
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
File: sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa (raw, json)
Hash identifier: m1SZB8N4ZitFNBvFeE8RK7a4im3ForkIl0ZyY/yxSNI=
Subject key identifier: B1:22:69:AF:75:FB:E3:17:CF:80:24:BF:41:43:DC:81:36:EB:01:64
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0270
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
Signing time: Mon 01 Sep 2025 01:35:20 +0000
ROA not before: Mon 01 Sep 2025 01:35:20 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 9371
IP address blocks: 110.74.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 1 01:35:20 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=B12269AF75FBE317CF8024BF4143DC8136EB0164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:27:a7:e6:0d:29:77:ae:63:25:1d:ed:3f:
94:27:41:80:2a:10:b5:9a:ba:dc:02:d0:46:b4:17:
ff:ce:60:ac:90:ea:7e:59:57:8c:4e:90:34:20:97:
5c:13:fa:78:8f:3b:a1:98:56:19:9d:51:31:7b:55:
8a:17:52:a9:10:15:84:42:66:6b:22:c4:f4:19:97:
e6:ca:8e:2a:9b:2d:c0:ff:9a:53:da:cd:42:86:ef:
ee:50:93:db:93:ec:f6:8e:4d:94:47:34:0e:1e:44:
0c:40:7a:29:d9:56:a0:9c:98:ec:8f:07:a7:ec:5a:
35:38:ee:09:e4:c0:78:75:b7:8e:66:4a:e9:d6:f4:
60:fe:76:03:d6:6f:05:ca:03:85:6f:d7:bb:fa:72:
28:e0:f0:2a:45:21:71:d8:dd:ca:5a:a6:bd:2a:71:
6b:39:4f:77:57:36:2f:a2:fa:06:13:72:76:c9:a4:
ff:6e:c7:f6:a8:0d:77:c7:59:85:40:eb:0e:de:5a:
f3:20:01:5d:71:b3:bd:4e:ed:c8:ac:d1:58:8e:ca:
ce:72:57:60:d0:e8:ea:f8:c9:40:3f:6f:63:9d:45:
93:78:f2:0b:7d:6c:e6:ea:17:e8:4b:50:0a:5a:85:
1a:e1:33:0e:0f:2c:08:bb:2b:46:6b:eb:4f:1b:f2:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:69:AF:75:FB:E3:17:CF:80:24:BF:41:43:DC:81:36:EB:01:64
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
d8:2c:79:78:c6:ee:db:5a:c4:63:eb:34:55:6e:83:6a:af:46:
58:a6:17:02:f5:cf:a9:ab:39:b2:25:42:82:2d:01:6f:ff:e8:
2e:33:89:a0:91:26:71:ab:b2:f2:09:04:70:d5:bd:48:f8:5e:
52:56:44:94:72:9b:5e:26:67:d3:b2:ba:4a:e1:c7:97:f3:58:
46:67:bb:a2:3b:65:fa:00:e5:85:5f:3f:aa:e5:d1:dd:ba:04:
87:2b:5d:ad:e7:0b:f3:7a:68:14:ac:29:94:86:6b:f9:fc:de:
4e:b1:cf:dc:44:dd:b9:f5:b2:0b:96:12:ed:94:21:9b:14:35:
c5:0d:b1:fc:43:8d:30:d1:a1:64:04:3e:e2:24:91:d4:51:f2:
f3:ea:ba:ef:35:65:78:f8:44:e9:4a:66:f2:f5:24:4f:7c:a3:
41:b4:4e:27:e4:88:16:f8:9d:18:c6:94:6f:3e:8b:19:35:20:
30:33:93:5e:b2:7c:10:c5:66:b7:db:37:96:4e:de:3d:c0:c6:
72:0e:d6:bd:28:2c:cd:e9:11:d9:7d:db:0e:8d:b6:35:67:01:
a3:4e:f2:2d:d4:b7:35:1b:fd:e6:2c:6c:c0:8a:8e:37:8a:9e:
95:5b:ca:0b:bc:69:ff:97:e5:11:80:51:57:d3:46:a7:54:7a:
e7:6e:8f:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw
MTM1MjBaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxMjI2OUFGNzVGQkUz
MTdDRjgwMjRCRjQxNDNEQzgxMzZFQjAxNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFhien5g0pd65jJR3tP5QnQYAqELWautwC0Ea0F//OYKyQ6n5Z
V4xOkDQgl1wT+niPO6GYVhmdUTF7VYoXUqkQFYRCZmsixPQZl+bKjiqbLcD/mlPa
zUKG7+5Qk9uT7PaOTZRHNA4eRAxAeinZVqCcmOyPB6fsWjU47gnkwHh1t45mSunW
9GD+dgPWbwXKA4Vv17v6cijg8CpFIXHY3cpapr0qcWs5T3dXNi+i+gYTcnbJpP9u
x/aoDXfHWYVA6w7eWvMgAV1xs71O7cis0ViOys5yV2DQ6Or4yUA/b2OdRZN48gt9
bObqF+hLUApahRrhMw4PLAi7K0Zr608b8hT7AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUsSJpr3X74xfPgCS/QUPcgTbrAWQwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9zU0pwcjNYNzR4ZlBnQ1NfUVVQY2dUYnJBV1Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEbkpAMA0GCSqGSIb3DQEBCwUAA4IBAQDYLHl4xu7bWsRj6zRVboNq
r0ZYphcC9c+pqzmyJUKCLQFv/+guM4mgkSZxq7LyCQRw1b1I+F5SVkSUcpteJmfT
srpK4ceX81hGZ7uiO2X6AOWFXz+q5dHdugSHK12t5wvzemgUrCmUhmv5/N5Osc/c
RN259bILlhLtlCGbFDXFDbH8Q40w0aFkBD7iJJHUUfLz6rrvNWV4+ETpSmby9SRP
fKNBtE4n5IgW+J0YxpRvPosZNSAwM5NesnwQxWa32zeWTt49wMZyDta9KCzN6RHZ
fdsOjbY1ZwGjTvIt1Lc1G/3mLGzAio43ip6VW8oLvGn/l+URgFFX00anVHrnbo8j
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:07:42 2025 by rpki-client