
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa
File: BRU9l6P-9V4Za9SuTQffAaXX5jE.roa (raw, json)
Hash identifier: KIlOEqLEymANjeQuRwPUC75PypE1mwRVQei4EYboh+U=
Subject key identifier: 05:15:3D:97:A3:FE:F5:5E:19:6B:D4:AE:4D:07:DF:01:A5:D7:E6:31
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0511
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa
Signing time: Tue 31 Mar 2026 08:19:22 +0000
ROA not before: Tue 31 Mar 2026 08:19:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 59.157.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=05153D97A3FEF55E196BD4AE4D07DF01A5D7E631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:0d:49:7b:f9:37:ad:82:bd:99:16:e3:f1:
7f:dc:7c:06:7c:59:4f:cd:87:26:28:ba:07:79:b3:
f9:f4:89:af:41:a4:a5:19:72:f1:48:6c:fa:68:53:
9a:4c:03:10:49:91:e2:3f:0b:75:fa:7a:78:f0:3c:
59:37:b5:77:5b:88:5a:ee:3e:0b:89:cb:b9:07:f9:
62:72:15:fb:35:8b:c9:6c:8d:cf:69:86:f7:cf:12:
e7:ea:ab:f0:e9:be:81:ca:08:19:9d:58:f0:b2:fc:
46:48:82:a3:9d:85:c7:67:cb:91:22:80:33:29:8a:
48:49:af:e9:e7:17:c2:19:9b:9a:a3:97:38:17:da:
d3:59:f6:2e:7b:98:98:07:e0:6e:93:4a:a4:9b:a7:
2a:7e:17:71:e2:8c:50:e5:45:56:ee:9e:10:49:dd:
6c:63:53:2b:23:5f:7c:21:f1:19:b8:38:f0:0a:1d:
88:b1:f7:70:d5:0f:ff:14:0f:b8:15:54:62:b2:18:
a5:89:b6:b8:ab:5c:1f:83:39:0a:d4:7e:8f:a9:14:
04:01:53:37:86:d7:23:fe:06:28:54:1f:bf:91:3a:
c3:92:b9:54:62:81:16:a3:1b:03:f9:2e:91:c3:06:
53:ea:c0:19:e8:cd:7e:e4:94:24:a9:66:c3:cc:e8:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:15:3D:97:A3:FE:F5:5E:19:6B:D4:AE:4D:07:DF:01:A5:D7:E6:31
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa
sbgp-ipAddrBlock: critical
IPv4:
59.157.224.0/19
Signature Algorithm: sha256WithRSAEncryption
83:a3:ca:98:81:92:2a:ed:c2:65:5e:ae:9f:9f:2f:b8:51:ab:
50:05:22:b8:87:05:9a:92:1f:26:97:47:32:38:aa:5e:6d:4b:
68:1c:86:cd:c1:c1:94:8e:77:98:27:26:06:2e:7b:37:67:61:
d8:97:a7:7c:0e:b1:4b:33:f4:13:00:c0:d7:c6:82:13:23:3d:
37:7b:0c:61:9b:9c:52:98:a7:0c:98:2c:25:e3:40:4f:f8:b0:
d7:b3:68:ff:95:cb:e0:94:1c:c0:eb:b8:17:7d:17:ea:6b:a4:
f6:8b:0b:da:69:9d:71:01:b3:39:50:0e:74:eb:20:0a:4e:56:
e3:b0:ff:e2:9d:e6:02:ad:78:4f:22:df:92:c2:2d:dc:17:61:
71:92:6e:0c:4a:f4:27:c7:bc:2e:2d:76:a3:16:d6:7f:86:72:
e2:d9:fb:80:62:83:0a:c0:aa:da:82:cb:80:a9:b1:a7:41:49:
a8:6e:52:42:da:0d:43:d7:d3:d1:a5:2c:80:d1:3f:a9:d1:e9:
8c:eb:ca:ce:bd:19:0e:1a:9b:65:94:b8:e5:d1:f8:5c:44:b2:
68:f2:34:a3:fc:fd:1a:b0:8e:07:2a:4b:27:44:6c:3d:46:de:
09:31:1c:6a:21:93:f7:bd:8d:40:9d:50:1b:e0:b8:96:5d:52:
5c:72:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:17 2026 by rpki-client