
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa
File: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (raw, json)
Hash identifier: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=
Subject key identifier: D2:CA:D7:F3:2D:C9:B6:2D:3B:1E:79:E2:71:CE:A4:DC:12:58:C4:FF
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: BF
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa
Signing time: Fri 31 Jan 2025 01:31:34 +0000
ROA not before: Fri 31 Jan 2025 01:31:34 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 115.36.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:34 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=D2CAD7F32DC9B62D3B1E79E271CEA4DC1258C4FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:91:a1:6b:b3:7b:be:3a:e9:e6:42:01:dc:
f0:ac:a0:5c:c7:6d:26:3b:ef:ba:78:72:fa:64:58:
2b:e5:54:0f:56:cc:94:ff:df:72:2a:1e:f7:7c:fe:
25:c2:7e:4e:03:75:c5:d3:b3:8b:7c:d3:6f:9d:bd:
45:9b:a7:38:8a:80:ce:18:da:b8:7f:a8:3a:dc:3d:
69:f4:a5:7c:0c:15:ca:ec:ad:47:85:12:02:27:2e:
a2:20:45:6f:09:29:36:eb:e8:ea:07:03:2b:d7:5a:
4a:e9:10:ee:17:e9:46:b8:f1:c5:f9:b3:18:e4:cd:
1c:7c:2d:f3:d8:2d:32:e6:a9:ef:d5:35:27:7a:9c:
73:ca:e2:71:1d:d8:e9:eb:c9:89:c9:f5:f9:9f:87:
ee:f9:b9:40:37:86:f3:d3:ec:94:ae:b4:f5:20:36:
ec:95:04:a9:0f:e7:63:00:60:21:03:86:97:af:24:
53:6f:33:b3:de:5f:e9:b5:59:a7:8b:74:a4:7d:d7:
21:5d:2d:8c:a7:cf:91:62:ed:9b:6e:92:35:02:d3:
5a:4b:11:ff:25:64:de:f0:60:62:f5:a7:81:44:d7:
3e:26:d2:10:d9:1f:7f:cd:9d:a4:7b:5c:74:3c:f5:
65:ec:9d:3e:da:fe:ca:6f:35:3e:22:5d:8a:5f:29:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:D7:F3:2D:C9:B6:2D:3B:1E:79:E2:71:CE:A4:DC:12:58:C4:FF
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/0srX8y3Jti07Hnnicc6k3BJYxP8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.36.0.0/14
Signature Algorithm: sha256WithRSAEncryption
8e:2e:db:34:bc:f6:58:23:6d:ae:22:17:c0:40:18:1a:4a:1f:
85:43:21:09:f1:9e:48:b2:f2:36:23:34:f0:92:3c:00:64:95:
09:89:01:78:76:8c:fa:73:91:60:bb:f3:7f:d9:c5:6c:81:60:
fe:0e:79:9f:de:c2:7d:86:57:6c:a6:e9:f3:b1:24:9d:fc:75:
b1:43:29:b4:5d:d5:27:18:f7:d8:c2:1e:54:d2:6f:71:fd:90:
ba:57:a9:7e:7b:60:33:21:fe:1d:f3:d2:96:c7:11:33:a4:a1:
7f:17:8a:20:f2:a9:c9:f5:97:dc:90:25:ea:87:8f:75:60:ad:
34:36:14:48:a2:fd:b8:c2:38:97:aa:63:e2:a7:96:70:06:24:
ba:cc:f1:eb:69:1c:c9:c1:b5:46:d0:d6:3d:91:73:cf:65:03:
ef:92:61:b6:d1:b5:f1:bf:a9:cc:47:f7:b3:17:92:a1:a2:83:
74:4e:fe:e5:c7:ab:7b:c4:b0:9d:7e:3a:95:15:6b:7c:26:7f:
db:5f:f3:4d:5e:59:78:dc:d0:63:59:28:9a:88:aa:3e:2e:41:
9e:f6:9f:55:45:56:17:07:8d:d8:75:06:c9:61:86:aa:76:f6:
41:36:24:4d:19:1d:71:d9:3a:43:4d:99:e6:bc:a3:70:09:6a:
3d:da:5c:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:53:16 2025 by rpki-client