
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvMGBY0uKuko_QkS2mxzwJGseZE.roa
File: bvMGBY0uKuko_QkS2mxzwJGseZE.roa (raw, json)
Hash identifier: nhjSpSqkx8+h3VM4pMlwwwxM0ZSRtxpDHEbam6OUITU=
Subject key identifier: 6E:F3:06:05:8D:2E:2A:E9:28:FD:09:12:DA:6C:73:C0:91:AC:79:91
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1513
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvMGBY0uKuko_QkS2mxzwJGseZE.roa
Signing time: Tue 31 Mar 2026 07:58:51 +0000
ROA not before: Tue 31 Mar 2026 07:58:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5395 (0x1513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:58:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6EF306058D2E2AE928FD0912DA6C73C091AC7991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:19:05:34:fa:9b:76:86:2c:e5:75:1a:7d:
d6:97:37:c6:c2:c5:5a:5f:f2:69:71:1a:04:4f:c7:
4c:cd:ef:68:2b:f8:2f:0a:4f:07:7d:44:63:9b:f7:
22:7d:37:36:aa:b5:db:99:b4:e9:2f:03:0a:62:34:
8c:3c:b7:c5:73:4b:e6:9e:b5:c7:de:30:7f:13:2b:
a3:42:50:de:dc:5d:ec:0a:cf:81:20:ce:86:21:22:
00:a0:47:ad:29:54:16:b7:ec:90:c6:a7:4c:20:39:
73:6a:9a:56:b2:3d:e9:8d:db:1b:bf:7b:2d:64:31:
31:12:97:99:fd:52:4a:3f:ae:75:b3:36:11:bb:2c:
92:52:c5:91:f9:2e:b8:e2:7a:97:c5:d5:ab:9e:9b:
a2:ec:d8:7e:85:a3:56:18:02:be:50:a9:97:61:14:
65:60:6a:4d:e7:91:66:80:8d:02:4f:71:d2:6f:82:
00:6b:6c:1c:09:1c:4a:e0:7b:23:93:93:4b:66:cd:
1d:df:2e:7f:5c:6c:41:78:81:5f:08:f4:20:f4:23:
ed:a1:9d:f9:f5:c0:b7:c5:6c:60:f7:25:29:74:69:
ef:bc:9f:0e:fa:45:01:d2:b6:ab:34:16:31:b1:5d:
84:f0:da:6d:ae:14:2d:14:ba:c3:3b:b1:f2:0a:ff:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F3:06:05:8D:2E:2A:E9:28:FD:09:12:DA:6C:73:C0:91:AC:79:91
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bvMGBY0uKuko_QkS2mxzwJGseZE.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:7f:5b:97:b2:11:d0:a1:e2:08:3d:7b:bb:21:0b:b7:6c:1d:
aa:4f:ba:c1:25:40:0a:50:59:ea:6d:27:e4:fb:44:3f:84:40:
db:c9:83:3e:d0:6c:a6:9f:60:76:9e:5d:31:1e:fe:e5:e2:c3:
a6:42:e0:06:01:a9:dc:7a:51:a9:e9:97:c1:5a:63:af:0b:79:
97:7e:fe:b9:03:b9:f5:14:46:b1:82:54:62:97:c9:42:02:2f:
96:a9:25:eb:e7:99:e8:18:6b:12:13:9c:a5:cc:91:2a:1e:ff:
95:d7:1c:e0:0d:e6:e4:8b:59:dd:f1:b5:40:98:db:7e:17:a9:
56:95:4b:f1:c4:3d:98:5a:08:75:89:30:5c:9b:18:4c:ee:aa:
e1:67:06:60:ba:09:b5:18:f5:d5:5e:bd:42:4c:14:46:8b:c8:
b8:75:b6:ab:bd:71:bd:49:4b:8f:9c:9d:af:30:b0:46:e9:fe:
84:bf:61:20:fe:61:7c:7c:f1:4c:23:ff:b1:13:63:25:9f:a8:
61:5d:56:6d:bc:64:7a:c7:19:95:5d:15:c7:9d:43:8d:6c:67:
a5:b9:6c:41:80:d2:15:b8:c8:69:c8:3e:f3:3a:16:f0:af:a0:
2d:cf:d1:f0:3e:85:1d:c8:78:15:57:54:85:2a:5e:d3:9e:07:
0f:31:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client