
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hgMKr6FcnBPn0JvDolkX3eZbVFA.roa
File: hgMKr6FcnBPn0JvDolkX3eZbVFA.roa (raw, json)
Hash identifier: X2NSX1caFrC0e455AqqCwuKlooO8G697B6KjUrIMLBw=
Subject key identifier: 86:03:0A:AF:A1:5C:9C:13:E7:D0:9B:C3:A2:59:17:DD:E6:5B:54:50
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 085A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hgMKr6FcnBPn0JvDolkX3eZbVFA.roa
Signing time: Tue 31 Mar 2026 07:43:22 +0000
ROA not before: Tue 31 Mar 2026 07:43:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 111.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=86030AAFA15C9C13E7D09BC3A25917DDE65B5450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:d5:f4:42:43:c7:5a:15:07:05:cf:8b:34:
b5:f5:20:30:07:22:4c:a4:92:f1:6a:5a:31:7b:5d:
e5:6a:d1:48:a6:2d:8b:b6:b2:49:72:de:a1:9a:fd:
83:56:69:57:83:c3:d7:dc:48:07:b7:87:d0:27:34:
c2:a8:22:bd:f0:f3:b9:de:18:75:04:17:90:c1:a2:
12:fc:ea:d2:79:96:14:0d:85:23:ca:59:e6:5f:de:
86:dc:a0:29:7c:a7:7e:f6:c2:d1:f2:0b:9a:8a:c7:
f2:ce:51:f8:f8:26:b9:ca:e5:1e:27:68:d4:a3:7e:
4f:0c:6c:3c:01:70:ea:f4:e6:c7:0a:bd:43:06:1e:
e2:16:ca:8f:b2:68:cc:0b:90:ab:0c:4c:ab:8f:87:
7e:de:a5:17:cf:79:c9:2d:9e:12:be:e1:5a:fd:34:
8d:a8:04:ce:ff:e3:e3:62:bf:16:fa:96:fc:06:f5:
55:e4:94:44:30:8e:dc:f6:c4:c2:54:3c:20:5d:b0:
27:0a:14:42:8f:61:30:13:6b:65:eb:59:9e:da:39:
07:23:9e:e6:7c:1f:f5:91:2c:3c:11:44:c7:93:85:
95:cc:2f:73:25:56:38:d0:a1:61:65:45:9f:e8:28:
c3:57:13:b1:9c:8c:12:c0:3e:4c:72:95:64:cc:ae:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:0A:AF:A1:5C:9C:13:E7:D0:9B:C3:A2:59:17:DD:E6:5B:54:50
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hgMKr6FcnBPn0JvDolkX3eZbVFA.roa
sbgp-ipAddrBlock: critical
IPv4:
111.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:48:3d:1c:43:3a:01:ba:cb:c0:74:36:cf:71:91:0c:8e:8f:
ba:9d:9e:e5:2f:a2:4b:7f:ca:79:6a:d4:5f:c1:31:44:84:0c:
79:46:08:78:d9:ca:bf:8e:8a:ff:9c:22:01:7b:96:f2:f2:78:
9b:73:b0:d5:25:5a:41:ee:51:a8:d7:44:89:33:c6:6a:96:a4:
d3:be:3b:e6:81:f8:46:2b:14:42:34:8a:a8:52:aa:e7:d4:a8:
c5:b4:a2:31:6e:3d:b9:b5:dd:da:a7:68:ae:1a:f4:20:57:60:
3e:c0:0a:e1:2e:53:9d:81:be:70:00:fd:a4:8a:f3:ad:55:79:
f2:e6:a9:ab:6a:32:40:2c:22:fd:18:2a:2e:de:4c:80:27:21:
0e:e1:1f:c6:64:3f:95:9b:8c:bc:9e:c3:e7:72:be:b9:4e:46:
5f:32:6a:2b:15:06:43:f6:ee:30:45:f7:77:d1:7e:7f:b3:4a:
34:6e:07:da:2e:6b:62:d0:95:9a:9a:15:f3:00:7c:d8:bc:5d:
f2:ec:80:f9:5a:0e:4e:2a:68:e1:43:bb:28:3c:ad:4a:e5:0f:
62:e0:db:4f:93:2a:ec:4b:5b:c4:0b:74:fb:be:c0:cb:69:47:
8b:d2:cd:a9:ae:75:15:66:cb:1f:99:05:a6:18:1c:67:e4:0e:
f7:81:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:39 2026 by rpki-client