
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nBFo8zRWZ04lZmKvrl-hYtMgqr0.roa
File: nBFo8zRWZ04lZmKvrl-hYtMgqr0.roa (raw, json)
Hash identifier: cCzznSSCEY2DFgPJAYAmdTw2OyQd5/TZ8MUTpUYgmwc=
Subject key identifier: 9C:11:68:F3:34:56:67:4E:25:66:62:AF:AE:5F:A1:62:D3:20:AA:BD
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 06A6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nBFo8zRWZ04lZmKvrl-hYtMgqr0.roa
Signing time: Tue 31 Mar 2026 07:28:19 +0000
ROA not before: Tue 31 Mar 2026 07:28:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 220.216.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Mar 31 07:28:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9C1168F33456674E256662AFAE5FA162D320AABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:5a:01:29:1e:e1:98:ec:0a:76:1b:55:94:
c5:06:b5:0b:52:69:30:c1:e3:78:74:f7:65:bf:ab:
d5:60:f6:29:e2:9e:53:c1:3e:de:ef:cf:b7:3a:ff:
b8:3c:f9:67:87:03:52:26:38:39:e0:ff:8c:3f:8a:
2e:a5:f8:21:72:17:3c:ee:2a:1d:74:9f:e9:3d:cf:
85:5d:15:07:fa:1b:d7:38:c9:a7:44:e0:3c:37:8f:
43:68:23:56:4a:93:d4:0a:bc:d4:27:e2:10:a8:dd:
e3:18:67:cb:f6:de:65:ea:09:e3:05:a4:f3:1b:1e:
88:3b:52:6b:8d:90:7a:6b:e5:56:58:a9:67:5f:a9:
5f:80:ea:82:4e:5f:04:4f:01:27:dd:07:1b:50:40:
4e:27:f5:82:fd:17:98:cb:ce:b5:f9:b8:26:f3:d3:
bc:d2:18:0d:82:99:a1:83:a2:91:f0:73:54:bd:06:
fb:a7:70:d4:09:69:1a:24:35:9c:8f:3a:8f:a7:b6:
0a:c0:5e:5f:7b:98:35:84:c1:c1:94:bd:6c:a5:01:
5f:de:36:b9:5f:95:6e:68:76:6b:a2:7f:bf:4b:4a:
50:ad:93:57:c3:9f:e0:08:5e:01:c6:07:28:97:56:
97:6f:1d:a9:2e:18:f2:dc:66:45:10:d5:87:cb:18:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:68:F3:34:56:67:4E:25:66:62:AF:AE:5F:A1:62:D3:20:AA:BD
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nBFo8zRWZ04lZmKvrl-hYtMgqr0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.216.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:ff:bc:19:c6:91:f7:1f:ec:0e:b2:19:df:01:a0:20:cc:c4:
d3:14:52:85:15:73:91:b4:f3:1f:ba:34:f2:a8:d9:ca:58:3c:
1c:e5:95:83:35:16:7a:ea:1a:a8:8d:30:71:fc:27:8b:cc:05:
28:c4:b3:79:a5:28:f1:9b:0b:ed:74:6e:74:10:bd:71:06:fc:
2b:b0:4d:bd:51:dc:ac:48:e9:7f:58:22:cf:5f:75:ca:c4:9f:
f9:28:00:2c:56:02:ac:06:ad:28:f5:12:45:10:cd:be:0d:6c:
37:d3:3a:3a:08:14:8e:58:27:a9:14:a7:c8:15:1e:cc:ec:42:
e8:b4:df:f9:39:e1:4e:4f:ca:a5:06:e1:9a:2b:4b:a0:c2:f5:
c9:dd:6d:3e:7d:2c:8a:0e:76:d6:bd:87:21:ae:38:53:57:b8:
1d:71:f7:3a:af:fa:45:60:74:d9:f5:4f:46:7b:8f:f1:ec:af:
37:fe:1a:ea:dc:a5:8e:9b:04:b8:65:96:42:a9:22:98:0d:cf:
37:bc:75:9c:df:d8:e1:c7:a9:9e:36:fe:bc:c2:94:bf:ad:83:
85:2c:b9:8d:eb:cd:4f:75:96:36:4d:28:0d:98:68:d2:9f:d3:
d4:ab:4b:69:94:9c:81:bb:67:67:fe:73:da:4f:05:84:c0:6c:
26:6b:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:45 2026 by rpki-client