
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa
File: 61XowUV7qNNKUl7CsUHMPwErbs4.roa (raw, json)
Hash identifier: j+VanMEN/2kAPSW1KhW3B85Zs1kkmqcZwbQtdxGKX+I=
Subject key identifier: EB:55:E8:C1:45:7B:A8:D3:4A:52:5E:C2:B1:41:CC:3F:01:2B:6E:CE
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 025D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa
Signing time: Mon 01 Sep 2025 01:29:10 +0000
ROA not before: Mon 01 Sep 2025 01:29:10 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 1 01:29:10 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=EB55E8C1457BA8D34A525EC2B141CC3F012B6ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:19:9d:8d:6d:4f:ff:d9:07:6f:ad:24:07:
04:30:9d:7c:74:b2:97:c3:d1:b1:ca:b1:79:2f:0e:
10:22:f3:e8:42:12:be:ec:d4:4b:f4:c4:2f:82:73:
61:f3:11:62:bb:58:fd:50:91:a8:ab:85:dc:6d:f9:
1a:a3:9a:e5:36:16:d1:a8:00:7b:37:b9:68:c4:ee:
c3:15:19:be:7d:38:47:66:d1:80:59:2b:b5:51:12:
ab:a7:ec:72:cf:c8:53:d7:78:8b:d8:df:20:a7:cd:
2d:38:5c:9f:8c:f1:12:12:50:af:49:9f:ad:d4:2b:
dc:f2:8a:77:7d:c6:b3:11:4a:73:bf:1c:45:65:d3:
35:ec:84:01:81:0b:07:68:90:c7:46:ab:a1:d7:77:
70:c3:e5:5e:d1:06:9f:6e:dd:f1:6f:d8:12:89:ac:
bb:2a:0e:e8:2b:16:b5:55:cb:aa:4d:1a:b7:36:0a:
da:d8:7f:de:64:a9:69:77:9a:75:79:7e:7d:18:c2:
4e:77:ab:87:a6:82:ab:4d:c6:4d:16:3e:47:38:e8:
ab:4d:08:2f:77:a3:3a:a2:65:5d:26:e5:fe:7f:31:
55:0a:11:d0:10:9a:73:4e:34:c6:15:47:20:a0:a0:
8e:8a:12:ec:e3:ac:17:4c:af:57:97:87:d5:3e:2b:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:E8:C1:45:7B:A8:D3:4A:52:5E:C2:B1:41:CC:3F:01:2B:6E:CE
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0b:3e:46:f2:d0:cd:3b:2b:bf:f5:2f:68:8e:ee:29:30:11:
8b:ba:05:5b:c7:29:40:05:e5:6e:30:19:06:e2:61:58:b8:82:
9b:5f:55:be:3e:05:a8:75:df:89:50:95:60:d2:7b:9c:6c:47:
50:e8:88:8f:06:e7:03:8a:23:c3:e6:ff:6b:2e:d4:d0:f9:28:
98:50:1f:c8:d7:b6:ac:fa:ed:1d:7e:13:2c:c4:ca:47:21:f8:
49:b8:c4:27:87:83:20:ab:c6:55:cf:1b:39:4c:c2:fc:7c:48:
22:c0:13:08:e2:33:ed:7e:65:11:fa:82:05:0b:21:f2:c4:20:
c2:49:be:ea:8a:7d:c9:75:8d:53:ec:6b:d7:8d:cf:73:26:20:
91:3b:ac:27:a3:af:b6:2b:9f:8b:b7:d6:27:98:83:e1:03:39:
44:54:27:3b:89:71:5c:09:1e:27:15:cd:23:a7:88:bb:bc:87:
cd:fc:2b:ac:0f:28:d7:2b:ba:5f:2e:2e:c3:02:5e:8b:18:f8:
41:af:b6:c1:e9:47:b6:e6:55:7b:d6:9d:ae:a8:fb:67:eb:f0:
7f:d9:77:28:8f:7d:11:ea:ca:21:49:64:f2:b7:27:89:71:8a:
43:a3:b3:84:53:6e:9f:a9:9a:64:34:fb:b6:c9:59:ea:f3:63:
5f:47:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:21 2025 by rpki-client