
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/bVa9Z5BhQccGes-yUfv5L_xCahM.roa
File: bVa9Z5BhQccGes-yUfv5L_xCahM.roa (raw, json)
Hash identifier: HDpuK69m8TbyoB/DaimEtFVN6v2phvRab3uAc23HvHg=
Subject key identifier: 6D:56:BD:67:90:61:41:C7:06:7A:CF:B2:51:FB:F9:2F:FC:42:6A:13
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 029B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bVa9Z5BhQccGes-yUfv5L_xCahM.roa
Signing time: Tue 31 Mar 2026 07:33:45 +0000
ROA not before: Tue 31 Mar 2026 07:33:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 210.170.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6D56BD67906141C7067ACFB251FBF92FFC426A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:af:4f:ef:df:a8:1a:bb:b4:ae:d8:d5:70:
42:54:9c:04:19:f4:f0:ae:a3:1e:b6:61:25:18:08:
5d:3a:20:00:be:3e:e5:3d:7a:14:e7:ea:81:56:ab:
46:a0:70:cd:86:a4:89:88:62:d8:65:de:65:1b:61:
66:b3:3e:d4:c5:e6:57:ec:b8:d8:87:06:f3:8a:e8:
b0:2d:e4:49:ae:25:5a:23:e4:98:cc:23:23:e6:22:
8a:88:44:31:8b:4f:73:7f:cd:e5:24:65:9c:d5:a8:
6b:4b:eb:22:be:05:71:fd:f6:92:8e:f8:ab:c7:1a:
3c:3d:c7:c0:5a:82:29:60:4d:be:96:78:a6:13:af:
54:a3:d2:96:ea:fe:09:28:6e:2d:6c:05:1b:4a:cd:
97:9d:de:79:83:11:ee:05:5a:37:18:08:92:2e:69:
2a:7f:8d:bf:2b:6c:92:92:f0:7f:a0:f1:4e:e4:36:
b9:6e:31:3e:6f:32:56:83:bb:58:ce:7f:76:f4:23:
7b:eb:e4:23:51:b9:70:0a:c0:07:0c:e5:dc:39:15:
72:6b:ae:f4:b1:d4:d3:40:19:0b:9c:d0:c2:7a:94:
5e:96:34:0e:a0:32:6b:cd:21:2c:f4:e0:8d:ba:1d:
05:1c:5f:68:eb:7c:49:33:52:e5:ee:4b:d1:5a:8e:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:BD:67:90:61:41:C7:06:7A:CF:B2:51:FB:F9:2F:FC:42:6A:13
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/bVa9Z5BhQccGes-yUfv5L_xCahM.roa
sbgp-ipAddrBlock: critical
IPv4:
210.170.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:f8:06:39:08:50:c5:5c:1d:e9:6c:e9:d7:ce:59:64:4d:13:
cc:f3:b0:5b:37:59:ba:46:0a:dc:b1:e9:21:66:58:01:04:e3:
21:32:f5:32:bf:45:16:33:36:3d:34:5b:6f:34:3f:83:d0:cf:
d1:aa:0f:85:0d:5b:ef:89:43:01:90:40:09:bf:cf:2f:3d:6e:
f3:34:b7:e8:b3:d7:87:fd:29:17:63:a8:d2:14:a3:a3:b9:f3:
f0:e1:d0:37:b5:2e:31:06:35:6f:d1:08:c1:13:61:1a:ec:5a:
81:41:8c:d4:50:28:bf:64:5b:77:5e:d5:0a:55:d9:ce:ff:61:
64:f9:6e:e2:ef:45:3d:0d:9f:21:8d:e0:20:bb:0b:2d:e5:1d:
1b:fc:22:c6:6c:4d:4d:53:d0:71:4f:fe:46:e2:53:3e:2d:2a:
ba:6d:9a:31:6e:97:11:1a:1b:36:97:bc:8c:cb:72:b2:72:c9:
73:af:a8:bd:51:b5:ae:47:e3:7c:9a:98:20:38:8a:be:f4:4d:
39:f2:d5:e4:f0:0c:07:f1:c9:d0:44:ee:f0:3e:60:40:e4:07:
04:db:01:02:9e:b3:dc:05:02:2d:e2:01:58:95:61:3f:f7:7f:
1c:0d:e2:e0:a2:af:69:80:68:7f:e8:af:8d:e8:c5:50:29:d5:
78:f3:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:15 2026 by rpki-client