
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
File: E3yF2Eiheb8smGPJm6UbeodcVtI.roa (raw, json)
Hash identifier: +R52vOTBiNRtSNMMw439QaYUn3GZuHNIlvuXij3pLbo=
Subject key identifier: 13:7C:85:D8:48:A1:79:BF:2C:98:63:C9:9B:A5:1B:7A:87:5C:56:D2
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0250
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
Signing time: Fri 01 Aug 2025 01:28:39 +0000
ROA not before: Fri 01 Aug 2025 01:28:39 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 9371
IP address blocks: 133.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Aug 1 01:28:39 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=137C85D848A179BF2C9863C99BA51B7A875C56D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:7f:42:5a:cc:31:e7:46:0c:5d:d1:42:c9:
7a:a9:34:48:be:e4:54:0c:ea:48:e4:2b:5c:4d:80:
9f:a7:ef:56:c5:30:28:1d:50:06:e7:90:fb:a9:7f:
55:4b:e0:6a:ac:f4:ca:f0:98:f9:fc:40:44:7c:94:
15:b4:5c:1a:07:c5:77:ad:92:09:68:a7:59:9c:17:
88:96:05:42:16:20:9e:f8:84:e3:25:65:ff:56:21:
55:6a:68:a2:60:b3:d7:18:50:1b:b1:0a:c3:b1:b3:
13:8c:e2:d7:b5:bc:92:7c:73:fd:32:fe:e1:ac:fd:
b2:0e:df:af:e8:8f:a6:bd:71:26:7f:8e:89:35:46:
e8:85:c8:30:ec:9b:fe:61:7f:ee:e9:94:2e:05:75:
a1:d7:4d:a5:97:5a:dd:a3:5c:d5:2e:cd:85:c3:6a:
68:35:64:54:07:6e:f0:0a:54:f7:e5:16:0a:31:85:
e1:cd:f2:0a:fe:4b:91:ac:d1:2d:11:21:2a:2e:8c:
7f:34:b0:42:a5:65:1f:cb:ca:b3:d1:b9:f4:c5:7e:
23:fe:4e:0f:2c:4f:b1:a1:c6:00:af:0b:a4:20:84:
1d:44:4d:2d:e7:e5:a3:03:6b:c3:1a:f4:ad:73:9f:
b2:43:69:4c:e1:a5:d3:0e:fd:be:88:58:78:51:71:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:85:D8:48:A1:79:BF:2C:98:63:C9:9B:A5:1B:7A:87:5C:56:D2
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:49:b8:0c:94:10:b5:d4:08:7a:38:47:76:2a:73:f5:cb:7e:
c4:0d:b0:b0:27:af:ad:57:aa:19:99:8f:1c:24:50:0d:95:07:
3f:b7:c3:8f:a7:da:18:d4:dc:37:36:27:ab:26:b2:e5:5d:67:
de:27:be:be:80:87:b1:de:7c:c6:89:38:d6:3d:24:c4:b2:c9:
93:1b:2c:14:51:8a:6b:dd:5b:f1:1a:17:d4:1e:7d:ef:0e:f6:
24:3c:9b:3b:2a:bd:a9:df:23:30:36:e1:cf:55:34:54:74:4d:
f9:f4:b7:48:3c:81:fe:1b:f8:46:c8:0a:06:5c:26:aa:ea:f1:
65:78:74:d4:bd:12:04:e4:0c:3c:e6:77:7e:9b:e6:d6:0e:c5:
ba:e2:5b:cb:d7:df:54:78:11:18:6e:25:bf:e9:88:12:26:89:
ed:6d:d7:93:a9:56:6f:1b:e1:1c:a9:e3:f9:3b:d3:c7:1d:4f:
55:bc:9e:1a:ee:74:8e:de:b8:5e:18:8c:60:23:52:56:98:c7:
21:33:d2:ab:66:dd:3d:2a:1d:74:ff:66:d0:62:e9:53:61:e1:
86:a2:da:9b:1f:48:f1:2a:ad:31:e8:16:36:4b:51:0b:65:35:
72:2e:db:6f:95:cf:cd:d6:4b:47:ce:e1:24:7e:ad:b9:cd:a9:
c4:46:e5:1a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA4MDEw
MTI4MzlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDEzN0M4NUQ4NDhBMTc5
QkYyQzk4NjNDOTlCQTUxQjdBODc1QzU2RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMx39CWswx50YMXdFCyXqpNEi+5FQM6kjkK1xNgJ+n71bFMCgd
UAbnkPupf1VL4Gqs9MrwmPn8QER8lBW0XBoHxXetkglop1mcF4iWBUIWIJ74hOMl
Zf9WIVVqaKJgs9cYUBuxCsOxsxOM4te1vJJ8c/0y/uGs/bIO36/oj6a9cSZ/jok1
RuiFyDDsm/5hf+7plC4FdaHXTaWXWt2jXNUuzYXDamg1ZFQHbvAKVPflFgoxheHN
8gr+S5Gs0S0RISoujH80sEKlZR/LyrPRufTFfiP+Tg8sT7GhxgCvC6QghB1ETS3n
5aMDa8Ma9K1zn7JDaUzhpdMO/b6IWHhRcT7ZAgMBAAGjggInMIICIzAdBgNVHQ4E
FgQUE3yF2Eiheb8smGPJm6UbeodcVtIwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9FM3lGMkVpaGViOHNtR1BKbTZVYmVvZGNWdEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAhacwDQYJKoZIhvcNAQELBQADggEBAGpJuAyUELXUCHo4R3Yqc/XL
fsQNsLAnr61XqhmZjxwkUA2VBz+3w4+n2hjU3Dc2J6smsuVdZ94nvr6Ah7HefMaJ
ONY9JMSyyZMbLBRRimvdW/EaF9Qefe8O9iQ8mzsqvanfIzA24c9VNFR0Tfn0t0g8
gf4b+EbICgZcJqrq8WV4dNS9EgTkDDzmd36b5tYOxbriW8vX31R4ERhuJb/piBIm
ie1t15OpVm8b4Ryp4/k708cdT1W8nhrudI7euF4YjGAjUlaYxyEz0qtm3T0qHXT/
ZtBi6VNh4Yai2psfSPEqrTHoFjZLUQtlNXIu22+Vz83WS0fO4SR+rbnNqcRG5Ro=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:42:59 2025 by rpki-client