
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
File: TflUPaOjDeofxXc5WBtf5ttCr4Q.roa (raw, json)
Hash identifier: 5kwjdPjsBUgtVaDLb63t3UBbcKdaaCtKaNry3y9IqRA=
Subject key identifier: 4D:F9:54:3D:A3:A3:0D:EA:1F:C5:77:39:58:1B:5F:E6:DB:42:AF:84
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0273
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
Signing time: Mon 01 Sep 2025 01:35:22 +0000
ROA not before: Mon 01 Sep 2025 01:35:22 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 1 01:35:22 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=4DF9543DA3A30DEA1FC57739581B5FE6DB42AF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:08:dd:e3:13:18:b6:11:89:15:25:26:bd:
e3:20:8d:fe:e5:3b:75:57:92:62:62:dc:33:eb:ab:
50:25:42:8c:9e:7a:a4:3a:63:7d:aa:64:59:1f:bb:
10:0a:e2:17:c5:b8:28:f5:d2:40:5f:e8:02:4b:0b:
cd:db:55:33:a5:ed:af:b7:a4:03:14:4b:fb:2f:ff:
eb:db:ad:ac:97:e1:3e:30:2a:30:f0:11:a9:25:b0:
e3:f8:8b:30:05:25:8e:bf:b7:cd:8b:96:09:7b:76:
a9:ce:93:ac:55:72:05:7d:f2:98:f9:7f:c3:fc:c1:
97:9c:ac:84:b1:7f:31:48:a5:60:2f:a8:fc:de:10:
00:67:b8:d3:9b:8f:a3:7f:79:1a:4f:0a:bf:7a:4f:
10:ea:31:c4:b7:b3:af:28:4b:97:8f:15:1c:23:c1:
44:dd:ba:7d:db:01:df:04:1d:12:90:a0:6e:1b:04:
92:40:83:7c:d3:6d:22:ca:11:a2:ac:06:f0:62:6c:
e2:4d:63:8f:8a:9f:1f:fd:c9:b4:5e:56:4b:e6:73:
70:db:c4:d7:5f:5b:f1:0b:99:8c:cb:ce:95:16:ba:
b5:48:37:29:f8:62:cc:e7:b1:49:45:e1:f0:f3:1c:
8e:89:03:fb:0e:cd:5e:c6:75:af:1f:55:d5:db:dd:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:54:3D:A3:A3:0D:EA:1F:C5:77:39:58:1B:5F:E6:DB:42:AF:84
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c0:86:1d:d6:8d:ac:20:ea:88:db:ec:3d:18:55:52:ab:6e:
6d:55:fc:9e:13:4d:21:c9:9e:e4:0b:d0:c3:5c:07:98:c1:9a:
64:76:8b:86:00:ed:3c:57:05:bd:68:04:54:73:be:14:47:a5:
bb:bb:f0:e4:6b:fa:16:60:af:fe:56:27:b1:e9:f0:19:85:ab:
4e:c4:ac:d7:32:e8:cd:14:0d:d7:36:b4:82:fc:53:c4:3d:32:
1c:b1:fb:dc:c1:fc:29:4c:95:27:0f:8d:c0:8e:7e:bd:80:d1:
77:40:33:52:9e:6b:a5:67:63:cc:dc:8a:67:e8:db:77:73:b5:
2d:a6:e8:ca:4c:0c:20:92:21:8b:21:93:63:15:5a:0a:4f:65:
6b:7a:d4:2e:a6:d5:fe:0f:95:e3:9e:02:fb:92:02:e6:bc:18:
95:b7:aa:cf:ce:db:35:52:6c:79:c7:5c:f9:b0:85:02:3e:54:
2b:ed:21:5b:29:d7:3c:69:d3:ed:4c:0b:cb:7f:c7:67:15:4e:
7e:25:ab:7b:5d:31:68:54:3e:f8:2c:af:d1:69:02:e8:df:c4:
1c:95:e8:08:12:f7:b9:7c:a8:7d:3e:6e:1e:ce:b2:16:8a:34:
17:f7:15:f1:ae:cb:8c:f7:8b:99:bf:e5:cf:a6:8d:7b:1a:71:
49:1b:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:32 2025 by rpki-client