
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa
File: br-29AWB_zXXo-i8bSZGqvQzOMw.roa (raw, json)
Hash identifier: /rwai59S+cglkep7mxJzaW/2pA9rRmZVEndyHMkPFdg=
Subject key identifier: 6E:BF:B6:F4:05:81:FF:35:D7:A3:E8:BC:6D:26:46:AA:F4:33:38:CC
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01E5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa
Signing time: Tue 31 Mar 2026 07:39:54 +0000
ROA not before: Tue 31 Mar 2026 07:39:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 202.223.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6EBFB6F40581FF35D7A3E8BC6D2646AAF43338CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:06:47:bf:de:e6:9f:f2:76:39:3b:cb:a8:
a7:e2:00:c8:f8:26:05:33:2b:d1:d9:35:94:82:e1:
72:ce:44:aa:bd:f1:91:0f:79:67:f4:fd:74:b6:f6:
cd:aa:2c:8b:99:06:25:9f:74:09:fd:70:8f:e7:ab:
51:69:50:9d:06:49:c3:e3:9d:27:34:5a:17:b3:3e:
90:0d:2d:6d:04:99:00:b6:65:30:73:34:c6:d3:a2:
2d:35:54:45:40:b6:4e:13:3b:76:43:37:78:5e:e1:
54:07:b4:58:73:4c:7b:8f:31:11:07:50:48:7a:7c:
77:a8:70:50:2d:6f:16:0c:3b:41:89:86:7d:0c:2a:
eb:ad:4e:47:9e:61:43:bb:dd:ff:15:5b:53:24:d7:
6a:7a:f2:c5:94:fb:09:1b:5b:87:1b:83:2c:de:53:
1f:e0:66:2f:0d:02:d2:51:25:a3:4f:dc:aa:5e:10:
9a:49:64:85:da:cc:20:4b:ad:af:83:1f:f1:f0:03:
42:eb:2b:75:8f:de:40:83:f6:57:f2:6a:43:f2:ef:
a0:54:62:02:57:a1:de:93:85:5d:01:c4:e9:c0:0a:
1c:3c:27:d9:f1:2c:d4:42:04:bf:62:24:01:01:15:
2d:e3:17:43:f1:90:03:14:1a:fd:c2:9b:0f:96:10:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:B6:F4:05:81:FF:35:D7:A3:E8:BC:6D:26:46:AA:F4:33:38:CC
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
26:0e:1c:b4:35:68:8e:a0:ad:a4:4b:c2:71:03:42:85:e0:cc:
ac:5b:58:b8:b4:26:86:c4:e0:f8:79:71:ac:b6:96:39:68:3e:
3f:d3:b9:81:ab:1c:84:77:dd:a9:2e:91:5f:02:aa:2b:88:1f:
44:42:21:3b:c3:ab:58:9a:0c:92:99:0c:98:87:8d:46:aa:c2:
73:f5:04:65:69:a8:44:8d:72:92:24:66:2c:7d:e4:dc:f4:82:
b1:62:fe:d2:4f:1b:6b:9f:2f:7c:7d:d5:84:8d:50:62:71:a8:
16:9d:f6:f1:57:3c:8b:e3:56:26:13:0b:31:e9:2b:da:0e:65:
59:94:94:e2:a1:f9:9f:e2:50:0a:5b:d6:70:e2:d8:0e:0a:34:
1b:12:aa:23:d5:a2:3c:4d:5a:55:26:05:7c:7e:7f:09:74:d1:
fc:4d:0c:90:c7:cb:d6:7a:4c:76:db:52:40:88:36:f8:f1:29:
c6:ae:f5:7a:f4:da:55:a5:de:5c:15:03:64:56:80:70:a6:a7:
9c:6f:d2:46:1e:a9:9d:10:2c:71:f0:3c:91:b9:a1:c7:1c:a9:
f4:21:84:95:da:85:32:8d:73:b2:97:7c:08:62:e2:c0:3a:33:
17:37:25:61:b4:13:fa:1b:c5:1f:48:9d:a5:96:ea:29:44:2e:
e5:87:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:12 2026 by rpki-client