
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa
File: BJXxpS8ma47EACrq66EFYDZzuD0.roa (raw, json)
Hash identifier: NI7hb9XKl9X6x/E9zfFlpyZ44H4hyF+0T+SaXBAS8O0=
Subject key identifier: 04:95:F1:A5:2F:26:6B:8E:C4:00:2A:EA:EB:A1:05:60:36:73:B8:3D
Certificate issuer: /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial: 28
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa
Signing time: Tue 31 Mar 2026 08:44:00 +0000
ROA not before: Tue 31 Mar 2026 08:44:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7677
IP address blocks: 157.101.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Validity
Not Before: Mar 31 08:44:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0495F1A52F266B8EC4002AEAEBA105603673B83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:94:6b:25:f4:69:c8:7a:a6:63:9a:04:2f:
47:a7:60:5a:3c:3d:03:0c:8f:41:fa:b2:6c:77:4f:
e8:22:5c:4c:55:41:00:e6:78:67:62:ce:54:62:84:
bb:c7:76:6e:35:af:51:47:88:15:0a:0a:68:f5:1f:
f8:ec:74:69:fb:33:6b:ae:e0:e1:73:8d:b9:58:4e:
89:8d:d8:9e:0f:c3:da:54:4c:9b:8c:cf:d0:77:27:
a3:41:36:cf:44:2e:b8:a5:18:48:df:4f:fb:02:bf:
46:ec:4d:52:1d:11:da:dd:9c:d7:83:75:f9:e9:2f:
c7:56:92:e9:26:14:9e:61:6e:cb:b5:ff:62:c4:ad:
ab:ba:80:01:ab:e5:de:2c:49:46:37:e3:d8:93:58:
f6:5f:6f:49:82:16:c7:bc:d7:4d:33:c9:5c:37:30:
74:5b:ae:79:24:23:ad:59:7b:15:f5:6b:99:3c:2c:
36:b7:b8:3d:ce:d2:30:b4:86:99:1f:be:05:0c:e7:
8d:dd:64:ad:ce:92:18:8f:44:ab:a6:38:25:2e:5e:
49:79:7c:cc:c3:83:68:54:48:d6:e6:6d:5c:a0:5b:
1f:b2:32:db:55:fb:60:75:19:51:6c:57:d3:b1:a5:
1b:e0:2e:c8:5b:2f:85:cd:e1:23:c9:9d:97:c4:ad:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:F1:A5:2F:26:6B:8E:C4:00:2A:EA:EB:A1:05:60:36:73:B8:3D
X509v3 Authority Key Identifier:
keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa
sbgp-ipAddrBlock: critical
IPv4:
157.101.255.0/24
Signature Algorithm: sha256WithRSAEncryption
71:39:fe:49:d9:2b:49:b6:5c:be:35:65:ed:ec:82:05:7f:a5:
69:7d:0f:f3:6e:ea:29:00:6b:08:f6:43:61:a7:75:45:d6:90:
79:9b:93:1f:b5:52:e7:d5:b0:ab:9a:e7:3d:e1:e8:2b:53:14:
0b:47:cc:cc:dd:1b:1f:b2:cf:b1:ab:6d:e0:05:ca:b8:7a:dc:
ee:a8:73:98:94:44:9b:70:29:27:df:54:e6:a3:61:53:c2:d4:
2d:5f:4c:2b:ba:b4:62:5c:59:77:c5:75:1c:c1:35:06:99:d7:
80:db:03:83:64:f1:8f:de:1e:a0:2c:fd:84:89:5d:5c:9d:50:
31:97:4d:82:bf:42:33:3d:14:65:3f:8f:c0:99:64:52:8b:4b:
cd:a5:af:ef:40:f9:b9:94:fa:2f:91:10:ae:26:b7:c1:df:64:
74:c6:5c:86:ee:dc:b6:24:45:b0:95:41:75:49:19:c3:7f:f9:
b2:9a:fb:38:8e:d3:11:d2:44:1c:59:26:68:7b:f7:17:0d:d7:
15:f2:df:1a:ef:b0:16:4a:1e:d2:e7:ec:38:a3:ae:42:4e:ee:
0b:4a:fd:2e:fd:33:14:bd:5c:12:b3:06:81:22:37:29:9f:1f:
43:30:7c:37:a6:eb:4f:1a:c0:f8:27:a6:89:ce:c7:31:a0:6e:
aa:76:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:32 2026 by rpki-client