
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
File: KQCR2PqzfdWZR_rrEoztAhPhH78.roa (raw, json)
Hash identifier: oxGWgpp8CPOFA9BBs3iiU/NYyd2Xh9ORDCvpORuC7Nw=
Subject key identifier: 29:00:91:D8:FA:B3:7D:D5:99:47:FA:EB:12:8C:ED:02:13:E1:1F:BF
Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial: 53
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
Signing time: Fri 01 Aug 2025 01:29:44 +0000
ROA not before: Fri 01 Aug 2025 01:29:44 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 131921
IP address blocks: 157.120.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Validity
Not Before: Aug 1 01:29:44 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=290091D8FAB37DD59947FAEB128CED0213E11FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:10:17:43:ce:38:5d:cf:6f:a1:93:da:10:
58:46:e4:3a:5d:29:25:c9:1e:f5:a2:46:c1:17:3c:
a6:58:ec:83:eb:38:75:8a:16:44:95:28:98:f3:5d:
ac:5b:43:a9:34:d7:ca:16:da:b2:67:bf:50:df:03:
82:e4:65:a3:bc:f8:9d:e6:ce:e1:5b:05:24:4e:8d:
09:36:2e:1f:86:23:95:1c:99:62:fa:b3:75:e0:3e:
22:f0:99:ad:bb:87:ec:3e:88:49:29:c2:70:07:07:
78:65:b6:7b:6a:ae:c7:2d:84:c7:a1:68:98:c4:58:
98:21:1d:1a:bd:3b:2f:1f:d7:23:99:07:37:a4:af:
79:43:2c:cf:24:db:be:01:ce:2b:b2:9e:b4:b7:30:
cf:0f:84:96:a5:8d:d6:18:3c:cf:1c:64:f4:06:0d:
52:35:64:4e:b4:91:84:40:4f:f6:aa:d7:d0:c8:73:
64:a4:0a:a6:5f:c2:e7:4e:8f:eb:0b:71:97:90:85:
0e:7b:1b:f0:1c:28:d3:63:68:40:65:1d:22:f0:4e:
08:ad:89:65:52:20:17:2d:ba:0f:f0:f6:f9:f4:15:
04:91:93:db:77:01:ba:e1:17:02:11:f0:94:a5:c7:
c8:c1:3c:be:27:a2:55:57:bf:a5:cc:1b:a6:d1:f9:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:91:D8:FA:B3:7D:D5:99:47:FA:EB:12:8C:ED:02:13:E1:1F:BF
X509v3 Authority Key Identifier:
keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.116.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c5:e6:f7:03:ff:44:52:96:4b:c2:e5:8d:ec:c9:2c:39:ac:
c6:35:8d:07:46:28:3b:e5:66:59:b7:33:d8:f5:45:ff:71:30:
4b:f8:da:dc:4d:4c:02:1f:07:63:b3:a3:74:0e:c2:16:03:46:
a3:cf:81:4c:d0:c9:3d:52:36:b0:bd:7d:6f:fa:7c:54:3c:d0:
f6:a5:18:74:82:0d:28:56:26:4a:5c:d8:26:2f:0c:46:ab:ef:
79:7f:49:41:88:b3:8e:37:86:b6:65:3b:e5:be:83:8a:d2:39:
13:ee:b2:fe:1c:2a:d8:a8:36:6a:e5:76:47:77:03:18:ed:bf:
3c:8d:0f:da:95:7f:d3:37:78:0a:e5:df:97:40:fe:b2:5e:d2:
b7:23:c4:67:ff:03:d9:2c:31:c4:7e:9f:b4:9a:7a:07:81:fc:
9a:9e:c0:af:1b:91:2c:c3:c8:fe:11:47:85:5f:d5:ab:19:b4:
6f:bb:0f:2c:8c:04:03:9a:7d:72:b5:92:1f:f6:ba:94:9d:e9:
f8:87:ce:9e:e1:57:c0:96:e6:57:f1:a1:9a:9d:9d:e3:77:e1:
a2:9a:3f:2b:a3:d3:8d:6d:f9:bc:b5:2a:27:7d:28:68:2b:60:
08:d2:ff:c9:4c:b3:aa:88:d7:8e:32:0f:a3:6e:42:f4:bf:69:
53:8d:1f:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:29 2025 by rpki-client