b:c6:d9:34:7a:f5:a3:e0:84:71:b2:
a1:c0:a3:3b:9a:2e:60:51:37:01:bc:b8:58:e2:31:
03:58:52:c3:35:58:c6:81:fb:ab:bd:20:33:e3:c2:
51:9b:0a:a0:c5:6c:ce:83:70:e8:ea:91:43:8b:25:
b9:b5:c7:47:c7:f7:38:9d:ee:db:ae:12:77:f7:51:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:67:3C:9B:C2:D5:E4:43:D9:D6:8B:21:9E:71:45:D3:5C:70:74
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YQhnPJvC1eRD2daLIZ5xRdNccHQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.253.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e6:ad:d7:7a:49:cd:73:35:d3:53:fb:28:b0:a7:d6:19:45:
8a:95:f8:81:31:0c:7e:6e:da:53:92:5d:90:88:b9:44:16:df:
83:46:ea:32:70:86:38:cd:7e:01:99:82:ae:56:22:c3:29:08:
38:40:bd:14:68:da:54:4c:2c:82:81:8e:69:8f:d0:aa:6c:72:
62:c7:ab:8b:ac:5e:6b:6a:45:09:d3:69:39:31:dc:5c:34:4a:
76:c6:97:95:16:21:2a:d0:c8:85:07:e1:98:91:cb:a5:3b:e6:
2d:39:16:f5:65:44:9d:d7:1c:d2:a7:e2:f2:71:69:ed:d0:10:
0b:52:6e:c3:16:83:33:12:d7:67:6a:d6:9f:15:e3:3a:fd:d3:
8a:29:3c:9d:52:07:72:41:0f:5e:be:c8:5d:c4:8b:dc:dc:16:
5e:9e:1c:13:e6:4b:1a:dd:0e:6c:7a:24:f7:dc:09:3a:c9:5c:
d2:62:27:fb:aa:04:f3:28:7f:15:ea:a9:1d:7d:a7:49:21:20:
80:b9:42:a7:fa:94:4b:ae:65:5e:4b:09:9b:95:70:3b:41:cb:
8c:f1:00:d3:4f:bf:08:05:8e:70:ed:44:d8:30:02:f2:ef:94:
74:d6:34:c9:e4:ca:6e:cb:74:c5:64:c4:b9:b3:07:ee:e1:d2:
dc:bd:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:27 2026 by rpki-client