
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
File: UjDCLBxPadE1KOh0ygTV-OBMmJw.roa (raw, json)
Hash identifier: YRT12OX/+K+jqBtp2TM5ikbb7UKbwAzRH0N6mQg/eGQ=
Subject key identifier: 52:30:C2:2C:1C:4F:69:D1:35:28:E8:74:CA:04:D5:F8:E0:4C:98:9C
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 7E
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
Signing time: Thu 01 May 2025 01:31:57 +0000
ROA not before: Thu 01 May 2025 01:31:57 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 7684
IP address blocks: 153.121.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: May 1 01:31:57 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=5230C22C1C4F69D13528E874CA04D5F8E04C989C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:c9:b1:52:1c:84:42:9a:1f:a0:04:75:c2:
7a:00:22:0a:f8:ff:39:1a:82:db:ac:c3:2f:95:d6:
78:60:05:8b:35:90:a1:50:92:97:27:e7:63:44:87:
1a:3f:40:60:09:be:f8:1d:c8:47:ac:db:81:62:ae:
a0:5f:5c:3f:f4:b3:16:a8:ce:90:5a:c4:9d:d9:62:
30:be:ee:e1:3b:b8:1f:4f:11:1f:75:7a:7b:b5:4d:
79:85:59:86:d5:78:0a:9e:4d:bf:8e:cb:eb:1c:a8:
71:be:d5:09:6d:84:bd:c7:96:0e:56:25:91:08:58:
98:ff:79:8d:37:9d:d1:97:a0:fd:f4:1d:cf:96:72:
65:d1:87:dd:b1:54:5f:0b:19:bb:c9:b1:76:c4:8b:
ea:ee:0b:b1:28:fb:06:2f:c9:80:73:ff:34:1b:69:
a5:cf:07:16:6f:00:70:85:82:74:66:ed:84:06:0c:
59:5b:5e:ce:ef:72:04:6e:9c:e5:26:c4:5c:4c:5b:
78:b3:f8:36:67:b6:e0:63:62:aa:44:10:05:e3:ed:
e3:98:13:c6:44:a4:2f:01:1c:a5:73:06:5d:cc:97:
06:43:60:42:d5:8a:62:b2:1f:2b:39:c6:57:11:0b:
c1:e3:8c:9c:ff:9e:6f:59:29:02:45:56:f2:bd:14:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:C2:2C:1C:4F:69:D1:35:28:E8:74:CA:04:D5:F8:E0:4C:98:9C
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/UjDCLBxPadE1KOh0ygTV-OBMmJw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.121.128.0/18
Signature Algorithm: sha256WithRSAEncryption
23:a8:8b:6b:8b:3b:1c:d6:3b:fc:0e:b0:18:05:d3:4e:13:d5:
bd:83:83:01:4c:10:88:58:d2:1e:e1:57:4d:28:9f:07:8a:51:
b4:0d:8d:97:77:21:04:4e:7b:5d:0b:24:45:e7:7b:bc:c5:1b:
bc:60:c3:0c:ab:d8:b0:67:58:5d:f7:44:26:82:56:30:60:ac:
1e:ff:39:bb:85:2b:27:68:64:9c:8e:d7:81:d2:00:ee:38:90:
42:7f:a9:b0:eb:b2:1e:70:d6:6b:cc:53:3d:eb:26:e0:98:3f:
89:b5:80:3e:f6:99:ab:96:06:13:14:f8:92:9a:a0:50:80:8c:
2a:33:7a:70:21:46:7c:33:eb:93:22:ba:f5:c9:b1:56:9b:80:
6d:3f:ac:b9:56:e7:eb:56:b8:68:e3:bb:7a:75:f9:95:f5:d1:
39:84:c0:b2:89:7c:1d:e7:f0:16:25:ba:07:44:fa:92:e6:cd:
02:f9:f6:e3:7d:50:39:4e:62:7c:55:a2:f1:64:b4:ca:c2:f3:
d3:62:51:2f:75:f4:a0:01:af:0e:ba:47:93:48:b4:95:db:fa:
95:89:58:ef:34:eb:8b:8b:ff:c7:a9:9c:6c:54:0c:b7:3f:41:
a2:9e:35:4e:3f:94:83:17:4f:47:29:1b:68:9e:f1:b7:f6:8f:
6e:58:c0:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:23:40 2025 by rpki-client