
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hVS2TE11F4kceHG316jRIGiuGHc.roa
File: hVS2TE11F4kceHG316jRIGiuGHc.roa (raw, json)
Hash identifier: 0EzgRXcXGKS2cWED9tPtxTTcM3OFGIJsFZXKzVBmB+s=
Subject key identifier: 85:54:B6:4C:4D:75:17:89:1C:78:71:B7:D7:A8:D1:20:68:AE:18:77
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0867
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hVS2TE11F4kceHG316jRIGiuGHc.roa
Signing time: Tue 31 Mar 2026 07:43:28 +0000
ROA not before: Tue 31 Mar 2026 07:43:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 124.109.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8554B64C4D7517891C7871B7D7A8D12068AE1877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:b2:ff:8f:62:e9:8b:bc:fd:15:3b:2e:1d:
29:4d:b2:a3:ce:ac:04:a3:ff:2a:05:d7:ce:03:5c:
7a:92:c3:a0:95:a7:24:3a:7b:b6:08:88:3f:8d:26:
ca:ed:ee:ec:35:20:9d:8b:3f:d1:71:cc:79:22:8d:
53:4d:59:fa:98:ca:db:46:fe:0a:fd:a1:d6:fc:04:
28:7d:65:03:5d:de:91:3c:f9:7a:00:32:4a:72:90:
ea:d4:ad:2b:12:77:fc:9d:fb:da:46:04:20:80:e6:
2f:f1:2c:26:49:c0:f1:61:72:5b:2c:b9:be:58:b4:
d3:7a:fa:13:44:48:2a:e1:a5:86:76:3d:3f:00:ba:
79:18:c3:76:4d:1a:64:45:b1:56:60:ad:68:58:48:
c7:a8:91:e1:7f:1c:61:f8:a4:78:79:0b:02:14:7c:
84:2b:26:be:51:8f:04:47:b9:b1:4e:96:55:5d:61:
36:aa:e4:0b:7b:80:23:0f:5e:b5:f5:a0:11:5c:4e:
5c:e3:9f:56:15:5a:86:6a:28:7b:cd:35:88:7d:a2:
90:21:03:50:6f:dc:36:8b:11:43:93:6b:bf:f2:47:
4e:bc:42:4e:f9:53:e2:1b:c9:b0:1d:d7:f9:a5:b6:
a2:4a:b4:4d:82:8d:6d:4e:6a:15:d2:ce:c9:6f:b8:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:54:B6:4C:4D:75:17:89:1C:78:71:B7:D7:A8:D1:20:68:AE:18:77
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hVS2TE11F4kceHG316jRIGiuGHc.roa
sbgp-ipAddrBlock: critical
IPv4:
124.109.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0e:63:23:37:eb:0c:fb:65:56:5a:3d:b1:7c:d6:d3:68:d7:
e4:9e:3e:4a:88:9f:b5:7e:26:47:b4:1f:f8:1e:f2:81:58:55:
86:9e:86:1f:06:2d:8c:f1:ca:64:69:6b:59:95:ea:53:34:c2:
1a:ca:77:f3:82:e6:c4:9d:13:cd:af:2b:2f:24:8b:6e:50:c3:
d1:84:42:01:e3:62:01:8b:96:cf:71:2e:78:17:60:3d:9f:88:
81:e0:fa:19:aa:eb:42:dd:82:a6:42:f4:fd:08:95:77:06:53:
cf:cb:2e:3f:03:f2:73:09:e2:ab:4f:ba:f7:53:27:4c:ac:0f:
e6:c3:68:0e:d0:5b:d4:d3:ed:28:0c:ac:66:5a:51:05:7b:36:
6a:95:03:93:9d:aa:96:ed:28:a5:33:ac:7a:d7:7e:52:63:22:
f4:01:f9:ac:5e:43:2e:a4:87:35:53:10:9a:e2:93:6c:93:59:
3f:51:29:1f:c7:e1:5a:3b:36:f0:18:8e:99:e9:95:e3:94:a7:
56:70:4d:05:d4:b5:39:9a:ee:3d:a3:bd:4e:aa:eb:67:b5:8a:
68:1c:de:34:d8:90:0a:0b:d4:82:9f:a5:58:d7:ef:ad:3c:3e:
53:6a:84:fd:d3:23:fc:ff:94:23:ec:81:a2:d5:5a:d7:28:ec:
5a:2d:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:40 2026 by rpki-client