
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BfP0SzwfyJTHwrAi06z-F6dcqXA.roa
File: BfP0SzwfyJTHwrAi06z-F6dcqXA.roa (raw, json)
Hash identifier: jBekHAaV/POIFlNkMZihrD0/sRUF+mucc94WOM7QEqY=
Subject key identifier: 05:F3:F4:4B:3C:1F:C8:94:C7:C2:B0:22:D3:AC:FE:17:A7:5C:A9:70
Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial: 59
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BfP0SzwfyJTHwrAi06z-F6dcqXA.roa
Signing time: Tue 31 Mar 2026 08:29:34 +0000
ROA not before: Tue 31 Mar 2026 08:29:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7511
IP address blocks: 103.53.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Validity
Not Before: Mar 31 08:29:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=05F3F44B3C1FC894C7C2B022D3ACFE17A75CA970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:7c:dc:8b:b7:0f:f4:6e:fc:7b:52:1b:19:
13:2b:ae:82:1d:d4:fb:2e:ab:af:58:4b:9d:a9:b5:
1e:42:74:7b:63:cc:f5:c4:08:c8:93:07:d4:1d:71:
3f:d8:7f:c9:f8:0f:10:c6:06:40:8c:70:72:14:17:
15:7b:c6:71:17:5e:93:da:48:3f:56:c4:33:d6:d5:
15:35:1e:fb:13:12:20:9e:ed:bb:36:78:ca:75:82:
2b:05:e9:2f:35:65:ee:41:71:23:74:d6:05:86:93:
36:73:b4:2a:bd:d4:66:d2:14:91:48:dd:49:ca:71:
90:8c:7e:71:c0:dd:dd:34:40:94:74:cd:2f:b2:4a:
ac:27:09:d8:b6:1e:fa:f4:86:99:d7:98:f6:6f:e1:
da:0f:8f:d6:0a:39:2d:d9:8f:5f:95:9d:ff:b1:3e:
79:ea:b9:9a:06:1b:fb:f0:b1:7c:01:c5:08:31:6d:
1e:30:0b:20:fc:bc:f6:08:b5:f9:00:32:a4:da:2b:
cc:97:6a:71:72:36:9d:b8:80:f4:cb:16:62:4a:af:
5f:87:9d:f7:69:7f:35:bd:5e:d7:04:94:ab:29:e1:
ac:22:ac:a9:74:e0:ea:aa:a4:49:05:b3:3b:e1:6a:
57:4d:78:63:ce:4d:1a:2a:8d:36:76:17:ba:56:06:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:F4:4B:3C:1F:C8:94:C7:C2:B0:22:D3:AC:FE:17:A7:5C:A9:70
X509v3 Authority Key Identifier:
keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BfP0SzwfyJTHwrAi06z-F6dcqXA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3d:d0:ce:72:9a:0d:f1:51:b7:ef:8c:d0:0e:98:8d:2e:3f:
49:1e:7b:b5:e0:f4:77:95:c0:b9:0e:57:a4:e6:f6:6d:48:7a:
29:92:ad:04:1f:23:ab:e2:73:9c:7f:b5:8d:0f:d3:8c:59:72:
f9:a8:8a:2b:31:89:39:a8:ed:d0:e2:28:35:b9:e9:93:9e:95:
4f:ed:fe:42:51:f2:24:4a:5e:e5:90:9f:b5:20:a0:ad:70:f1:
d4:9d:f4:b3:64:dc:7d:63:c7:52:01:19:5a:38:61:7b:e9:2c:
79:32:e4:06:ca:39:ba:da:91:da:a1:36:d3:2c:c5:54:c5:a2:
e3:32:ff:5e:06:d9:98:7c:88:b8:c7:8b:98:04:26:ee:99:b2:
93:73:e1:32:7a:cb:42:00:e2:82:c5:8c:9a:ec:93:18:2c:66:
a6:be:78:c4:91:46:57:89:92:7d:30:a4:dc:70:eb:7c:91:33:
c3:3b:bd:26:85:79:3a:1f:47:b1:8e:cd:49:df:13:85:74:7d:
c0:36:05:77:3d:53:ac:51:d8:67:88:ee:ca:20:b0:5d:8b:94:
7a:20:09:1e:e8:03:75:4b:9b:2a:94:e0:c0:73:29:ad:cf:7a:
79:4b:25:55:4b:8e:2a:8f:23:b0:b6:e9:7a:3e:61:ef:dc:40:
de:13:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client