
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
File: mZUMqduKynIs3cpAyNZYQr4qDsE.roa (raw, json)
Hash identifier: SwnCLF0+WVK36UYf4ZLjkYxjn5hy7mFwrjCp/LVVZto=
Subject key identifier: 99:95:0C:A9:DB:8A:CA:72:2C:DD:CA:40:C8:D6:58:42:BE:2A:0E:C1
Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial: 39
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
Signing time: Mon 01 Sep 2025 01:30:15 +0000
ROA not before: Mon 01 Sep 2025 01:30:15 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 0
IP address blocks: 133.88.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Validity
Not Before: Sep 1 01:30:15 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=99950CA9DB8ACA722CDDCA40C8D65842BE2A0EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:d5:2c:16:70:4b:3d:06:c6:85:44:c5:5e:
2b:72:f2:21:98:a0:f6:5f:34:c8:48:25:54:0f:ba:
19:16:bd:50:c6:c6:77:fc:46:66:0c:17:d8:d5:8a:
d4:67:20:aa:3f:14:41:ae:84:8a:31:31:11:67:6a:
79:e2:e6:52:6f:7e:bb:29:d2:f3:74:92:ae:cb:84:
76:a6:60:53:9c:c8:61:9d:7f:b1:21:ef:65:94:46:
70:37:7d:23:55:55:2f:6e:a0:de:33:9c:e5:85:a4:
fe:a7:93:c2:39:77:24:d0:5d:15:81:20:7f:37:27:
41:b3:9a:04:bf:3e:f2:b3:3e:a1:f1:60:52:17:49:
a0:35:34:88:ee:93:8a:41:da:a0:fc:e1:86:5d:12:
a3:35:de:cc:7d:30:02:a9:ac:3a:b2:c8:32:55:ab:
de:6e:f2:9a:53:44:6c:e9:23:11:b2:b3:7b:b9:c3:
a9:48:98:04:22:f5:4a:73:e3:7e:1b:05:17:1d:17:
57:d4:07:fd:ab:94:a2:94:e6:06:c2:56:37:d1:cf:
c5:b4:8b:0a:bb:48:e4:fc:c2:5b:08:8a:66:f8:88:
68:ac:52:59:a8:bd:91:01:33:5f:2f:b5:59:c8:ee:
c2:2d:5c:09:dd:c1:cc:7e:f1:4e:b8:c8:f8:9a:2c:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:95:0C:A9:DB:8A:CA:72:2C:DD:CA:40:C8:D6:58:42:BE:2A:0E:C1
X509v3 Authority Key Identifier:
keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.88.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:05:0c:97:32:eb:a0:67:c8:ae:a4:f5:0e:8d:1b:1e:7f:4f:
6d:61:5b:fd:40:7e:3e:87:cc:31:67:30:fa:e5:7b:f6:31:4f:
de:0b:b9:ab:e3:c9:c8:6c:b4:dc:4e:18:af:98:8d:a1:60:8a:
ee:d9:31:23:7a:65:a9:e4:4c:7b:71:4c:da:d2:fb:6b:43:cf:
bf:2b:b7:92:9c:a7:6b:ce:23:7e:9a:42:f6:11:58:0d:d2:ed:
16:ce:c3:ce:35:fd:f7:84:d6:d0:7f:68:15:33:c1:e4:c6:64:
03:71:c9:f6:56:96:ca:70:44:82:3d:76:2b:1e:22:a3:5b:5a:
80:6f:92:50:5c:88:a3:40:9e:c4:20:b5:c3:f8:a3:d1:6b:c5:
56:19:53:50:65:5f:0f:b4:44:53:54:34:86:42:c8:fa:84:9a:
47:36:3c:9d:d6:65:a9:35:2a:aa:88:c9:a6:ce:54:f0:b1:fe:
b7:3c:72:45:ef:d7:2d:b8:28:ff:de:05:6e:23:ea:f1:ca:3c:
5c:f1:5d:6b:7c:bf:36:8b:ba:52:f6:c7:82:65:c1:31:72:9b:
06:e6:e7:90:4e:4a:f0:e2:38:e4:95:5c:a9:31:69:b8:c3:3d:
d4:8e:27:f9:8e:91:be:bd:f1:5b:40:eb:cc:80:73:36:69:1a:
49:cb:b1:30
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx
MzAxNVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOTk5NTBDQTlEQjhBQ0E3
MjJDRERDQTQwQzhENjU4NDJCRTJBMEVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHO1SwWcEs9BsaFRMVeK3LyIZig9l80yEglVA+6GRa9UMbGd/xG
ZgwX2NWK1Gcgqj8UQa6EijExEWdqeeLmUm9+uynS83SSrsuEdqZgU5zIYZ1/sSHv
ZZRGcDd9I1VVL26g3jOc5YWk/qeTwjl3JNBdFYEgfzcnQbOaBL8+8rM+ofFgUhdJ
oDU0iO6TikHaoPzhhl0SozXezH0wAqmsOrLIMlWr3m7ymlNEbOkjEbKze7nDqUiY
BCL1SnPjfhsFFx0XV9QH/auUopTmBsJWN9HPxbSLCrtI5PzCWwiKZviIaKxSWai9
kQEzXy+1Wcjuwi1cCd3BzH7xTrjI+JosbRcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSZlQyp24rKcizdykDI1lhCvioOwTAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc1L21aVU1xZHVLeW5JczNjcEF5TlpZUXI0cURzRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKFWBgwDQYJKoZIhvcNAQELBQADggEBAAsFDJcy66BnyK6k9Q6NGx5/
T21hW/1Afj6HzDFnMPrle/YxT94LuavjychstNxOGK+YjaFgiu7ZMSN6ZankTHtx
TNrS+2tDz78rt5Kcp2vOI36aQvYRWA3S7RbOw841/feE1tB/aBUzweTGZANxyfZW
lspwRII9diseIqNbWoBvklBciKNAnsQgtcP4o9FrxVYZU1BlXw+0RFNUNIZCyPqE
mkc2PJ3WZak1KqqIyabOVPCx/rc8ckXv1y24KP/eBW4j6vHKPFzxXWt8vzaLulL2
x4JlwTFymwbm55BOSvDiOOSVXKkxabjDPdSOJ/mOkb698VtA68yAczZpGknLsTA=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:23 2025 by rpki-client