
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
File: 0Fl0xS6NkneuKaXL2AIoVv5wT78.roa (raw, json)
Hash identifier: XQ5OwZhHuvHHjunCU0tPiN9SCjlGn8PeiSOT0HJAaZo=
Subject key identifier: D0:59:74:C5:2E:8D:92:77:AE:29:A5:CB:D8:02:28:56:FE:70:4F:BF
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: B7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
Signing time: Thu 24 Jul 2025 01:09:49 +0000
ROA not before: Thu 24 Jul 2025 01:09:49 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.140.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 01:09:49 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=D05974C52E8D9277AE29A5CBD8022856FE704FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:de:e3:9f:be:e6:03:0f:1a:68:55:1d:bc:
05:30:55:51:2a:83:73:19:d1:0a:74:4b:2b:5e:81:
51:46:c0:9a:50:e6:a0:9c:30:6c:ce:63:b3:66:11:
27:c3:e8:f4:99:c6:09:bb:21:9d:e5:78:48:75:0c:
1f:bf:5a:b1:6d:ae:02:79:03:1c:88:1a:e2:b3:c0:
52:15:24:91:9b:de:9f:1e:87:0a:a1:06:84:5e:0f:
23:df:ac:3d:01:e6:17:68:a4:78:b3:f3:c6:f0:4b:
15:82:14:34:32:49:28:55:a4:6e:bd:6e:88:a5:f6:
36:9d:3e:6b:4a:b1:d0:90:f3:e7:48:a6:b6:c5:e4:
21:26:92:81:61:94:3a:1b:61:07:f9:b7:65:e1:a8:
d6:cd:10:84:70:10:30:f8:d0:5d:e8:30:25:2b:f9:
39:7f:b2:b7:9d:1f:63:87:cb:e0:21:2b:ad:1b:20:
c7:7d:60:a6:a5:49:fd:0d:ff:af:1e:cd:60:f0:d2:
96:44:aa:54:ec:8d:d4:9c:19:9d:83:e9:d4:3c:34:
d2:09:3a:fc:2a:37:86:52:c4:33:c2:12:a1:c8:f0:
ae:b1:4c:b5:2d:b2:f9:a4:59:f9:ab:63:b7:9b:e8:
c9:c9:76:d5:b5:e4:5b:48:66:2b:bc:e5:2a:90:cd:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:74:C5:2E:8D:92:77:AE:29:A5:CB:D8:02:28:56:FE:70:4F:BF
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.140.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:b0:86:9e:3c:08:1e:7f:99:12:d8:46:43:1a:fb:d4:32:55:
0d:6d:97:ac:83:25:be:90:b0:2a:0b:85:ab:73:fd:8b:2d:41:
44:84:b2:5e:b9:1c:6d:a6:7b:f0:70:e7:98:12:30:ae:9e:09:
6f:d6:8b:b4:84:88:f6:e0:8e:c2:51:ed:24:78:3e:da:a7:6d:
fa:cc:d3:64:7e:03:e5:bb:9e:e5:ec:24:4e:d6:ec:ce:ea:35:
29:dd:a8:fe:13:af:14:18:a3:68:0d:77:86:2b:46:eb:9e:b8:
4b:a5:85:12:f8:3f:b4:76:f1:54:5c:10:f1:3e:0c:4b:59:84:
97:28:a7:32:df:83:ab:73:99:91:11:8a:5b:d3:8d:d5:83:d2:
27:e0:b4:20:6f:07:b7:4d:93:67:cd:02:24:cd:ac:33:21:16:
86:0a:dd:82:09:8e:0e:1b:1f:b3:79:cf:7a:b9:a7:61:57:1e:
f0:be:f7:a5:e1:4b:dd:69:7a:85:7f:6b:1d:43:7d:41:fd:e0:
ab:2a:f7:8e:5c:16:e6:a2:51:d8:76:e9:88:63:ed:7d:2f:01:
ce:b5:e8:e4:e6:97:a4:ab:78:82:f4:1a:21:71:d7:5c:98:cb:
0d:cc:76:dd:90:c7:59:00:46:d1:19:71:85:8a:13:32:c1:50:
75:90:cc:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTA5NDlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEQwNTk3NEM1MkU4RDky
NzdBRTI5QTVDQkQ4MDIyODU2RkU3MDRGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVmd7jn77mAw8aaFUdvAUwVVEqg3MZ0Qp0SytegVFGwJpQ5qCc
MGzOY7NmESfD6PSZxgm7IZ3leEh1DB+/WrFtrgJ5AxyIGuKzwFIVJJGb3p8ehwqh
BoReDyPfrD0B5hdopHiz88bwSxWCFDQySShVpG69boil9jadPmtKsdCQ8+dIprbF
5CEmkoFhlDobYQf5t2XhqNbNEIRwEDD40F3oMCUr+Tl/sredH2OHy+AhK60bIMd9
YKalSf0N/68ezWDw0pZEqlTsjdScGZ2D6dQ8NNIJOvwqN4ZSxDPCEqHI8K6xTLUt
svmkWfmrY7eb6MnJdtW15FtIZiu85SqQzQgLAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU0Fl0xS6NkneuKaXL2AIoVv5wT78wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My8wRmwweFM2TmtuZXVLYVhMMkFJb1Z2NXdUNzgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0owwMA0GCSqGSIb3DQEBCwUAA4IBAQDJsIaePAgef5kS2EZDGvvU
MlUNbZesgyW+kLAqC4Wrc/2LLUFEhLJeuRxtpnvwcOeYEjCunglv1ou0hIj24I7C
Ue0keD7ap236zNNkfgPlu57l7CRO1uzO6jUp3aj+E68UGKNoDXeGK0brnrhLpYUS
+D+0dvFUXBDxPgxLWYSXKKcy34Orc5mREYpb043Vg9In4LQgbwe3TZNnzQIkzawz
IRaGCt2CCY4OGx+zec96uadhVx7wvvel4UvdaXqFf2sdQ31B/eCrKveOXBbmolHY
dumIY+19LwHOtejk5pekq3iC9BohcddcmMsNzHbdkMdZAEbRGXGFihMywVB1kMx5
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:52:29 2025 by rpki-client