
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwp2_kR-LlVYuQuahkd_x88MeFo.roa
File: bwp2_kR-LlVYuQuahkd_x88MeFo.roa (raw, json)
Hash identifier: M6swGdApTOF6PwJbnf31pAjn6sAxUBfNkqOoQaTc3K0=
Subject key identifier: 6F:0A:76:FE:44:7E:2E:55:58:B9:0B:9A:86:47:7F:C7:CF:0C:78:5A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1871
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwp2_kR-LlVYuQuahkd_x88MeFo.roa
Signing time: Tue 31 Mar 2026 08:05:59 +0000
ROA not before: Tue 31 Mar 2026 08:05:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6257 (0x1871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:05:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6F0A76FE447E2E5558B90B9A86477FC7CF0C785A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:d2:45:ad:27:77:d0:4c:0c:c8:62:ae:cf:
7e:27:f5:67:94:78:57:ef:0d:4c:41:59:ce:3f:28:
29:e5:ee:a7:c2:de:4c:61:a1:05:69:ad:e3:aa:5f:
5a:03:d9:6e:da:de:d1:f9:27:80:84:a8:fd:b4:b4:
d0:cf:e9:4b:45:6c:72:55:9c:4c:4f:20:79:ea:0c:
6d:00:7c:f8:52:13:dd:55:67:7e:b9:21:5f:24:c6:
f5:a0:e2:81:bf:b9:7c:ba:97:46:ef:36:97:51:9d:
51:25:b2:1a:ca:c4:e9:b3:43:f3:cc:fa:ff:dd:1c:
be:40:b2:9d:70:34:82:c2:9a:ae:94:cb:bc:dc:fa:
55:53:d5:10:62:6a:0f:16:17:f2:18:46:e4:fe:37:
b9:ef:18:00:8a:5d:c5:eb:a7:48:88:84:6b:38:59:
b1:56:4a:9d:fb:3f:89:e3:d7:35:aa:c9:ea:67:b8:
d0:3c:45:09:b2:1b:62:52:0c:76:d0:c0:f7:05:f8:
24:31:7f:88:64:84:18:20:bf:e3:d9:20:6f:ba:66:
13:a3:34:ec:2d:57:4c:70:e0:3a:37:9d:4a:24:cb:
ad:d9:c1:c1:d4:75:ec:2b:29:db:89:4b:d4:10:f7:
1c:e9:8d:ef:64:34:1f:48:9a:38:25:06:ed:fa:1a:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:76:FE:44:7E:2E:55:58:B9:0B:9A:86:47:7F:C7:CF:0C:78:5A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwp2_kR-LlVYuQuahkd_x88MeFo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.106.32.0/22
Signature Algorithm: sha256WithRSAEncryption
58:49:4f:bb:e0:51:d0:1c:aa:71:0a:7d:fc:98:4b:c2:ad:d0:
9f:6a:77:16:3d:2b:cc:55:b2:fd:a6:5d:78:bf:fa:7d:f2:4f:
33:eb:5c:f4:62:1f:2c:59:1f:ba:26:d8:ce:a3:80:ff:19:dd:
97:22:7f:b9:07:73:7b:b8:3b:5a:7d:6f:86:06:3d:2f:cb:e8:
65:d8:54:c9:b6:ab:65:e6:fc:0c:a2:b5:7a:f8:21:fc:1c:b1:
fc:22:79:e1:c2:33:1e:fe:45:4a:f0:cc:62:22:1b:c1:ab:02:
77:ab:b7:23:44:c0:ab:0c:dd:b3:04:f5:1d:55:57:9a:1e:c5:
78:6a:9d:e0:ac:fa:d7:ac:8f:40:23:d0:7d:29:e2:51:c5:d5:
5a:c4:9d:d3:ea:35:9b:d8:e8:c8:27:ee:1c:31:8a:b4:cd:21:
39:10:ee:e3:cf:68:f6:0e:73:1e:ff:5a:45:67:22:f7:f2:78:
92:78:f8:5c:2e:a5:8a:14:9f:ff:12:04:9d:3e:7c:87:58:d1:
62:0d:81:3f:d4:b2:53:8c:82:1e:f3:8b:ec:2c:2b:6b:67:83:
95:54:9f:0b:8d:0b:a3:fe:b7:7b:97:18:ea:44:89:e4:40:ab:
06:8e:e6:6f:c8:34:cd:ba:3a:4e:04:87:a8:dd:a5:11:4d:40:
ca:25:e3:bf
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGMEE3NkZFNDQ3RTJF
NTU1OEI5MEI5QTg2NDc3RkM3Q0YwQzc4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8DNJFrSd30EwMyGKuz34n9WeUeFfvDUxBWc4/KCnl7qfC3kxh
oQVpreOqX1oD2W7a3tH5J4CEqP20tNDP6UtFbHJVnExPIHnqDG0AfPhSE91VZ365
IV8kxvWg4oG/uXy6l0bvNpdRnVElshrKxOmzQ/PM+v/dHL5Asp1wNILCmq6Uy7zc
+lVT1RBiag8WF/IYRuT+N7nvGACKXcXrp0iIhGs4WbFWSp37P4nj1zWqyepnuNA8
RQmyG2JSDHbQwPcF+CQxf4hkhBggv+PZIG+6ZhOjNOwtV0xw4Do3nUoky63ZwcHU
dewrKduJS9QQ9xzpje9kNB9ImjglBu36GrxRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbwp2/kR+LlVYuQuahkd/x88MeFowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2J3cDJfa1ItTGxWWXVRdWFoa2RfeDg4TWVGby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaiAwDQYJKoZIhvcNAQELBQADggEB
AFhJT7vgUdAcqnEKffyYS8Kt0J9qdxY9K8xVsv2mXXi/+n3yTzPrXPRiHyxZH7om
2M6jgP8Z3Zcif7kHc3u4O1p9b4YGPS/L6GXYVMm2q2Xm/AyitXr4IfwcsfwieeHC
Mx7+RUrwzGIiG8GrAnertyNEwKsM3bME9R1VV5oexXhqneCs+tesj0Aj0H0p4lHF
1VrEndPqNZvY6Mgn7hwxirTNITkQ7uPPaPYOcx7/WkVnIvfyeJJ4+FwupYoUn/8S
BJ0+fIdY0WINgT/UslOMgh7zi+wsK2tng5VUnwuNC6P+t3uXGOpEieRAqwaO5m/I
NM26Ok4Eh6jdpRFNQMol478=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:59 2026 by rpki-client