
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/2Z6DTbWQysCtIIoUtPM019MZ624.roa
File: 2Z6DTbWQysCtIIoUtPM019MZ624.roa (raw, json)
Hash identifier: QcCD4xJLNFhLOllnNgOH6z8zV2Qihm8w51a+VxeWog0=
Subject key identifier: D9:9E:83:4D:B5:90:CA:C0:AD:20:8A:14:B4:F3:34:D7:D3:19:EB:6E
Certificate issuer: /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial: 63
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/2Z6DTbWQysCtIIoUtPM019MZ624.roa
Signing time: Sat 01 Nov 2025 01:31:13 +0000
ROA not before: Sat 01 Nov 2025 01:31:13 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2515
IP address blocks: 202.12.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Validity
Not Before: Nov 1 01:31:13 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=D99E834DB590CAC0AD208A14B4F334D7D319EB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:e7:99:e9:56:4e:65:f2:78:02:43:80:55:
a1:8c:95:51:ee:85:c3:91:de:e4:8f:f5:b4:0c:2e:
c0:6b:67:aa:aa:70:9a:bd:cc:af:ce:3f:bf:4e:62:
07:86:19:b3:68:ae:58:19:4c:39:3d:8c:8c:f9:f1:
3f:cd:3e:40:ee:41:e6:d7:c8:08:bc:f3:45:de:1e:
72:1e:7c:e6:55:bf:0c:00:75:4a:ca:ea:11:33:08:
7c:73:1e:6b:fa:1a:6e:71:1a:05:01:31:05:7f:e9:
d3:8c:02:4c:5e:60:2e:37:cf:2a:ed:29:33:dd:bb:
ba:5b:dc:25:a0:65:4b:16:00:44:8a:a5:e9:94:b2:
c1:45:b1:71:4a:b1:17:65:69:5e:80:07:32:e6:99:
3e:2d:ed:07:ab:23:60:ad:c9:fc:45:84:f3:15:15:
1b:04:1d:67:86:ad:85:d9:0c:01:5e:fd:ac:44:b3:
69:21:f3:54:7b:c2:f7:66:35:d5:57:b6:da:0f:e1:
3c:b7:69:af:63:6a:38:e4:23:06:d7:63:b7:0c:45:
bd:21:27:d5:60:da:0a:18:56:29:21:0a:1c:ba:29:
7d:bf:9f:ee:70:d0:53:cb:1d:eb:a6:88:ad:b7:42:
bc:8a:9f:c9:71:16:48:cb:dd:80:11:ae:5d:6e:b1:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:83:4D:B5:90:CA:C0:AD:20:8A:14:B4:F3:34:D7:D3:19:EB:6E
X509v3 Authority Key Identifier:
keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/2Z6DTbWQysCtIIoUtPM019MZ624.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:36:43:8d:ae:db:cf:1b:04:5a:31:4f:99:5b:9a:83:8c:8f:
f8:10:9c:3c:d5:71:28:37:c0:4a:92:66:10:b1:74:39:0c:29:
46:5b:a5:40:29:d6:65:b6:e1:0c:ed:c0:d3:2d:9e:32:42:41:
cb:3a:84:1e:40:81:a2:42:f5:ae:3f:20:77:e7:f1:07:21:f4:
1a:cd:89:52:e4:27:b3:69:cc:ed:13:b7:1b:01:97:f0:1b:a7:
df:9f:1f:15:8a:88:30:70:b9:c3:eb:7c:80:67:42:ef:0a:81:
fe:dc:71:7a:6f:64:a9:3d:92:4f:75:1c:e7:74:51:c2:63:24:
82:8c:f6:a7:46:0b:17:54:82:2f:64:71:6f:b9:b1:99:73:c9:
4d:33:7c:f8:92:f6:69:ac:e4:ae:fe:8d:19:b7:6e:7e:6b:5f:
64:f3:a8:86:d0:ca:06:f1:53:94:c8:20:4a:c1:32:1c:56:dc:
06:cd:ce:b5:9a:48:1e:25:13:9a:f8:28:d3:0c:bf:0b:68:94:
a4:c8:7f:16:2c:98:21:8b:fd:d5:2b:62:40:e5:bb:d1:1d:b6:
5e:9f:b6:a1:65:eb:6f:9e:4a:4d:ac:d3:59:76:06:89:76:d5:
39:1c:10:c5:12:df:0d:13:2c:9b:9b:3a:5e:44:bc:f2:5a:76:
3f:82:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:34:30 2025 by rpki-client