
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
File: -Tm2eH07T15fThwWbWoAIMl2Hu8.roa (raw, json)
Hash identifier: IBwz1Qj/Aik2ymWu9GTUMZ+fdFrjOBQQqj1MWnAmqP0=
Subject key identifier: F9:39:B6:78:7D:3B:4F:5E:5F:4E:1C:16:6D:6A:00:20:C9:76:1E:EF
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 5B
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
Signing time: Tue 01 Apr 2025 01:30:06 +0000
ROA not before: Tue 01 Apr 2025 01:30:06 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 7660
IP address blocks: 203.181.194.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Apr 1 01:30:06 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F939B6787D3B4F5E5F4E1C166D6A0020C9761EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:c0:99:9a:d2:14:31:d0:dc:ce:cd:ce:f1:
23:92:de:76:07:b8:de:1a:2c:f5:15:70:0d:8e:93:
a6:f9:d5:03:0e:7f:65:55:d1:9a:37:cc:68:25:ad:
bf:17:45:16:8f:d4:82:34:f4:41:68:72:fa:a9:9f:
a8:ad:c3:44:13:4b:23:e6:36:f5:f0:fa:03:98:04:
b6:3e:cf:e3:fe:10:7e:2c:9f:af:c6:9a:07:e0:73:
2a:80:33:7d:47:de:97:73:2e:03:d8:4a:7b:15:5e:
22:d6:a6:df:cf:b4:85:88:8d:6e:5e:13:30:09:bf:
67:68:11:b6:4f:80:88:c9:6e:bf:c3:53:be:e1:17:
e6:45:97:d4:c0:85:e1:d0:c3:e3:1c:35:fa:a1:ca:
27:14:52:fb:99:3c:8b:97:af:ba:b5:4b:a1:4f:07:
6d:56:af:83:8d:6f:09:96:b2:48:82:8d:f9:0f:b6:
94:7f:33:06:97:f5:b5:92:5b:6d:28:04:cd:22:12:
b5:f7:33:3e:eb:da:fe:d0:de:69:12:92:f9:3a:39:
01:68:c4:b0:2e:9e:20:7f:69:1a:f1:d8:24:78:9c:
4b:92:17:b6:92:c1:37:87:f8:a4:88:ed:21:6e:89:
63:29:aa:0f:7c:93:0f:35:2d:fb:2c:42:ac:a1:bc:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:B6:78:7D:3B:4F:5E:5F:4E:1C:16:6D:6A:00:20:C9:76:1E:EF
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/-Tm2eH07T15fThwWbWoAIMl2Hu8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.181.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:4d:c8:41:20:31:e1:c1:ac:4c:4f:67:a4:19:16:2a:f2:19:
1f:de:c2:bf:2d:81:b7:7a:ef:bf:4a:fe:5b:86:e7:09:13:6c:
b4:22:0a:a2:00:9f:ec:d3:1c:93:5c:65:85:10:97:fc:cd:23:
21:e9:19:cb:c7:b6:c7:d4:e3:e4:95:e5:56:f0:7c:18:21:97:
f4:32:b3:41:dc:56:93:59:53:68:0e:fa:f9:9f:ed:f7:7c:c4:
4f:7d:83:75:6e:5e:7b:ad:b8:e4:07:80:80:e1:2d:f4:6a:10:
97:d1:f4:ff:65:5a:00:59:ff:94:d3:4a:d7:4e:91:69:5c:70:
19:fe:01:78:80:1f:19:87:e3:1c:be:9e:a9:9d:ca:7c:60:d4:
24:e3:47:f7:a5:d6:f1:35:6f:d8:80:cb:6d:22:61:aa:8a:1f:
ba:ff:18:2f:4f:c6:c9:94:79:3c:13:2d:9d:27:71:d4:09:f8:
26:5b:15:bb:b0:12:e6:73:b9:89:01:2d:cb:b7:a8:4b:fd:fd:
6a:42:0e:c6:3a:df:3e:31:90:07:46:3f:a2:e5:db:8a:6e:be:
b1:d2:42:ad:29:13:28:7f:95:c8:4f:5c:cc:8a:6e:38:75:6d:
77:00:76:36:4d:5a:49:b7:c2:c6:d7:5d:5a:99:fa:f1:b9:22:
ca:0c:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:17 2025 by rpki-client