
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nlHHgAatMFL-0DwLPyT-oangvLs.roa
File: nlHHgAatMFL-0DwLPyT-oangvLs.roa (raw, json)
Hash identifier: dhUXXdI5BmasMiYpuAMju9GUhkBH0cB2VNiTpoXFHCs=
Subject key identifier: 9E:51:C7:80:06:AD:30:52:FE:D0:3C:0B:3F:24:FE:A1:A9:E0:BC:BB
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0866
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nlHHgAatMFL-0DwLPyT-oangvLs.roa
Signing time: Tue 31 Mar 2026 07:43:28 +0000
ROA not before: Tue 31 Mar 2026 07:43:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.233.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9E51C78006AD3052FED03C0B3F24FEA1A9E0BCBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:3c:8c:5e:7c:1d:4b:33:01:68:59:43:f6:
a1:20:08:37:70:54:c3:56:64:1c:26:f5:75:ee:26:
bc:89:d3:0a:a1:4c:2e:b6:7b:7d:de:61:27:06:89:
9c:3b:21:3d:36:0e:df:92:da:2e:6c:b4:9d:5d:c2:
ff:c8:6e:50:af:f5:76:6e:94:47:e6:90:58:b8:a2:
0c:3f:ad:dc:37:14:90:20:4f:c8:15:3a:3e:47:53:
85:17:e8:01:5c:de:1a:ed:26:2f:32:88:0b:cc:cf:
48:e3:aa:9d:4a:c8:cf:b9:2d:22:77:85:55:4a:24:
a1:4a:1a:0b:d7:10:a1:aa:4b:0c:cd:f8:46:82:97:
d1:e6:00:61:3e:59:b5:62:a3:aa:23:f7:51:eb:af:
1b:0e:72:ad:e5:f7:a8:55:3f:db:1c:75:19:e4:14:
59:84:18:53:80:10:2a:f7:0b:fe:bb:14:f9:e4:fb:
1b:4b:d3:58:b4:74:b8:96:b6:fa:3d:47:bf:9d:bd:
40:7c:91:6e:c5:ec:76:bd:e3:cb:0f:ba:9d:27:49:
82:9e:cd:e5:dd:bd:e6:97:51:66:5a:69:db:42:8e:
f5:ac:cd:99:86:91:28:57:68:36:b6:76:92:17:5f:
af:b3:79:a9:c0:a1:24:4b:56:b7:88:e5:a1:d1:89:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:C7:80:06:AD:30:52:FE:D0:3C:0B:3F:24:FE:A1:A9:E0:BC:BB
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nlHHgAatMFL-0DwLPyT-oangvLs.roa
sbgp-ipAddrBlock: critical
IPv4:
210.233.114.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:11:03:06:ce:35:3a:55:6b:1b:0c:18:34:05:dd:a6:c4:9f:
3b:16:43:5c:ca:68:b7:54:30:53:98:2a:10:e6:64:68:fd:51:
e4:88:8d:f9:04:10:04:ed:73:83:3c:73:67:2d:9f:3f:01:71:
3b:49:9c:ba:ef:a6:d8:4b:b9:94:89:74:b7:bc:1e:51:3b:96:
13:da:21:f3:59:fe:ba:bc:95:c5:7a:c1:42:e3:ee:2b:9f:43:
f2:f4:0f:a9:e5:f9:25:0c:9b:c1:ed:d4:7f:00:fa:59:25:1d:
64:91:53:bc:ce:7a:24:08:30:93:6e:0a:ec:5c:95:89:39:44:
10:ab:b4:2d:89:fa:77:62:c0:e8:81:7f:00:0c:b5:64:70:34:
87:59:f8:5b:0d:7a:aa:b3:27:12:34:d6:51:e8:73:f0:0b:44:
a0:c1:50:87:5f:a8:75:0d:cd:20:8f:95:f1:53:2e:ee:6d:fb:
d0:23:3f:e7:3c:41:23:09:68:cf:51:dd:1d:6b:f6:6f:b2:7c:
32:d3:13:2f:e7:9a:3f:3c:cd:cb:2b:7c:8d:6f:66:a4:fa:22:
91:da:85:bd:28:20:26:03:82:70:d4:0f:cb:e5:42:53:fa:ba:
a3:a2:90:fe:1a:9e:55:f6:1c:08:fa:e4:a8:00:a3:77:77:43:
bc:ba:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:02 2026 by rpki-client