
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa
File: bCyr6NbKY170VVkXoewfJKzc0Ug.roa (raw, json)
Hash identifier: 5yfZ5VTYAOLxbE/lBI0TtXevwKIdSD+Z+57dI1jAfpo=
Subject key identifier: 6C:2C:AB:E8:D6:CA:63:5E:F4:55:59:17:A1:EC:1F:24:AC:DC:D1:48
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 53
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa
Signing time: Tue 31 Mar 2026 07:49:45 +0000
ROA not before: Tue 31 Mar 2026 07:49:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18068
IP address blocks: 133.88.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Mar 31 07:49:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6C2CABE8D6CA635EF4555917A1EC1F24ACDCD148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:e2:71:28:c5:13:2a:93:5a:af:b2:69:92:
10:a2:0b:10:08:69:e2:54:e9:2b:8d:62:6f:e7:8a:
4d:ec:4b:0f:fb:79:d7:e7:97:f7:d6:01:53:cf:ab:
1d:7b:30:32:cb:0e:a2:7f:ea:b9:b2:42:42:fd:fb:
78:2f:1b:87:0f:95:5e:96:5e:65:a7:8a:57:68:1b:
67:4d:10:a2:5e:8e:08:c1:32:42:08:3f:b1:7c:fd:
34:ee:2b:54:1a:e7:83:7b:71:e2:6f:42:e3:0d:da:
62:aa:1b:9d:8f:06:5d:cf:2b:47:98:34:76:1f:c4:
ab:dc:8f:11:81:27:c9:bd:dc:82:d9:8c:96:35:21:
ca:f4:a4:33:e0:02:6c:16:11:eb:fe:c0:dc:6e:99:
29:51:f5:d2:89:08:fa:cc:40:3d:5d:a1:b0:0c:00:
5c:c6:cf:22:d0:6a:2a:c6:81:e1:48:f4:83:a7:4c:
ad:91:6b:53:c3:b3:2d:7b:b9:54:87:2d:2e:57:23:
a4:3c:14:1d:75:b6:94:21:b8:cb:a5:98:db:1f:b1:
4d:29:b0:8b:37:e3:68:66:f8:43:67:10:9f:9a:94:
5c:6b:9f:d5:6c:ef:02:dd:4c:7e:38:18:48:b5:31:
9a:8b:bf:50:53:fa:24:82:73:16:d5:dd:97:95:d6:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:AB:E8:D6:CA:63:5E:F4:55:59:17:A1:EC:1F:24:AC:DC:D1:48
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:05:f2:a8:48:bd:8e:6e:db:18:23:c7:cf:68:ba:69:0b:7e:
c5:54:72:2f:f6:46:e2:24:07:b6:36:3b:3f:91:93:29:57:e1:
95:e6:de:39:93:20:45:c0:c5:5e:80:39:96:4f:c3:b7:6b:0d:
05:23:02:c5:f5:06:36:fa:40:f3:1e:2d:5c:ab:42:7b:32:a0:
ff:e1:ad:c7:c4:ae:5e:da:a4:fa:42:38:c8:8b:d3:69:9d:72:
fc:04:bb:f4:29:97:64:37:f5:2c:a1:99:cb:ac:ac:3b:ee:63:
20:2c:5c:d8:d3:64:5a:cf:c6:00:fb:57:cc:24:ec:2c:db:6b:
63:47:45:6d:25:d6:30:d2:24:0a:b3:59:49:70:64:08:6f:1b:
ad:a8:3c:06:ae:02:44:b9:29:69:c7:24:32:d7:f8:0d:c6:28:
3d:2b:c1:f6:bd:bd:1a:a0:f5:10:09:40:9a:95:c8:1e:49:5c:
78:fb:fc:fa:aa:c3:b8:10:cb:4a:13:96:fc:34:2c:4d:e7:b2:
9e:18:35:d0:93:eb:32:38:9f:c3:08:7d:6b:b9:eb:a8:d2:4b:
6e:e3:89:4c:55:ca:5f:fc:64:d5:c1:8a:21:9e:7b:0b:c2:57:
1b:ff:c3:87:af:7f:d7:d4:cb:11:4a:93:07:21:f3:b5:17:5f:
27:1f:04:cd
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI2MDMzMTA3
NDk0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkMyQ0FCRThENkNBNjM1
RUY0NTU1OTE3QTFFQzFGMjRBQ0RDRDE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALU54nEoxRMqk1qvsmmSEKILEAhp4lTpK41ib+eKTexLD/t51+eX
99YBU8+rHXswMssOon/qubJCQv37eC8bhw+VXpZeZaeKV2gbZ00Qol6OCMEyQgg/
sXz9NO4rVBrng3tx4m9C4w3aYqobnY8GXc8rR5g0dh/Eq9yPEYEnyb3cgtmMljUh
yvSkM+ACbBYR6/7A3G6ZKVH10okI+sxAPV2hsAwAXMbPItBqKsaB4Uj0g6dMrZFr
U8OzLXu5VIctLlcjpDwUHXW2lCG4y6WY2x+xTSmwizfjaGb4Q2cQn5qUXGuf1Wzv
At1MfjgYSLUxmou/UFP6JIJzFtXdl5XWn7kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRsLKvo1spjXvRVWReh7B8krNzRSDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDc1L2JDeXI2TmJLWTE3MFZWa1hvZXdmSkt6YzBVZy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFWAwwDQYJKoZIhvcNAQELBQAD
ggEBAFoF8qhIvY5u2xgjx89oumkLfsVUci/2RuIkB7Y2Oz+RkylX4ZXm3jmTIEXA
xV6AOZZPw7drDQUjAsX1Bjb6QPMeLVyrQnsyoP/hrcfErl7apPpCOMiL02mdcvwE
u/Qpl2Q39SyhmcusrDvuYyAsXNjTZFrPxgD7V8wk7Czba2NHRW0l1jDSJAqzWUlw
ZAhvG62oPAauAkS5KWnHJDLX+A3GKD0rwfa9vRqg9RAJQJqVyB5JXHj7/Pqqw7gQ
y0oTlvw0LE3nsp4YNdCT6zI4n8MIfWu566jSS27jiUxVyl/8ZNXBiiGeewvCVxv/
w4evf9fUyxFKkwch87UXXycfBM0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:53 2026 by rpki-client