
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
File: BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa (raw, json)
Hash identifier: 0O0lGOzbyLBW3At4VrDBQsKRkLdNhjRmudZ/Q+mEoxA=
Subject key identifier: 06:23:34:F2:D0:94:2B:DC:85:33:57:0F:45:3F:F2:66:60:52:43:B4
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 6E
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
Signing time: Mon 01 Sep 2025 01:33:23 +0000
ROA not before: Mon 01 Sep 2025 01:33:23 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 2907
IP address blocks: 210.146.64.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Sep 1 01:33:23 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=062334F2D0942BDC8533570F453FF266605243B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:9e:03:d5:dc:0a:1b:75:47:d0:55:7c:e2:
99:fe:b4:07:b7:5f:36:9a:c3:f1:2e:be:21:f3:45:
d3:85:e7:be:1b:0d:20:f1:14:e4:d1:21:b3:00:57:
fe:5f:9e:57:ff:00:93:6e:73:2c:9e:48:d2:15:f8:
47:72:68:54:7b:8a:08:26:3d:fe:e0:56:fe:f4:40:
0b:49:ba:fb:69:4d:05:a6:40:2b:07:d1:ed:dd:8f:
6e:dd:fb:3f:c7:80:ff:80:f9:70:6b:3a:79:1e:b0:
f4:11:19:22:87:0e:05:47:8e:c6:a7:eb:5a:55:3b:
73:a0:55:b2:6b:8c:18:65:fd:c5:98:ee:b1:26:56:
dc:e9:16:ff:13:ea:4c:28:03:8c:4d:23:5d:6f:ba:
28:67:b5:9d:e6:ea:16:47:a4:9c:28:8a:43:d3:3b:
ef:80:23:0e:54:6d:b0:d1:68:74:4c:ea:95:9a:df:
ec:b3:b1:a0:7e:e2:bc:2d:5c:84:26:ba:01:75:52:
11:8f:66:31:b7:e8:47:6b:41:0c:80:19:63:dc:42:
1e:30:1c:1b:2d:d9:82:4f:6e:4c:c0:b4:91:6d:34:
d9:c7:73:51:c4:d8:25:2d:8a:39:8a:e7:6a:c9:69:
b5:a9:48:04:4a:ef:bb:dc:65:1b:0b:3e:bf:db:de:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:34:F2:D0:94:2B:DC:85:33:57:0F:45:3F:F2:66:60:52:43:B4
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.146.64.0/20
Signature Algorithm: sha256WithRSAEncryption
61:52:dd:1d:a5:0a:de:eb:db:ac:66:49:85:3b:5a:8d:7b:a4:
07:9f:21:92:9f:ec:0d:70:3b:15:83:a4:5f:0d:69:fe:02:d0:
c0:61:69:d2:19:51:e7:43:56:2a:1c:8d:36:7b:bb:fa:1a:ad:
72:90:55:3d:d6:c0:da:50:20:94:69:39:55:81:d3:5e:79:82:
23:48:a9:cf:54:41:94:4e:bd:98:99:03:ea:19:4a:bc:39:25:
2e:3c:b2:32:6e:31:2f:f4:a8:06:31:cf:82:37:13:d7:d1:6d:
a2:7f:2c:9f:67:06:99:32:6f:71:76:1a:56:b9:be:d4:8b:5c:
fb:90:f6:93:b3:ce:93:e4:3d:02:44:8c:58:14:6d:15:0f:2c:
10:55:77:bc:e1:e2:91:92:09:c3:6f:d8:bb:8e:6a:cc:40:90:
f8:01:6e:a4:9f:04:65:71:4b:57:f4:9a:5d:20:e0:55:a5:34:
39:a9:a7:78:f7:e9:de:40:1b:b5:b1:8e:e6:b0:af:9c:54:d3:
ad:80:a3:e1:a8:af:44:70:c2:41:ed:8b:df:3f:58:ef:e9:96:
2f:bb:6a:41:66:fa:a8:f0:ce:97:12:61:2f:e2:72:f2:49:e7:
49:13:5f:5e:c5:f6:3c:93:3f:8a:67:62:b9:8a:0c:98:17:ab:
ad:81:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:44:59 2025 by rpki-client