
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa
File: bx-nEbqjp2JS3_BcBECHaRjG6sU.roa (raw, json)
Hash identifier: OV/WQowCq8O2jDDwIk48lRCmPdU5BG+Wsu5ToOepeQE=
Subject key identifier: 6F:1F:A7:11:BA:A3:A7:62:52:DF:F0:5C:04:40:87:69:18:C6:EA:C5
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 5C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa
Signing time: Wed 20 May 2026 02:48:20 +0000
ROA not before: Wed 20 May 2026 02:48:20 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 220.247.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 02:48:20 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=6F1FA711BAA3A76252DFF05C0440876918C6EAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:e1:c3:87:9a:f5:34:4a:9d:4f:ec:6c:e2:
5e:3e:83:df:b5:13:62:c1:23:0d:07:e3:40:c3:d5:
8e:35:e6:f8:aa:e3:5b:53:8e:54:4b:e6:10:05:d4:
fc:02:ed:dc:b8:25:ad:2a:eb:de:76:70:50:55:23:
97:38:e0:f6:f9:ea:d6:ae:35:eb:10:c4:41:04:60:
b6:92:39:5e:f9:0a:33:d8:a5:8e:b5:c7:38:ba:cf:
75:51:3b:8d:77:02:25:16:ae:e1:92:d2:d4:07:b3:
aa:26:1c:96:76:38:b4:e5:2c:3f:62:f4:61:5c:2e:
51:97:f1:1b:13:fc:5d:09:93:c6:d4:e0:70:25:5d:
a4:10:ba:ba:ed:be:d9:2d:3f:0e:9a:81:bc:6a:3a:
2f:74:d8:73:60:1e:04:df:52:cb:3a:6a:9b:86:e8:
64:3d:72:0c:be:61:48:43:3a:a9:eb:9d:ed:2a:4f:
87:10:f9:5f:7a:13:a8:ab:9f:c8:13:25:7e:a5:3f:
34:86:69:c0:36:ad:af:f2:b4:c4:37:34:87:29:d1:
73:76:13:ea:15:d6:cd:0b:30:65:5c:2e:a9:66:97:
24:f3:bd:ce:32:13:6f:ec:2d:c4:70:5f:ac:00:ec:
d0:b9:c9:08:1a:b6:fb:61:3b:ab:97:00:64:a3:5a:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:A7:11:BA:A3:A7:62:52:DF:F0:5C:04:40:87:69:18:C6:EA:C5
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.247.0.0/17
Signature Algorithm: sha256WithRSAEncryption
bf:89:df:b2:80:84:d0:1c:8b:14:9a:0c:01:83:12:0f:26:28:
44:f4:2e:aa:2d:ff:33:c1:a1:52:63:36:b9:7b:66:d5:ed:6b:
97:a7:be:d7:ac:d5:c8:a2:c7:01:b2:5b:53:bb:34:b5:07:1c:
09:51:4d:0e:33:0a:0a:23:c7:11:9b:2c:16:99:77:dd:1b:3f:
af:23:41:80:49:96:b4:ac:44:34:fd:f6:0c:d6:f7:3e:c3:77:
9c:58:99:f3:75:f0:eb:26:4f:05:eb:98:db:96:c7:03:0b:61:
07:69:35:43:ae:26:3b:36:d4:6c:42:aa:bd:7d:5f:42:2a:dc:
97:23:92:29:f6:8a:dc:4d:f1:eb:2f:4a:0f:b0:8f:bf:b6:fb:
c6:6f:58:af:e1:4e:22:7e:8a:34:5b:31:d5:60:a2:b5:b0:bb:
ca:3d:5f:f1:74:99:15:8e:58:0c:41:03:45:80:d4:85:7a:52:
ff:cb:5f:0b:8b:bf:ba:0e:18:3f:69:76:76:95:18:a0:97:67:
8d:83:ea:59:ff:b2:b9:e7:0c:b2:32:05:35:01:52:58:8e:41:
38:8b:17:42:f7:c2:ed:3a:11:6f:7f:5d:14:90:d9:5b:9b:ea:
18:1c:13:a4:a5:ac:7f:ef:04:04:c0:90:f2:44:eb:3e:25:28:
f3:df:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:14 2026 by rpki-client