
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa
File: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (raw, json)
Hash identifier: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=
Subject key identifier: AF:03:53:BE:83:76:44:18:C5:E2:30:FE:E3:12:E2:3D:6E:96:7E:61
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: BE
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa
Signing time: Fri 31 Jan 2025 01:31:34 +0000
ROA not before: Fri 31 Jan 2025 01:31:34 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 18126
IP address blocks: 210.173.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: Jan 31 01:31:34 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=AF0353BE83764418C5E230FEE312E23D6E967E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:46:a8:f4:87:d3:83:23:71:0d:ad:30:3f:
e0:b8:12:77:51:2c:9b:1c:88:47:2c:5f:81:7b:8b:
25:96:df:8f:3d:ab:c1:85:a1:8e:ec:67:13:b4:82:
94:96:2e:f3:6f:81:a2:b9:e9:b0:82:d0:a6:4a:41:
ae:c9:2b:51:63:0c:25:46:ef:cc:b2:b9:fd:b8:66:
e2:46:7b:ad:45:88:17:4a:f0:ee:d2:da:5a:a5:54:
b1:2b:58:93:b3:be:c7:17:0e:11:48:73:08:8c:e0:
b3:6c:ea:35:1e:dd:e5:2a:7d:d6:3e:cb:5d:61:8e:
e8:b9:1c:80:c9:d1:8a:be:99:8a:3d:e6:8f:9c:74:
6f:47:a5:1c:b9:6b:85:a1:b7:7c:f1:04:e1:6a:a3:
10:92:da:87:51:d3:e7:46:ff:c5:4e:9b:1d:05:02:
fc:bf:45:4c:be:fb:7b:20:d2:b7:9c:21:d4:4d:f8:
33:4f:d2:ac:ff:28:ad:56:55:01:b8:5e:7b:d5:7a:
e5:92:1f:31:cd:52:c1:55:9d:df:6b:fd:2b:ac:f9:
fe:d7:78:52:e9:b2:8e:19:24:c7:4a:bf:45:67:c4:
40:70:5e:68:51:79:97:6d:a2:6f:cc:c6:60:06:cf:
cc:46:83:aa:19:d7:ac:31:2f:4f:eb:24:50:b8:b4:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:53:BE:83:76:44:18:C5:E2:30:FE:E3:12:E2:3D:6E:96:7E:61
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.144.0/20
Signature Algorithm: sha256WithRSAEncryption
19:63:5f:a3:17:35:5f:fb:ed:67:f5:95:ba:d7:78:1d:47:7e:
01:05:b4:ff:54:7e:14:0a:be:d7:68:c2:15:cd:19:f0:2d:5a:
4e:07:94:5e:32:5a:02:cd:bc:4a:c7:26:57:29:37:41:15:aa:
99:88:c3:8b:2e:40:b1:bf:6e:46:3f:f9:f4:93:99:20:c1:e9:
84:9d:15:16:3b:bc:e4:70:0c:40:29:96:f8:b6:9f:9a:86:f0:
ab:62:aa:b5:c6:05:f9:d2:71:e7:c0:c1:1c:6b:ac:78:9f:1e:
b7:c7:40:a5:57:0b:94:88:7b:11:63:db:11:3e:d7:5e:0a:66:
2f:c1:61:85:20:45:c5:aa:08:4f:51:a9:51:b1:8f:3e:55:7f:
6c:bf:ca:f2:fc:d1:c7:aa:fc:ef:f9:27:28:07:e9:46:d8:be:
9c:41:01:6e:13:4d:c7:d4:3e:26:c6:29:df:e1:19:cd:de:1f:
2d:b6:1b:f4:3f:c3:f2:0a:52:2f:87:7f:7d:bd:29:60:c4:f7:
53:72:7b:74:d3:32:f9:6c:a9:1d:b1:b4:d7:30:47:a2:4c:08:
4c:5d:66:a8:44:88:6d:5b:55:ff:4e:8c:b1:c5:e1:37:c5:5a:
5a:06:da:7e:35:d9:b3:60:f2:20:95:9d:ee:2e:a6:d5:00:40:
b1:e5:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:50:46 2025 by rpki-client