
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
File: wcQX41105GX6DmOLczCVYhTzx3g.roa (raw, json)
Hash identifier: ykjc5YWMyt8w0l9hegCdxqBLOK777khogq25fKG/Y2o=
Subject key identifier: C1:C4:17:E3:5D:74:E4:65:FA:0E:63:8B:73:30:95:62:14:F3:C7:78
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 85
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
Signing time: Fri 01 Aug 2025 01:29:52 +0000
ROA not before: Fri 01 Aug 2025 01:29:52 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 15830
IP address blocks: 115.69.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 1 01:29:52 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=C1C417E35D74E465FA0E638B7330956214F3C778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:1e:19:fe:af:79:16:34:7a:a3:4f:56:db:
50:74:9b:52:59:48:02:e7:62:09:a9:46:dc:08:1d:
f4:51:81:82:0e:fd:e7:79:9f:4a:7c:93:9d:b7:c7:
0d:5c:21:6e:a5:26:ab:cc:5a:09:5b:16:ca:a5:d4:
4f:c0:27:c2:be:9e:5a:67:cb:92:e0:24:6a:40:a8:
35:d2:6d:32:35:4e:60:ba:14:03:c1:95:19:82:7a:
8c:c9:0e:21:8a:26:18:a7:6f:9d:e0:1b:97:3b:ec:
8e:5e:8f:7f:e3:9e:6b:17:08:a5:fd:2c:60:c9:24:
65:45:75:d3:74:64:74:6c:19:02:74:15:df:80:a2:
3a:99:d1:78:39:73:98:88:59:89:e4:a2:58:13:1e:
c1:35:06:00:0d:3f:1e:3a:4b:f6:28:78:76:0c:c8:
47:57:f4:ed:b3:75:57:c6:fb:0a:87:81:c1:f7:77:
35:81:df:d4:7b:66:73:f4:b8:fb:18:ab:5c:09:f9:
5f:ec:1b:e1:13:12:70:36:51:fb:35:d5:1c:4c:2f:
20:aa:1c:6e:39:a4:36:bd:8d:c9:2c:66:de:f4:04:
c6:53:b3:0c:b4:0e:33:9c:ae:8e:c2:83:a9:43:4f:
6a:1a:90:5d:a8:73:d9:89:b3:7a:69:67:f2:fb:b8:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:17:E3:5D:74:E4:65:FA:0E:63:8B:73:30:95:62:14:F3:C7:78
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.69.192.0/20
Signature Algorithm: sha256WithRSAEncryption
68:f8:48:23:3f:b5:c1:e8:df:ec:a7:bb:34:fa:cd:32:db:fd:
61:b7:bb:b3:b7:17:7f:40:3c:5e:d7:42:5b:79:33:eb:b8:df:
ae:37:48:2b:e3:54:a0:61:99:e1:5a:f1:15:f2:15:ed:d3:15:
c9:00:f7:4d:c2:ef:07:ea:22:ea:41:3e:52:d9:47:d7:24:a0:
f9:9f:31:d5:4a:27:33:36:8f:45:99:ee:57:d0:e0:cc:04:fe:
68:f8:35:a4:e8:da:f0:c1:19:d3:43:cf:ef:f5:fa:12:f3:c7:
ee:22:e5:ad:77:c9:96:b2:d1:d6:4d:9f:47:ed:5a:39:af:5c:
c9:65:fd:3a:46:c8:f2:1f:52:f6:71:62:4e:d6:6e:41:6a:be:
4e:d0:ff:83:51:78:89:ac:37:91:64:5b:62:a8:50:6c:a1:90:
4e:66:73:d0:70:4d:cd:e5:b3:07:3b:98:74:84:82:7b:5f:1d:
57:14:37:ba:34:0f:c8:79:52:4b:86:e9:74:d9:e2:cd:a7:65:
c8:1d:a7:68:fb:01:1f:98:9e:09:56:16:ff:f3:50:4a:17:f7:
93:f3:a2:ce:b6:23:f8:93:24:9c:e5:db:f1:fd:6a:3b:1c:01:
3c:f6:97:9e:9e:76:32:18:11:4e:a5:89:63:3f:ad:d5:ee:a4:
45:1f:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:32:22 2025 by rpki-client