
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa
File: BudHWbVk8_PVkRhjdv7ba5ehGyI.roa (raw, json)
Hash identifier: K0f3MOiy2hNnjlpMERiPgJ/VZ6nFr4IWRrlSU/FH3Zg=
Subject key identifier: 06:E7:47:59:B5:64:F3:F3:D5:91:18:63:76:FE:DB:6B:97:A1:1B:22
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 162B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa
Signing time: Tue 31 Mar 2026 08:01:18 +0000
ROA not before: Tue 31 Mar 2026 08:01:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5675 (0x162b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:01:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=06E74759B564F3F3D591186376FEDB6B97A11B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:6b:18:82:34:6a:9f:9d:c3:0b:2b:22:8c:
da:b7:bb:c0:76:c1:c2:11:83:08:27:08:d0:09:41:
b9:8d:01:98:c6:84:2d:e9:5f:04:9e:88:2e:79:b3:
dd:60:3e:46:95:86:1b:68:e0:21:d6:fd:32:1d:aa:
01:eb:d5:a2:b5:d7:21:34:13:0f:df:8a:98:e5:0f:
4a:71:24:5e:fd:1a:d4:be:31:36:3a:c2:ed:7c:5f:
00:51:bb:b3:35:5e:7a:0c:ee:a3:84:c4:e1:bf:cb:
bf:ee:66:78:49:c4:00:ae:1e:f9:91:c6:ec:ce:bf:
5b:78:ca:be:55:34:0e:9e:3b:28:49:23:c9:a2:78:
7f:c4:8f:0c:46:af:c6:68:26:37:46:05:7d:8d:20:
1c:78:a2:28:68:d1:b2:2d:06:85:3f:7a:37:5d:53:
7a:ca:ac:dc:41:c5:1c:77:cd:2c:08:25:b3:89:63:
6b:11:88:aa:9b:38:4a:14:e3:88:b5:98:ab:1f:2d:
16:78:d1:af:94:ad:55:2a:e1:86:cf:ec:6d:6b:88:
e7:6c:85:e6:92:f9:b3:0b:35:41:a7:a6:ec:ac:92:
cf:a0:3a:51:8a:70:c2:a9:79:d3:f2:52:10:9e:03:
0b:05:9a:00:ec:dd:5f:90:37:19:50:20:8d:e9:ed:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:47:59:B5:64:F3:F3:D5:91:18:63:76:FE:DB:6B:97:A1:1B:22
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa
sbgp-ipAddrBlock: critical
IPv4:
49.96.40.0/22
Signature Algorithm: sha256WithRSAEncryption
37:40:1e:b4:d5:53:c7:d6:fc:e5:e2:11:73:8d:6d:4c:3d:e5:
9a:1b:9f:9f:5a:a7:d0:43:50:01:8a:3e:a7:58:36:b3:46:36:
70:85:d8:80:77:65:bc:51:9c:bc:19:ef:9e:2f:91:db:1d:45:
f4:82:8b:41:98:06:3d:af:a4:c5:cd:2c:e0:ca:7f:de:93:bb:
59:bb:f0:a7:24:8f:51:79:ce:7c:d8:19:26:4f:de:be:be:6a:
5c:08:73:06:06:1e:f8:31:32:ea:8d:1d:26:a5:5f:ee:b2:d7:
6b:b0:83:fd:6e:be:57:38:01:5d:23:2c:8b:ae:93:c6:1f:ce:
93:82:9a:aa:31:b6:13:41:a6:10:65:65:7a:c7:83:f5:8d:4c:
98:24:c3:62:45:06:9e:bd:a8:dc:06:35:af:9b:55:e7:64:e4:
a6:96:c6:dc:f0:fe:a9:e7:1f:ea:ab:27:93:f6:c6:db:8f:9d:
00:4b:16:50:5a:78:cd:76:3f:cc:a1:2d:60:5a:1c:7c:b1:1e:
40:63:a2:26:b7:c0:5f:a0:6a:a9:ef:e2:6b:55:92:17:fa:74:
48:68:d7:41:01:5d:db:2d:1f:6b:cb:d3:6a:ba:86:2c:ea:10:
1c:33:89:f4:ae:be:ff:e9:ab:4d:e8:d8:c8:ce:a3:83:b2:9b:
3c:ab:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client