
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BdxFVXLawTVu_Am1s0tyuZ31dh0.roa
File: BdxFVXLawTVu_Am1s0tyuZ31dh0.roa (raw, json)
Hash identifier: 0cOm34XTDpDDEKHNOpi+y2Y7gQ9Y+nuk8N1f0YPf95g=
Subject key identifier: 05:DC:45:55:72:DA:C1:35:6E:FC:09:B5:B3:4B:72:B9:9D:F5:76:1D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 141A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BdxFVXLawTVu_Am1s0tyuZ31dh0.roa
Signing time: Tue 31 Mar 2026 07:56:51 +0000
ROA not before: Tue 31 Mar 2026 07:56:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5146 (0x141a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:56:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=05DC455572DAC1356EFC09B5B34B72B99DF5761D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:05:e1:96:4c:bb:9b:4e:60:eb:d1:3b:0b:
d0:9d:87:2d:1a:6f:8c:84:07:ee:d0:42:74:3b:f9:
5d:e0:1c:1e:f3:4a:4c:ce:00:64:6c:68:54:03:71:
83:5f:27:e2:90:58:9f:57:4f:73:0a:bb:a6:5e:9d:
b1:cc:c4:37:02:92:36:75:4d:f5:89:53:c2:7a:34:
e1:ab:93:6f:15:1f:aa:5a:a3:e7:a4:79:8c:37:87:
38:06:fb:7c:59:78:88:2b:9b:af:97:de:85:80:3c:
9b:8c:3c:6f:ac:8c:04:57:0d:61:2e:bb:07:33:6d:
80:c7:a1:2a:05:8c:8f:aa:d3:db:0f:e7:cb:b1:9b:
57:74:45:84:a1:6a:32:39:3b:61:3d:4a:3d:6c:48:
d9:62:7f:23:09:4e:61:83:66:cb:9b:a2:2c:75:4a:
af:e0:1b:44:c9:09:e8:1b:0c:55:b2:c4:39:03:c3:
9a:b7:66:8f:2a:46:22:90:73:3f:53:b7:2e:78:b8:
cf:9e:aa:74:57:0c:65:e0:7b:97:43:6b:49:4e:e2:
8b:be:95:f3:db:07:02:cb:e8:10:df:dd:ed:d6:f0:
3b:2c:fc:db:44:67:d6:da:d8:f8:8f:2f:46:88:9c:
11:90:48:03:7d:2c:3b:81:6d:30:9f:16:0f:00:26:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:45:55:72:DA:C1:35:6E:FC:09:B5:B3:4B:72:B9:9D:F5:76:1D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BdxFVXLawTVu_Am1s0tyuZ31dh0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.105.74.0/23
Signature Algorithm: sha256WithRSAEncryption
82:cd:88:7b:23:34:c6:3a:bc:00:dd:82:ca:35:84:f4:fa:de:
e6:ab:31:70:ec:77:49:2e:56:25:10:c6:a1:6d:c1:be:9a:94:
af:ae:b2:88:28:18:fc:de:49:20:f8:f1:bd:0a:db:da:72:7e:
f9:8a:ca:82:ee:92:69:53:23:70:02:0d:54:8a:d2:e9:6f:b1:
9b:b8:66:fc:a6:41:ac:d2:5b:35:15:e6:c8:7b:71:25:8d:40:
56:8c:66:99:74:16:9b:8a:84:10:84:36:4b:f9:92:a3:fb:0d:
e3:ae:31:ee:cb:bd:6b:7c:e2:73:d8:ca:01:52:25:30:86:a3:
8f:ef:31:11:9f:93:86:af:d5:9c:3c:d4:82:f3:b1:3d:27:0a:
9f:67:e6:5e:7e:d0:cd:4a:9f:da:dc:00:56:44:e8:80:9d:b6:
31:a6:ef:a6:77:a7:0e:58:2b:cd:c4:e4:ec:51:49:4f:25:43:
22:fb:60:aa:1f:6f:e4:bf:43:1b:3f:f8:6f:c7:c9:79:8c:b9:
b6:08:e3:a9:61:49:13:e6:12:3b:43:bd:31:c9:9e:81:ed:f9:
4e:45:e1:28:3f:a4:8c:93:31:bc:f8:0f:b4:9f:54:b3:9e:59:
67:a1:80:dc:86:33:85:4a:02:52:cc:f0:f6:ce:17:6a:67:8b:
e7:84:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:32 2026 by rpki-client