
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
File: atYYF6xa-5XhCb99_svb7ujnR4s.roa (raw, json)
Hash identifier: FjScNVbUM7ylJZw2OZLX6RxOL7CbCrX19B8Y6oQxGX4=
Subject key identifier: 6A:D6:18:17:AC:5A:FB:95:E1:09:BF:7D:FE:CB:DB:EE:E8:E7:47:8B
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 80
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
Signing time: Thu 01 May 2025 01:31:58 +0000
ROA not before: Thu 01 May 2025 01:31:58 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 7684
IP address blocks: 153.126.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: May 1 01:31:58 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=6AD61817AC5AFB95E109BF7DFECBDBEEE8E7478B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:dd:30:b4:d3:5f:13:f4:0c:96:0b:4b:98:
76:bc:f0:f3:a1:6f:b5:eb:6c:b5:d5:18:4b:18:79:
3d:35:fa:47:5d:51:35:45:fd:81:21:d6:6f:80:2a:
4e:a3:cf:79:d9:d8:45:6f:73:11:38:fb:1a:c5:c8:
8a:90:cb:af:ef:9a:cf:b2:74:34:93:69:ca:2a:fd:
2e:f7:62:d3:bd:66:a8:d1:d0:c7:b9:1d:d3:7c:23:
bb:4b:3c:7f:51:0e:41:07:49:63:ff:1b:e3:2e:27:
80:d4:06:d3:84:6b:1d:26:a8:6d:73:21:02:bb:ee:
79:93:16:15:f5:67:23:d4:78:ec:e5:a1:5e:71:1b:
d7:bc:98:36:ca:b6:51:5d:df:14:40:46:7b:95:b6:
d9:ed:e5:c8:52:d5:2f:f7:ee:a1:5e:18:8e:03:b1:
d8:dc:77:d1:1a:32:3a:65:59:a3:17:ba:dd:79:98:
ba:71:2f:01:d6:da:33:88:86:5e:3b:4d:9f:3a:b6:
0f:13:c7:c6:f7:40:3b:4f:60:ad:b4:32:74:44:61:
f2:2b:4e:4b:80:22:ab:6d:a2:8b:68:2b:77:7e:1d:
eb:90:ec:54:39:f0:ef:cd:7a:1b:16:db:31:d9:c7:
97:49:a7:25:27:e1:57:cb:58:98:60:fb:27:9d:5d:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:18:17:AC:5A:FB:95:E1:09:BF:7D:FE:CB:DB:EE:E8:E7:47:8B
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/atYYF6xa-5XhCb99_svb7ujnR4s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.126.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a3:9b:f1:a9:bc:a6:6a:ba:c9:16:1e:28:8d:db:c4:14:4c:04:
26:31:e7:a9:0a:f5:dd:76:6f:3d:0a:d9:99:de:36:c0:b1:58:
a8:f8:60:22:2f:d0:a6:57:5e:0c:5c:ad:2c:e7:87:1f:d2:a7:
14:b7:34:de:52:a7:4d:ea:9c:83:7b:75:ad:c7:18:4d:bf:8e:
e5:d1:2f:f0:2b:98:5a:58:46:02:7d:97:f3:68:71:56:5f:d8:
3f:37:63:3d:9f:b2:74:e1:41:76:2d:a6:9a:d7:02:f3:92:fe:
00:69:b1:73:2e:2b:ba:0b:c8:23:f2:9b:41:ad:ec:d2:70:6c:
d3:01:1b:93:08:4e:d2:ca:c5:4e:67:42:d0:a9:f2:09:23:ab:
dd:68:7e:04:4d:43:df:68:f1:9d:f5:ff:d9:0c:f9:6c:cc:4a:
17:e1:0c:14:cd:42:45:ef:77:b4:06:21:9e:45:c2:0d:82:fa:
c9:d2:60:9c:99:3a:58:d7:12:ba:96:e2:23:ce:cc:fa:b1:79:
84:78:17:4a:7e:92:ca:aa:4e:60:64:80:0d:2d:1e:be:42:05:
d0:39:27:59:8e:b1:a4:27:03:7c:16:01:2b:34:6c:95:85:dc:
7e:f3:a2:91:de:1a:7f:b9:ae:e4:9e:d2:55:4c:d9:32:4b:15:
66:84:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:11 2025 by rpki-client