
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20078/BsQHCCoJLaqPYS2f_dYAKe7hNXE.roa
File: BsQHCCoJLaqPYS2f_dYAKe7hNXE.roa (raw, json)
Hash identifier: Rx/Q/D/AlHGUfyz+fVNxaO5pIxOoLjXFbiNUvAEqq5g=
Subject key identifier: 06:C4:07:08:2A:09:2D:AA:8F:61:2D:9F:FD:D6:00:29:EE:E1:35:71
Certificate issuer: /CN=743A1EB16357957F5A77ED2333672D127569A553
Certificate serial: 02
Authority key identifier: 74:3A:1E:B1:63:57:95:7F:5A:77:ED:23:33:67:2D:12:75:69:A5:53
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dDoesWNXlX9ad-0jM2ctEnVppVM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20078/BsQHCCoJLaqPYS2f_dYAKe7hNXE.roa
Signing time: Wed 03 Jun 2026 07:11:21 +0000
ROA not before: Wed 03 Jun 2026 07:11:21 +0000
ROA not after: Tue 25 May 2027 02:13:41 +0000
asID: 131942
IP address blocks: 103.129.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20078/dDoesWNXlX9ad-0jM2ctEnVppVM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20078/dDoesWNXlX9ad-0jM2ctEnVppVM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dDoesWNXlX9ad-0jM2ctEnVppVM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743A1EB16357957F5A77ED2333672D127569A553
Validity
Not Before: Jun 3 07:11:21 2026 GMT
Not After : May 25 02:13:41 2027 GMT
Subject: CN=06C407082A092DAA8F612D9FFDD60029EEE13571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:d6:5e:fc:b5:0f:07:4f:60:63:11:bf:b4:
ae:fe:62:79:d1:39:b1:92:a7:fe:8b:51:9e:f5:61:
24:92:e5:0c:c8:09:1a:60:eb:d7:6e:76:01:48:4e:
c3:b6:35:b1:16:27:01:88:2d:82:7f:e1:7d:d4:96:
24:74:f0:74:09:3b:6e:36:34:7f:a0:9f:b3:d5:e9:
8f:98:9c:03:fc:4f:9e:4d:bd:a0:e3:12:de:e4:74:
ed:af:a4:db:24:e4:a3:a0:b1:fb:96:61:ed:0e:17:
68:92:8d:4e:95:40:37:c8:97:42:c7:e8:4b:70:da:
5c:16:63:dd:18:b4:51:3b:e5:2e:10:89:09:6f:de:
a1:59:39:69:54:e0:56:1f:23:a9:66:ad:e0:7f:b0:
45:49:ea:dd:28:4d:e0:ff:58:f9:93:69:1f:20:9c:
21:5d:29:3a:ba:a1:b8:9f:21:af:89:fb:fe:07:4d:
93:3c:10:cb:45:b6:8d:7c:d2:46:db:d4:e6:fd:aa:
3d:ca:21:9c:38:ca:8b:4d:dd:b4:4f:e0:49:ed:60:
b5:f2:aa:47:9a:e2:15:b5:d4:39:1f:ae:db:0a:fc:
2e:5f:5a:c4:a8:77:e4:2c:67:9c:8c:08:10:cf:9a:
ed:e3:3c:11:d8:f7:7f:eb:42:58:8e:ea:a9:cf:5f:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:07:08:2A:09:2D:AA:8F:61:2D:9F:FD:D6:00:29:EE:E1:35:71
X509v3 Authority Key Identifier:
keyid:74:3A:1E:B1:63:57:95:7F:5A:77:ED:23:33:67:2D:12:75:69:A5:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20078/dDoesWNXlX9ad-0jM2ctEnVppVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dDoesWNXlX9ad-0jM2ctEnVppVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20078/BsQHCCoJLaqPYS2f_dYAKe7hNXE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.28.0/22
Signature Algorithm: sha256WithRSAEncryption
70:8b:00:fc:b4:3a:2c:55:d2:03:48:6a:fc:1b:d9:03:28:8e:
a5:e1:2c:d8:83:fc:bd:a0:00:9c:15:6d:b9:1b:d2:46:14:e6:
e6:44:7f:27:d1:85:6f:cc:b0:29:e0:76:bf:31:3e:aa:89:62:
ec:0b:0f:08:d4:06:b5:d1:f1:8b:c2:3f:ba:bb:44:23:dc:7f:
e6:35:14:3b:a0:0a:55:01:67:8b:df:21:fe:f0:a9:98:b4:08:
f2:42:c4:16:f9:cb:88:fa:a4:92:89:43:b3:ec:de:b2:12:57:
ca:10:89:bd:69:35:48:ba:e4:c1:36:c8:ee:49:1b:bf:22:bc:
8d:f0:0f:04:e0:32:09:02:5c:2b:bc:a1:9c:9e:d8:4c:4e:dd:
2e:34:a3:18:b2:c9:8f:cb:b7:7f:9c:84:0f:ed:cd:f2:5c:cb:
15:64:3a:1c:24:7a:45:cf:b1:3b:b0:48:e6:ea:ce:a5:ea:f4:
c6:2b:eb:c5:ba:c2:ac:46:19:82:cd:bb:80:74:2d:8e:5e:4d:
f8:03:e3:59:a6:c3:db:d6:3c:0d:8a:1c:08:c8:bc:02:3d:4f:
bc:e8:da:7a:70:7d:3a:b7:f2:82:74:61:5c:71:ee:07:42:e3:
35:b8:3a:7e:96:7b:a1:2d:c8:ec:be:02:d5:99:ed:21:38:68:
98:4d:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:27 2026 by rpki-client