
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
File: jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa (raw, json)
Hash identifier: gLq7mQJhD6bWfiN2mlRsXihm/zbbDpqbw+m6asm9ss8=
Subject key identifier: 8D:40:59:DE:1F:79:5D:C6:77:BD:C4:B7:62:B1:B1:C9:77:03:D7:83
Certificate issuer: /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Certificate serial: 13
Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
Signing time: Fri 04 Apr 2025 07:42:11 +0000
ROA not before: Fri 04 Apr 2025 07:42:11 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 131926
IP address blocks: 69.6.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Validity
Not Before: Apr 4 07:42:11 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=8D4059DE1F795DC677BDC4B762B1B1C97703D783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:bb:ff:5c:7a:44:2a:ec:20:aa:a2:79:3c:
8f:b5:1a:97:43:34:38:46:cf:70:84:b5:62:bd:20:
08:58:e0:d9:98:fa:41:20:c8:f8:7d:4a:63:6c:df:
5c:a0:7d:70:c7:9a:d4:8e:9a:de:3b:d1:3a:56:0b:
68:78:10:aa:a2:2c:13:8f:e7:94:cc:93:5b:05:8b:
a1:55:aa:35:fd:7e:e9:b5:a0:cc:23:94:9a:12:8e:
56:3c:14:4b:c2:5f:51:58:bd:f3:19:d2:c7:3b:82:
85:81:22:11:44:4d:62:cb:10:3d:71:9c:38:8a:eb:
89:1d:c7:4b:12:9a:40:fb:ee:f4:5f:b8:e4:38:05:
d2:49:7b:94:0d:05:26:4e:fb:1c:9b:4e:b9:ae:f0:
94:73:0a:24:2b:50:c3:b6:38:7e:fd:92:1b:cb:62:
9a:84:59:dd:52:de:a1:35:02:d0:19:28:68:52:0d:
01:3e:ee:58:4a:78:70:26:41:a2:c7:66:e2:61:9b:
0c:3c:64:a7:b7:71:45:7d:9d:05:76:3e:47:8f:68:
2d:26:2e:fa:31:66:7c:3b:6f:77:fc:15:e2:c9:96:
3f:87:d3:ed:8c:ea:10:09:20:12:3f:7e:1a:9f:18:
e9:8c:3e:d6:e1:da:ff:51:22:e9:4e:5a:06:4b:ee:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:59:DE:1F:79:5D:C6:77:BD:C4:B7:62:B1:B1:C9:77:03:D7:83
X509v3 Authority Key Identifier:
keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.6.64.0/20
Signature Algorithm: sha256WithRSAEncryption
59:cb:a5:1a:d2:40:d3:8c:ca:d8:7f:f4:37:bb:96:16:ad:26:
1d:dd:48:fe:1c:7d:e1:ba:42:3b:7f:74:a4:65:83:91:b4:85:
6a:32:96:d0:bf:87:6f:86:df:db:4b:3b:0d:da:52:21:d8:d3:
b6:01:52:66:8d:15:1c:df:27:5a:65:72:9a:9c:fe:23:c1:88:
ca:e0:0a:55:53:4d:4a:de:47:35:4a:ba:14:34:53:43:3f:a5:
31:38:7f:91:50:05:af:1f:ee:d1:ee:96:b6:9e:c3:ba:60:f6:
7a:49:98:b2:d5:92:e5:c5:f9:90:db:89:8f:9b:10:61:85:5f:
e2:28:d5:50:2b:4e:fc:d3:87:50:9e:76:4d:e5:8d:f9:b7:df:
cc:29:12:5f:51:46:21:98:8c:7e:e4:2a:09:2b:93:bc:21:14:
0f:0d:08:c3:12:95:55:12:26:e2:68:f4:35:7c:63:2c:6d:91:
cb:05:14:a7:bf:44:32:45:8e:88:4c:98:ef:d6:ac:75:db:aa:
35:01:a6:70:8d:eb:dc:5d:a1:16:88:ed:12:7b:29:52:e4:b2:
c2:0b:31:ff:02:b8:1e:79:a3:b7:cc:ef:b2:3c:9e:4d:4a:49:
83:5b:da:e1:9c:a2:5e:8c:d3:53:a0:57:15:e9:2f:b5:fe:2b:
71:f7:b8:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:57 2025 by rpki-client