
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/trnCtd42M9PbcUCZQAIxLWVStIY.roa
File: trnCtd42M9PbcUCZQAIxLWVStIY.roa (raw, json)
Hash identifier: l5j4AccEFfYU5YjKzTuZW5qwsx9Qvef+p8M7EJj3DyM=
Subject key identifier: B6:B9:C2:B5:DE:36:33:D3:DB:71:40:99:40:02:31:2D:65:52:B4:86
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0907
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/trnCtd42M9PbcUCZQAIxLWVStIY.roa
Signing time: Tue 31 Mar 2026 07:44:41 +0000
ROA not before: Tue 31 Mar 2026 07:44:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 210.238.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311 (0x907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B6B9C2B5DE3633D3DB7140994002312D6552B486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:71:1e:18:e7:45:a9:e2:11:54:d9:43:93:
b2:f4:bc:7e:5c:66:83:e6:b0:76:db:8d:ef:83:41:
3c:93:a4:a7:e1:58:a0:1e:f6:6d:b7:57:f5:da:9a:
19:d9:ce:3f:a7:e9:b2:3d:8e:26:79:5b:75:e5:e9:
27:b4:6b:d9:40:3c:9b:ae:8a:7d:eb:e7:e7:1b:1b:
15:5a:fc:16:20:ff:d3:f1:5d:5b:97:5a:61:37:9e:
dc:d2:90:74:2e:0a:74:de:c3:e6:2d:f3:af:33:c2:
39:3d:fc:e5:9a:d4:89:47:b3:08:18:b0:b2:9c:fb:
9b:19:99:26:27:c4:ab:bd:3f:aa:22:3e:24:2c:4a:
ef:17:e2:20:0c:30:00:eb:cd:e2:76:be:31:30:40:
93:0c:2e:17:c8:62:8d:c4:85:bf:45:60:0f:ab:a3:
a1:37:97:44:64:5a:da:24:09:bf:db:33:dd:21:38:
61:d1:14:06:c9:c9:0b:de:32:26:86:c3:57:fa:58:
bf:83:40:53:81:84:cc:25:61:00:d2:9e:e7:1a:97:
50:77:bc:c5:56:ce:42:1b:a8:99:d5:1b:bb:4b:60:
ac:82:96:31:f0:37:02:f5:b8:1d:8e:ca:ce:b7:91:
92:6a:47:39:6e:c2:6a:50:45:96:0c:47:b5:fe:93:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:C2:B5:DE:36:33:D3:DB:71:40:99:40:02:31:2D:65:52:B4:86
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/trnCtd42M9PbcUCZQAIxLWVStIY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.238.0.0/19
Signature Algorithm: sha256WithRSAEncryption
87:46:e2:d8:6b:67:b0:37:b0:fd:09:49:af:8e:69:eb:f8:9b:
03:21:3e:ef:bf:d3:7b:6b:ef:7a:e1:d5:4f:fa:95:33:eb:d9:
24:81:8f:55:a8:be:51:64:15:e3:de:1e:40:27:d1:ef:de:c1:
b7:ea:09:14:90:09:bb:ef:c6:25:2b:09:39:78:ab:62:43:dc:
a5:b5:8b:ae:a5:1a:51:27:52:05:00:fd:b0:83:58:83:ef:1d:
06:fa:2f:01:3f:e7:ba:68:9f:cc:04:48:10:da:de:7c:ed:de:
5c:b7:0e:ee:bd:f2:d5:e7:a3:b2:22:4d:d6:0c:47:76:c5:58:
2d:37:34:a4:5f:dc:df:e5:54:88:e7:eb:31:dd:cd:1f:5d:d1:
d4:6a:a8:7b:20:6e:ce:1c:16:a8:76:96:f6:e0:d0:05:89:81:
e5:ff:b7:0d:6c:4c:0b:8d:ca:1f:9f:9b:3a:44:16:3a:e2:f1:
c2:ba:ab:2a:b5:3b:da:50:ce:22:b5:30:ab:e4:95:9c:ed:7b:
1d:db:e1:eb:e8:65:a4:52:c2:10:98:19:b8:95:a3:74:10:94:
f1:07:5a:e5:c5:12:5d:26:d7:76:93:95:63:c6:ae:21:8e:96:
23:ac:4b:38:0d:62:92:84:f0:af:13:f9:65:2d:8b:ce:65:ee:
fd:6e:e2:9b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2QjlDMkI1REUzNjMz
RDNEQjcxNDA5OTQwMDIzMTJENjU1MkI0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Y3EeGOdFqeIRVNlDk7L0vH5cZoPmsHbbje+DQTyTpKfhWKAe
9m23V/XamhnZzj+n6bI9jiZ5W3Xl6Se0a9lAPJuuin3r5+cbGxVa/BYg/9PxXVuX
WmE3ntzSkHQuCnTew+Yt868zwjk9/OWa1IlHswgYsLKc+5sZmSYnxKu9P6oiPiQs
Su8X4iAMMADrzeJ2vjEwQJMMLhfIYo3Ehb9FYA+ro6E3l0RkWtokCb/bM90hOGHR
FAbJyQveMiaGw1f6WL+DQFOBhMwlYQDSnucal1B3vMVWzkIbqJnVG7tLYKyCljHw
NwL1uB2Oys63kZJqRzluwmpQRZYMR7X+k+hdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUtrnCtd42M9PbcUCZQAIxLWVStIYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3RybkN0ZDQyTTlQYmNVQ1pRQUl4TFdWU3RJWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS7gAwDQYJKoZIhvcNAQELBQADggEB
AIdG4thrZ7A3sP0JSa+Oaev4mwMhPu+/03tr73rh1U/6lTPr2SSBj1WovlFkFePe
HkAn0e/ewbfqCRSQCbvvxiUrCTl4q2JD3KW1i66lGlEnUgUA/bCDWIPvHQb6LwE/
57pon8wESBDa3nzt3ly3Du698tXno7IiTdYMR3bFWC03NKRf3N/lVIjn6zHdzR9d
0dRqqHsgbs4cFqh2lvbg0AWJgeX/tw1sTAuNyh+fmzpEFjri8cK6qyq1O9pQziK1
MKvklZztex3b4evoZaRSwhCYGbiVo3QQlPEHWuXFEl0m13aTlWPGriGOliOsSzgN
YpKE8K8T+WUti85l7v1u4ps=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:43 2026 by rpki-client