
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tHNY0_0Xvf-6GfqWljWF8wDkNMM.roa
File: tHNY0_0Xvf-6GfqWljWF8wDkNMM.roa (raw, json)
Hash identifier: KvBJwaNi9P7xTglpFqr++9dK9AZlYivNy051EM3ITs4=
Subject key identifier: B4:73:58:D3:FD:17:BD:FF:BA:19:FA:96:96:35:85:F3:00:E4:34:C3
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08AE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tHNY0_0Xvf-6GfqWljWF8wDkNMM.roa
Signing time: Tue 31 Mar 2026 07:44:02 +0000
ROA not before: Tue 31 Mar 2026 07:44:02 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.238.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:02 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B47358D3FD17BDFFBA19FA96963585F300E434C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:3a:ba:9d:7a:2a:9c:28:f7:7d:1e:88:50:
a1:0e:ca:19:db:ab:3a:70:2c:65:2f:82:b0:d9:0c:
d6:df:3a:ac:46:f8:85:f8:21:e4:85:e8:57:e3:eb:
c1:5e:cd:4a:26:89:05:d7:d5:a8:c4:7b:56:5c:22:
e5:25:99:0b:29:42:8b:fb:36:bc:ec:4b:c4:6f:9f:
8f:cc:0b:12:77:45:e7:6b:54:81:50:68:3a:6d:54:
18:f7:aa:0f:5a:a3:f4:76:12:3c:9d:ac:6b:06:6e:
a2:bf:05:8f:eb:2e:da:4b:60:e8:e5:8f:96:ea:d7:
35:ad:51:0f:89:82:d9:00:73:34:58:84:7f:2d:47:
be:11:af:7b:92:fa:83:97:bd:7b:f6:c3:5e:f2:db:
17:eb:21:ca:12:c6:96:da:91:f2:50:37:57:5e:29:
89:e6:b0:db:70:8d:40:7f:7d:2a:f0:5e:dd:6a:2f:
7a:dd:af:43:fd:e5:09:6a:82:16:81:39:1b:e0:a9:
54:61:7e:7d:49:fb:d3:45:fc:53:cb:d6:aa:37:e6:
78:e4:31:fc:9b:cb:5c:98:29:00:f1:3f:9a:fc:12:
36:a9:a8:91:5b:f2:73:96:70:6e:d9:58:08:0a:d0:
53:a0:41:56:76:bb:ca:da:59:e4:ee:6e:b8:4f:10:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:58:D3:FD:17:BD:FF:BA:19:FA:96:96:35:85:F3:00:E4:34:C3
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tHNY0_0Xvf-6GfqWljWF8wDkNMM.roa
sbgp-ipAddrBlock: critical
IPv4:
210.238.10.0/23
Signature Algorithm: sha256WithRSAEncryption
36:54:2b:c7:a2:1b:1f:fb:57:06:8a:58:25:61:fc:4a:12:5f:
f4:f2:df:cc:64:10:31:a7:ca:e3:49:67:56:52:f8:b0:43:b2:
35:87:82:6e:4b:08:e6:35:39:67:3f:b9:27:b9:83:84:7c:3d:
a0:54:2f:4c:fd:1a:7f:11:f4:4a:5e:d2:85:00:e2:ac:80:cf:
81:5d:0f:f1:f0:bb:ca:0b:a1:19:e2:ac:1e:88:6c:6d:c9:d9:
31:09:62:b4:d2:64:57:8e:ae:fc:94:d5:bb:10:d8:33:50:14:
76:0a:f3:c5:ce:08:09:bf:26:cc:8b:9b:aa:c1:8f:b2:dd:0b:
ec:77:bf:05:2c:07:0f:3a:57:15:13:bf:44:78:00:da:66:53:
70:de:11:56:16:22:0e:d4:1a:d9:78:95:e3:56:0b:ae:f5:f3:
d6:3a:a1:63:77:b4:98:3c:3e:05:d4:74:61:a3:12:93:87:ee:
cf:8b:26:91:1c:d1:22:23:f2:34:84:1f:76:49:1b:8b:80:bd:
a3:d2:d7:72:9d:dc:db:db:bc:d3:ff:b3:aa:cb:93:f6:60:cb:
2e:3b:7c:7f:b5:2f:99:80:5c:08:c6:79:89:73:a4:36:7e:52:
90:29:9c:eb:08:d9:4b:16:8b:5d:33:db:75:9f:eb:0d:d9:73:
76:e8:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:44 2026 by rpki-client