
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BFJ1AbVt8gstsm0rRYzX36oY5DI.roa
File: BFJ1AbVt8gstsm0rRYzX36oY5DI.roa (raw, json)
Hash identifier: 4IVmCICDVNuJ5QbkF0R23EmAu5k65AAKuGlBADTeKxQ=
Subject key identifier: 04:52:75:01:B5:6D:F2:0B:2D:B2:6D:2B:45:8C:D7:DF:AA:18:E4:32
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 90
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BFJ1AbVt8gstsm0rRYzX36oY5DI.roa
Signing time: Tue 31 Mar 2026 08:37:42 +0000
ROA not before: Tue 31 Mar 2026 08:37:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 203.174.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=04527501B56DF20B2DB26D2B458CD7DFAA18E432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:b7:a6:ca:9e:d3:ee:a1:36:e8:ad:b5:c4:
3a:37:68:08:7a:7c:46:d0:e8:26:1d:97:3c:8f:5d:
29:e2:53:ae:d7:a9:55:1d:a2:3b:ca:17:b3:15:59:
77:f5:ac:83:ef:a0:1f:dc:bd:c0:bc:f0:74:64:e8:
dd:77:0a:b0:9f:f8:e8:b2:d4:2a:9f:31:6f:b1:85:
b6:11:0a:04:b0:ab:5f:7f:43:5d:e4:a4:ea:3f:6f:
a9:b3:14:de:dc:eb:e4:dc:a6:13:83:ad:8c:f5:02:
5b:e3:bd:b0:56:fd:81:31:e5:24:b9:8a:47:30:82:
5d:d4:c6:d3:14:cd:a0:f2:ab:ae:68:7f:85:cc:bc:
04:3f:8a:9e:18:f6:11:b0:fa:1c:0b:13:8f:0a:bb:
7f:ad:b5:09:22:34:12:bd:2d:4b:54:42:06:49:cc:
fa:9e:f2:6a:f6:12:51:12:54:37:c6:b7:3b:ec:fe:
e3:3a:07:e6:57:f2:24:d7:a1:41:b5:1b:31:56:aa:
38:ec:97:9c:bf:e0:ad:18:5f:b8:33:38:ab:6a:24:
21:06:11:57:b1:4f:91:12:2a:3b:2f:17:2c:be:ff:
42:ca:ef:52:9f:09:97:b7:80:1b:3d:0f:b4:17:ad:
cd:6e:b3:81:09:5c:48:2b:44:05:4d:2b:a0:52:30:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:75:01:B5:6D:F2:0B:2D:B2:6D:2B:45:8C:D7:DF:AA:18:E4:32
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BFJ1AbVt8gstsm0rRYzX36oY5DI.roa
sbgp-ipAddrBlock: critical
IPv4:
203.174.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:64:89:f0:9e:0c:2c:5e:63:4b:8f:0a:e0:c5:69:c8:6c:9c:
9f:34:04:ba:89:c7:ac:2d:cd:a3:2b:f2:ff:41:f8:0e:9c:f9:
db:07:2b:3b:43:fb:81:35:4a:fc:a7:87:70:ee:c0:62:09:38:
bc:ef:a2:c4:74:01:e8:ea:a3:f4:df:ca:b9:b0:2d:58:15:79:
2b:f6:b2:63:61:03:f8:cd:52:ac:e4:38:e2:cc:38:d2:3a:25:
a9:d2:a5:6b:57:8e:9f:15:db:28:0f:45:59:bc:64:3c:28:5b:
c4:f2:78:3c:12:1a:d7:9c:19:17:09:cc:71:07:bf:7c:22:27:
04:56:c4:82:44:41:2e:72:e6:02:f1:cc:de:2b:9a:c9:b1:27:
51:f5:0b:cc:89:86:1b:9a:f5:5e:28:cc:3e:de:bd:ca:f4:14:
30:d2:99:2b:5f:b2:ff:7a:12:68:c7:23:a8:c4:b9:3a:53:96:
7d:33:5f:ae:6d:ae:26:ee:d3:2a:9a:1d:df:3d:f9:4f:60:60:
1a:be:f2:2d:9a:3e:0e:ee:f6:11:c8:40:45:7d:85:5f:7e:c2:
a8:72:0d:b1:20:6c:7c:5e:9e:67:42:a2:81:10:52:4d:56:52:
8a:8f:30:f1:c9:12:28:a9:c3:5d:ba:00:99:4b:47:04:57:7d:
0e:ff:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client