
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
File: GxUfftsjIyNyOrztAF9p8bEdy4A.roa (raw, json)
Hash identifier: jxGzbPCXVfXj3iaBl44CBvr5k0oOxF2WCBpC7RX5mNM=
Subject key identifier: 1B:15:1F:7E:DB:23:23:23:72:3A:BC:ED:00:5F:69:F1:B1:1D:CB:80
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 65
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
Signing time: Mon 01 Sep 2025 01:33:17 +0000
ROA not before: Mon 01 Sep 2025 01:33:17 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 2907
IP address blocks: 202.145.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Sep 1 01:33:17 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=1B151F7EDB232323723ABCED005F69F1B11DCB80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:ac:b1:0d:63:f3:01:fe:cb:ca:52:64:f5:
85:1f:a3:a9:cd:0c:0e:60:49:1f:30:e2:a1:a0:69:
c2:47:a7:be:9b:ca:a3:95:0e:d9:0f:e0:f4:e3:a5:
c4:e6:63:26:52:5f:e0:b0:a6:3c:f5:86:32:27:86:
fe:39:11:6c:9e:4a:d6:61:a0:7a:ed:6b:d3:f8:9d:
bf:cf:5a:91:49:26:82:de:83:f5:45:7a:63:05:d0:
fb:fa:d0:50:66:de:87:d9:2d:8f:a4:aa:52:e1:03:
df:22:75:cc:f1:67:dc:af:28:68:17:4b:cc:b3:46:
65:53:fe:5a:b8:c2:cc:c5:63:12:dd:66:33:56:5c:
8c:90:13:31:88:f9:6e:9c:78:62:3b:4d:f3:9f:14:
b9:00:84:b0:76:d0:be:74:5c:2c:14:21:5a:54:11:
3d:05:f7:e0:67:40:fa:6c:6e:42:1b:b8:aa:77:8a:
89:ca:76:c3:10:0f:8c:ea:15:cf:0a:9a:53:3c:96:
3e:15:c6:82:92:6e:9f:b4:72:3f:96:c7:f2:c6:7b:
8d:4e:ed:bb:0b:5e:b1:2b:08:37:8d:7d:47:31:de:
2f:0f:54:4f:2b:d6:fb:8a:69:91:16:f2:fd:15:4f:
1a:9b:0a:23:e4:40:33:fe:99:af:a3:11:fc:e1:e2:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:1F:7E:DB:23:23:23:72:3A:BC:ED:00:5F:69:F1:B1:1D:CB:80
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6a:f3:e7:1f:1a:9c:87:8d:a0:ba:e4:86:e7:82:cc:ac:07:
b2:a0:00:f9:1b:a1:b2:4b:31:10:5b:66:4a:4f:37:0e:0d:05:
f3:8f:a2:7b:2e:cc:72:c2:5d:78:bc:fb:32:bb:59:f0:e1:0b:
1f:f3:fe:b5:a3:82:00:f9:eb:2f:f9:f9:67:3a:01:76:62:2e:
a3:57:7c:db:dc:87:6e:a5:d6:9b:8f:a3:58:f2:1e:de:55:d9:
dc:30:b9:8f:39:96:b0:5e:2a:f9:f2:f6:5b:9e:b5:97:79:6f:
ff:38:4f:90:b6:1e:39:d0:80:c3:ec:d3:c9:39:13:c9:87:2c:
41:83:d0:ca:79:20:25:18:50:96:d5:97:0a:b4:6d:fa:6b:c1:
5b:94:12:2b:8f:b1:b9:27:23:e3:9a:fb:da:1e:6c:a3:a5:41:
00:e7:3c:63:f2:c4:05:ef:37:06:89:5e:36:54:1e:97:ed:07:
d5:98:fa:19:7c:b6:fc:98:5a:16:cb:72:9c:74:b8:64:c9:6e:
8c:a2:63:ea:5e:e1:cb:ed:e0:a3:27:f3:bd:11:60:b8:02:db:
1a:66:00:8e:5c:ff:2e:86:80:e7:18:e9:1c:b4:75:62:95:14:
88:83:1d:5d:1c:1e:c5:43:13:66:b2:68:2d:5f:51:71:ea:f9:
dc:25:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:44:53 2025 by rpki-client