
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/BRRRRBF8oB-o6Zhz5G3NF5JNEVo.roa
File: BRRRRBF8oB-o6Zhz5G3NF5JNEVo.roa (raw, json)
Hash identifier: +Jl4V1CoXlWmdzG9Z9QEZAqeTXVKOAdbRK+MA+JTd6o=
Subject key identifier: 05:14:51:44:11:7C:A0:1F:A8:E9:98:73:E4:6D:CD:17:92:4D:11:5A
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 58
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/BRRRRBF8oB-o6Zhz5G3NF5JNEVo.roa
Signing time: Wed 20 May 2026 02:24:08 +0000
ROA not before: Wed 20 May 2026 02:24:08 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 220.158.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 02:24:08 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=05145144117CA01FA8E99873E46DCD17924D115A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:ee:ed:a5:3e:5f:8e:89:bb:b6:1c:b8:e4:
bd:87:6f:94:a0:1f:52:0d:41:80:df:71:c9:37:34:
05:24:1f:d1:fa:c9:25:ee:d2:58:49:dc:72:13:5c:
2b:c6:ae:28:f6:55:41:5b:1e:7b:cb:51:f7:c8:7e:
17:1d:4b:64:f4:0c:28:95:5d:b0:52:0e:2a:87:46:
74:6f:4e:91:be:3b:a6:d5:73:69:ba:8a:db:66:ec:
ec:bf:68:c1:ce:ad:eb:64:80:c7:29:2f:fc:f9:42:
8e:2e:ec:d4:37:81:f6:87:46:fc:70:bf:fe:47:ff:
9e:66:99:e1:30:39:91:91:f1:46:03:91:fd:37:59:
bd:8e:3d:8e:9e:d2:7c:08:4c:d5:55:68:4f:2e:c8:
7a:09:e4:12:a8:cf:92:e1:e2:90:83:b7:a7:ca:32:
e0:ca:4c:25:19:63:0a:dc:56:9f:24:ee:19:d9:81:
e9:f9:c5:59:50:53:ef:c0:85:fd:ca:8a:a6:a8:55:
be:86:91:ee:16:29:20:bc:4e:81:25:a1:47:26:42:
d7:cc:84:0a:66:4d:99:30:23:2c:f7:5a:0b:41:6b:
ff:4f:da:08:78:99:d2:b0:5c:34:25:63:fb:98:d1:
07:e8:50:bc:f1:c0:ae:ad:01:e3:22:77:41:ac:d2:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:51:44:11:7C:A0:1F:A8:E9:98:73:E4:6D:CD:17:92:4D:11:5A
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/BRRRRBF8oB-o6Zhz5G3NF5JNEVo.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.0.0/20
Signature Algorithm: sha256WithRSAEncryption
37:0e:74:cc:39:e0:1d:cf:10:ed:c1:87:3c:56:59:67:27:51:
53:c0:fc:91:cb:3b:75:d4:0c:e2:5b:92:75:31:7d:6d:81:e2:
03:7a:c4:67:b1:28:4b:b6:d2:fa:81:b5:eb:4f:c5:83:ee:df:
01:77:4e:2d:b5:20:64:91:58:e3:7e:95:fe:32:cf:b0:4e:23:
41:2c:f1:8a:b7:5d:f4:68:11:f1:98:cb:40:75:0b:12:2d:68:
a2:75:cc:99:28:3b:7d:ff:64:1b:0a:e1:af:36:dd:43:b0:2f:
a1:31:e7:a6:a1:95:fe:83:cc:55:b6:ea:9b:1a:f1:35:0c:ef:
c8:b2:ca:f0:b2:fe:0e:68:36:82:2e:b7:ff:ae:bc:20:dc:a8:
19:24:47:ea:5d:88:57:5a:c4:87:b6:76:2e:2c:bf:fd:78:8f:
0e:a5:c4:2a:5e:12:40:ea:59:71:de:e5:65:1f:54:7c:c8:f4:
7f:e6:d1:13:38:33:3c:88:b9:ff:30:25:27:cf:d5:66:ff:06:
74:34:91:c1:02:c9:b2:3d:68:6d:db:a3:17:24:70:cc:ec:82:
0d:6c:f8:a0:b4:9b:b2:70:94:c7:15:27:0d:e9:30:e3:7a:6d:
73:c8:27:be:8d:52:f9:31:d0:cc:cd:1e:a1:00:c3:39:9c:e0:
10:2a:08:07
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUyMDAy
MjQwOFoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMDUxNDUxNDQxMTdDQTAx
RkE4RTk5ODczRTQ2RENEMTc5MjREMTE1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJw67u2lPl+Oibu2HLjkvYdvlKAfUg1BgN9xyTc0BSQf0frJJe7S
WEncchNcK8auKPZVQVsee8tR98h+Fx1LZPQMKJVdsFIOKodGdG9Okb47ptVzabqK
22bs7L9owc6t62SAxykv/PlCji7s1DeB9odG/HC//kf/nmaZ4TA5kZHxRgOR/TdZ
vY49jp7SfAhM1VVoTy7IegnkEqjPkuHikIO3p8oy4MpMJRljCtxWnyTuGdmB6fnF
WVBT78CF/cqKpqhVvoaR7hYpILxOgSWhRyZC18yECmZNmTAjLPdaC0Fr/0/aCHiZ
0rBcNCVj+5jRB+hQvPHArq0B4yJ3QazSz0MCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQFFFFEEXygH6jpmHPkbc0Xkk0RWjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvQlJSUlJCRjhvQi1vNlpoejVHM05GNUpORVZvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNyeADANBgkqhkiG9w0BAQsFAAOCAQEA
Nw50zDngHc8Q7cGHPFZZZydRU8D8kcs7ddQM4luSdTF9bYHiA3rEZ7EoS7bS+oG1
60/Fg+7fAXdOLbUgZJFY436V/jLPsE4jQSzxirdd9GgR8ZjLQHULEi1oonXMmSg7
ff9kGwrhrzbdQ7AvoTHnpqGV/oPMVbbqmxrxNQzvyLLK8LL+Dmg2gi63/668INyo
GSRH6l2IV1rEh7Z2Liy//XiPDqXEKl4SQOpZcd7lZR9UfMj0f+bREzgzPIi5/zAl
J8/VZv8GdDSRwQLJsj1obdujFyRwzOyCDWz4oLSbsnCUxxUnDekw43ptc8gnvo1S
+THQzM0eoQDDOZzgECoIBw==
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:01 2026 by rpki-client