
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
File: 0aZy6GtSgPQttWIpJOEhBvDGMPk.roa (raw, json)
Hash identifier: tm9RA4FxFs9buUvu/fQToXl9hWGy006PPdLihHuLIPw=
Subject key identifier: D1:A6:72:E8:6B:52:80:F4:2D:B5:62:29:24:E1:21:06:F0:C6:30:F9
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 8A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
Signing time: Thu 17 Jul 2025 01:31:24 +0000
ROA not before: Thu 17 Jul 2025 01:31:24 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.152.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 17 01:31:24 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=D1A672E86B5280F42DB5622924E12106F0C630F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:12:4b:40:ee:99:61:49:dd:3b:a9:59:34:
d8:b9:30:3e:fc:57:a2:0a:48:e5:b0:3a:8c:99:b3:
82:2d:2b:1a:0d:75:a6:1c:4c:62:fb:46:bf:85:d9:
24:4b:dc:2a:32:74:59:b6:9e:e1:60:57:8e:36:4b:
8f:7b:af:62:29:5c:41:1b:e9:6a:d4:38:48:62:e4:
69:c6:8d:2f:45:b7:69:d3:cf:55:f9:a2:00:13:72:
69:f1:97:4d:87:6f:82:81:12:37:1c:b0:b7:54:3e:
f7:3a:15:66:1c:2c:e6:88:68:b7:eb:0b:4e:57:bb:
47:c1:a9:32:20:90:b3:7a:88:d8:30:d0:04:5b:c0:
92:7f:18:90:b7:e7:88:6e:78:1d:40:af:80:3f:17:
b5:f1:d1:5b:33:2c:e7:19:4d:af:e1:87:92:04:d7:
55:76:e1:c5:3c:90:2f:4d:2d:b6:16:4b:cd:4f:3e:
4c:99:a8:30:f1:8c:fc:5e:b9:02:18:ab:43:6b:21:
88:89:62:65:3a:b0:62:12:ba:f4:02:4a:cf:d5:0a:
e2:77:ce:50:60:92:d7:a8:ce:c5:25:a4:2f:a1:5b:
48:79:fa:5b:09:05:41:4b:a4:63:e3:5a:3d:02:e8:
93:03:b3:bb:cb:d0:41:fe:14:b4:39:fc:9a:14:59:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:72:E8:6B:52:80:F4:2D:B5:62:29:24:E1:21:06:F0:C6:30:F9
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.152.160.0/20
Signature Algorithm: sha256WithRSAEncryption
81:e4:53:38:72:12:77:79:5f:47:c4:60:a3:37:3b:5e:68:05:
34:c6:d5:19:13:73:13:e7:bd:c8:54:3c:34:ce:31:44:94:77:
b6:82:47:5f:c5:d4:cf:f9:83:81:78:fe:59:38:35:46:13:20:
bc:1d:9d:ae:67:ae:45:bb:42:22:db:f3:f8:3e:d8:51:cf:a4:
3d:bc:c6:96:fa:52:17:5e:0f:9b:59:dd:7c:15:db:40:cc:01:
b2:0e:87:21:23:20:c2:fd:1c:6f:30:a0:51:a1:c2:50:6c:08:
8d:44:a7:33:d8:f7:14:a7:55:00:27:82:30:cd:61:96:fd:4d:
bf:1e:e4:2b:3c:c1:1d:eb:26:bd:25:d2:ae:46:3b:df:ea:12:
96:7f:56:bc:41:0d:c6:28:9e:a1:9b:4a:80:cd:68:b5:fe:9e:
4e:55:1f:c1:85:2b:63:cc:46:8e:3e:39:7f:5a:38:15:5c:43:
33:cb:e5:7a:6d:b7:e2:ee:2d:c0:24:5a:54:02:42:1d:2c:6f:
e5:61:b0:e1:d0:60:b2:0e:e0:ab:e9:82:21:03:08:aa:b9:02:
3d:9a:14:07:b2:73:55:45:2c:86:f5:ac:69:1b:d1:1c:cb:c5:
df:a3:b1:9f:c0:73:51:69:68:c3:bb:ce:00:19:8b:38:f4:33:
93:a6:3a:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw
MTMxMjRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEQxQTY3MkU4NkI1Mjgw
RjQyREI1NjIyOTI0RTEyMTA2RjBDNjMwRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKkxJLQO6ZYUndO6lZNNi5MD78V6IKSOWwOoyZs4ItKxoNdaYc
TGL7Rr+F2SRL3CoydFm2nuFgV442S497r2IpXEEb6WrUOEhi5GnGjS9Ft2nTz1X5
ogATcmnxl02Hb4KBEjccsLdUPvc6FWYcLOaIaLfrC05Xu0fBqTIgkLN6iNgw0ARb
wJJ/GJC354hueB1Ar4A/F7Xx0VszLOcZTa/hh5IE11V24cU8kC9NLbYWS81PPkyZ
qDDxjPxeuQIYq0NrIYiJYmU6sGISuvQCSs/VCuJ3zlBgkteozsUlpC+hW0h5+lsJ
BUFLpGPjWj0C6JMDs7vL0EH+FLQ5/JoUWfynAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU0aZy6GtSgPQttWIpJOEhBvDGMPkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My8wYVp5Nkd0U2dQUXR0V0lwSk9FaEJ2REdNUGsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0pigMA0GCSqGSIb3DQEBCwUAA4IBAQCB5FM4chJ3eV9HxGCjNzte
aAU0xtUZE3MT573IVDw0zjFElHe2gkdfxdTP+YOBeP5ZODVGEyC8HZ2uZ65Fu0Ii
2/P4PthRz6Q9vMaW+lIXXg+bWd18FdtAzAGyDochIyDC/RxvMKBRocJQbAiNRKcz
2PcUp1UAJ4IwzWGW/U2/HuQrPMEd6ya9JdKuRjvf6hKWf1a8QQ3GKJ6hm0qAzWi1
/p5OVR/BhStjzEaOPjl/WjgVXEMzy+V6bbfi7i3AJFpUAkIdLG/lYbDh0GCyDuCr
6YIhAwiquQI9mhQHsnNVRSyG9axpG9Ecy8Xfo7GfwHNRaWjDu84AGYs49DOTpjqU
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:42 2025 by rpki-client