
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rg_6x6Bw9z_VAs3JXvgeZYQd2ms.roa
File: rg_6x6Bw9z_VAs3JXvgeZYQd2ms.roa (raw, json)
Hash identifier: svnNEN/S8vkZAmTN7yYxA34zlVdGuROooh+Qj7EcWbw=
Subject key identifier: AE:0F:FA:C7:A0:70:F7:3F:D5:02:CD:C9:5E:F8:1E:65:84:1D:DA:6B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 086C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rg_6x6Bw9z_VAs3JXvgeZYQd2ms.roa
Signing time: Tue 31 Mar 2026 07:43:31 +0000
ROA not before: Tue 31 Mar 2026 07:43:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.238.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:43:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE0FFAC7A070F73FD502CDC95EF81E65841DDA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:fc:8a:03:3f:53:e4:26:1e:86:38:e8:11:
c5:3d:cb:b2:e7:27:be:79:10:b1:e1:52:36:32:78:
24:dd:a3:a3:d3:fd:68:6f:ca:26:64:6d:b8:90:ae:
ff:eb:fc:8e:92:24:96:b5:97:e7:62:5c:d2:33:40:
b3:2f:d2:ba:b6:55:08:52:bf:1f:f7:89:f2:04:5d:
a9:7e:ed:ce:d0:bd:d7:59:59:14:cb:d3:3b:2e:64:
a1:22:59:ad:05:ca:93:ff:4e:2d:1a:0a:66:04:71:
7e:8b:6d:64:31:fa:9c:e5:7d:65:58:cc:09:bd:7f:
b5:7f:03:3b:fd:41:a9:54:aa:48:ad:80:12:08:53:
38:c2:49:6c:6d:c1:10:e4:66:c1:78:1e:d4:23:d7:
00:fc:45:8e:46:c6:2e:c3:31:d8:c8:ca:90:f6:7c:
17:ee:d4:54:fd:ef:43:95:4d:3d:df:e8:aa:1d:6c:
e4:56:5a:f5:c5:bf:12:81:99:50:5c:65:34:be:2b:
b4:2f:34:d5:d7:e0:30:7e:b5:f8:e8:a1:04:df:d9:
e6:67:8f:92:7a:0e:75:59:45:89:81:31:ce:c7:5d:
c5:7b:39:32:d0:90:84:22:b5:c7:93:d7:90:23:96:
72:93:ad:a9:3a:22:58:1f:3d:06:5f:eb:0c:33:72:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:FA:C7:A0:70:F7:3F:D5:02:CD:C9:5E:F8:1E:65:84:1D:DA:6B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rg_6x6Bw9z_VAs3JXvgeZYQd2ms.roa
sbgp-ipAddrBlock: critical
IPv4:
210.238.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d1:b2:6a:ce:32:ac:b8:23:6e:96:4a:b7:bd:89:96:a6:65:
28:97:e6:98:9e:3b:e0:19:8d:27:0b:cc:ce:f9:e9:13:2e:8d:
0f:6f:b1:4a:66:62:8d:ed:87:ab:2f:94:73:93:2d:a3:4c:96:
ea:4a:1e:71:8c:e7:c0:8b:1c:26:0e:61:97:6f:38:c9:41:a6:
09:2a:c2:4b:cc:81:56:d3:71:54:c8:d4:5b:68:06:e5:91:20:
38:35:17:76:99:6a:b7:55:2d:94:88:0e:d8:cd:03:44:6f:81:
78:1a:7e:60:46:6c:f0:c8:2f:e4:cc:6c:ec:26:dc:ea:70:84:
ba:c4:08:10:e2:89:ed:c1:0d:e9:70:6e:dd:f5:7b:9d:66:4b:
6e:00:98:29:f1:57:b0:e2:70:9e:8b:e2:32:19:33:b8:f9:af:
ac:07:c7:b7:a3:fb:51:9a:2b:d5:14:bf:00:bc:3c:b1:95:91:
37:c5:a6:74:b6:f9:8a:37:09:14:ad:26:e5:d1:e4:59:31:ba:
92:7d:55:73:7b:0e:3f:9e:78:5a:8d:09:1c:39:85:c8:86:d8:
e5:1a:c4:b9:f3:a3:b2:02:51:e0:5a:04:c6:f6:dc:87:b7:05:
3f:c5:6c:f6:82:27:c5:e1:65:e9:16:fc:bc:8b:0a:9b:8f:a1:
67:09:6a:d8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFMEZGQUM3QTA3MEY3
M0ZENTAyQ0RDOTVFRjgxRTY1ODQxRERBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPxvyKAz9T5CYehjjoEcU9y7LnJ755ELHhUjYyeCTdo6PT/Whv
yiZkbbiQrv/r/I6SJJa1l+diXNIzQLMv0rq2VQhSvx/3ifIEXal+7c7QvddZWRTL
0zsuZKEiWa0FypP/Ti0aCmYEcX6LbWQx+pzlfWVYzAm9f7V/Azv9QalUqkitgBII
UzjCSWxtwRDkZsF4HtQj1wD8RY5Gxi7DMdjIypD2fBfu1FT970OVTT3f6KodbORW
WvXFvxKBmVBcZTS+K7QvNNXX4DB+tfjooQTf2eZnj5J6DnVZRYmBMc7HXcV7OTLQ
kIQitceT15AjlnKTrak6IlgfPQZf6wwzckCDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUrg/6x6Bw9z/VAs3JXvgeZYQd2mswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3JnXzZ4NkJ3OXpfVkFzM0pYdmdlWllRZDJtcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS7gMwDQYJKoZIhvcNAQELBQADggEB
AG3RsmrOMqy4I26WSre9iZamZSiX5pieO+AZjScLzM756RMujQ9vsUpmYo3th6sv
lHOTLaNMlupKHnGM58CLHCYOYZdvOMlBpgkqwkvMgVbTcVTI1FtoBuWRIDg1F3aZ
ardVLZSIDtjNA0RvgXgafmBGbPDIL+TMbOwm3OpwhLrECBDiie3BDelwbt31e51m
S24AmCnxV7DicJ6L4jIZM7j5r6wHx7ej+1GaK9UUvwC8PLGVkTfFpnS2+Yo3CRSt
JuXR5FkxupJ9VXN7Dj+eeFqNCRw5hciG2OUaxLnzo7ICUeBaBMb23Ie3BT/FbPaC
J8XhZekW/LyLCpuPoWcJatg=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:56 2026 by rpki-client