
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/BIzjBH7oRG93IWMnIm_k3B-F6UU.roa
File: BIzjBH7oRG93IWMnIm_k3B-F6UU.roa (raw, json)
Hash identifier: qiv/tJ19e1FSRSJUPG6TwfIrFOQ1iz07iVnhYV/Jo9U=
Subject key identifier: 04:8C:E3:04:7E:E8:44:6F:77:21:63:27:22:6F:E4:DC:1F:85:E9:45
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 82
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/BIzjBH7oRG93IWMnIm_k3B-F6UU.roa
Signing time: Sun 01 Mar 2026 01:31:35 +0000
ROA not before: Sun 01 Mar 2026 01:31:35 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Mar 1 01:31:35 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=048CE3047EE8446F77216327226FE4DC1F85E945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:24:9f:8a:64:34:f3:4a:a7:31:4d:b8:2a:
ca:d2:02:a7:43:da:98:41:42:c1:39:b2:e9:72:e4:
fd:f6:f3:2a:1a:34:5f:b4:fa:67:27:b7:5c:2e:21:
4c:99:4a:7b:91:4b:26:8c:be:97:f2:3b:62:30:3b:
46:f2:4d:4b:ac:87:f2:c4:b8:18:64:55:3e:9d:a3:
95:1c:f0:41:a1:b9:21:fb:d2:81:d5:3e:0c:94:8e:
be:ff:45:fd:28:47:c8:48:92:4b:84:64:8e:ef:e5:
8c:d6:2c:0f:c8:6b:41:34:81:79:f4:a6:8f:10:e3:
5e:d2:41:7c:1b:43:65:a4:b6:68:37:95:3d:db:65:
e2:bc:95:fe:8c:3d:6d:27:f8:5f:45:94:ce:9d:89:
7c:25:19:17:f2:18:6b:6c:f6:a4:85:9e:21:f2:d7:
d3:5e:e7:50:86:a9:f7:b4:31:c3:5c:71:bf:6d:f9:
fe:5d:b1:11:22:38:4b:d8:f3:38:58:2e:0d:56:fc:
d6:4f:23:94:83:0c:f2:f4:93:cb:77:fe:25:83:1b:
b4:fe:e2:c2:f7:85:e0:23:10:a3:ec:c4:f7:e6:12:
32:cb:a1:43:05:43:5d:5a:04:ee:ba:55:a3:98:ff:
78:16:f6:15:a3:15:2b:16:76:d9:94:76:78:db:61:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:E3:04:7E:E8:44:6F:77:21:63:27:22:6F:E4:DC:1F:85:E9:45
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/BIzjBH7oRG93IWMnIm_k3B-F6UU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:3e:54:06:c6:fc:c6:52:f0:ac:14:f8:aa:d9:6d:58:5a:cc:
70:8c:89:d3:94:93:63:22:22:7d:d2:ad:bb:86:04:18:70:26:
32:c4:ff:52:94:40:39:16:3a:89:50:7c:9e:66:fb:8d:e0:13:
05:1d:de:6a:07:e6:df:70:7c:c1:e4:d9:c0:f6:1f:3e:c9:90:
bc:c4:b9:f8:15:d1:fe:c9:cc:2e:ce:c1:6e:7b:c0:56:02:16:
7c:b4:dd:69:29:b8:48:ca:79:6d:24:27:f6:cd:72:57:99:a8:
75:c6:9d:1d:a5:2d:53:ed:46:96:0c:79:c0:c6:b1:3b:8a:31:
da:6f:a0:90:66:e5:42:af:14:54:73:f3:28:8b:38:c7:8a:89:
00:1e:32:3b:d4:26:dd:64:e8:ae:2c:53:b2:88:c3:d3:8e:00:
72:84:51:85:cf:45:3f:ed:7d:a5:6a:aa:ea:02:6f:42:84:bf:
95:f2:eb:17:95:85:f7:07:33:3c:1e:b1:2e:a8:46:83:f0:18:
8a:90:2d:d1:ba:dc:b9:79:db:b7:9e:80:f3:48:9e:26:f2:68:
ec:eb:88:5c:1e:37:ea:cc:75:4d:f7:6f:31:21:b2:2d:08:0b:
ac:cc:df:e3:87:8a:09:d9:47:88:52:cd:3b:8d:59:6d:f5:f2:
79:90:d8:f4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD
NDYyOTRBNUQ1NjQzN0UxOUExMUFFRjlGQjlCODc3NjkwMTQzRTAeFw0yNjAzMDEw
MTMxMzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA0OENFMzA0N0VFODQ0
NkY3NzIxNjMyNzIyNkZFNERDMUY4NUU5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHvySfimQ080qnMU24KsrSAqdD2phBQsE5suly5P328yoaNF+0
+mcnt1wuIUyZSnuRSyaMvpfyO2IwO0byTUush/LEuBhkVT6do5Uc8EGhuSH70oHV
PgyUjr7/Rf0oR8hIkkuEZI7v5YzWLA/Ia0E0gXn0po8Q417SQXwbQ2Wktmg3lT3b
ZeK8lf6MPW0n+F9FlM6diXwlGRfyGGts9qSFniHy19Ne51CGqfe0McNccb9t+f5d
sREiOEvY8zhYLg1W/NZPI5SDDPL0k8t3/iWDG7T+4sL3heAjEKPsxPfmEjLLoUMF
Q11aBO66VaOY/3gW9hWjFSsWdtmUdnjbYflXAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUBIzjBH7oRG93IWMnIm/k3B+F6UUwHwYDVR0jBBgwFoAU+8RilKXVZDfhmhGu
+fubh3aQFD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy04UmlsS1hWWkRmaG1oR3UtZnVi
aDNhUUZENC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMTI0Ny9CSXpqQkg3b1JHOTNJV01uSW1fazNCLUY2VVUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCnRFUMA0GCSqGSIb3DQEBCwUAA4IBAQDNPlQGxvzGUvCsFPiq2W1Y
WsxwjInTlJNjIiJ90q27hgQYcCYyxP9SlEA5FjqJUHyeZvuN4BMFHd5qB+bfcHzB
5NnA9h8+yZC8xLn4FdH+ycwuzsFue8BWAhZ8tN1pKbhIynltJCf2zXJXmah1xp0d
pS1T7UaWDHnAxrE7ijHab6CQZuVCrxRUc/MoizjHiokAHjI71CbdZOiuLFOyiMPT
jgByhFGFz0U/7X2laqrqAm9ChL+V8usXlYX3BzM8HrEuqEaD8BiKkC3Ruty5edu3
noDzSJ4m8mjs64hcHjfqzHVN928xIbItCAuszN/jh4oJ2UeIUs07jVlt9fJ5kNj0
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:19 2026 by rpki-client