
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
File: 1joexJVlGmxACR-EJOZ1WJKtg8I.roa (raw, json)
Hash identifier: td7N+MCwnGEofSDTBCojlCtf80nsv96TMoK3Jb9n/+A=
Subject key identifier: D6:3A:1E:C4:95:65:1A:6C:40:09:1F:84:24:E6:75:58:92:AD:83:C2
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0102
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
Signing time: Thu 24 Jul 2025 02:05:31 +0000
ROA not before: Thu 24 Jul 2025 02:05:31 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 211.120.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 02:05:31 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=D63A1EC495651A6C40091F8424E6755892AD83C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:3c:3d:4f:79:98:4d:df:6a:a2:93:8e:e1:
e3:ba:c4:90:6d:c7:34:e7:95:4b:4c:75:a5:62:9c:
e6:87:c7:e4:fe:42:77:e0:c4:08:08:c0:41:88:d6:
fd:1a:d1:a7:39:5b:f7:ac:ec:50:1e:68:a0:91:00:
ba:ab:7b:cd:3e:c3:7c:d1:ca:d7:85:99:23:7a:9b:
61:c5:ce:68:d3:37:7f:3a:78:ac:4d:e8:ff:65:05:
74:31:c7:41:d4:73:a7:ac:44:c4:44:ff:1f:09:52:
60:0f:37:a9:2c:02:b0:15:aa:60:d4:28:a3:0b:b3:
a2:d0:7c:d6:e8:02:d6:96:c3:3f:7d:02:8f:91:67:
a6:16:d5:ae:99:f2:d5:e6:58:2e:50:a4:4e:03:cd:
44:cf:fe:a3:e7:33:82:73:4f:02:51:ba:0e:24:9c:
0a:29:b0:22:90:38:06:51:a2:d6:68:1a:01:d3:ec:
2d:77:be:ea:82:dd:b2:95:6b:c1:c8:b1:92:c3:6c:
fc:24:06:d0:87:82:e7:35:8e:86:26:58:28:bf:ce:
fa:38:ec:ee:a2:36:55:7e:aa:aa:f7:2d:03:06:a0:
95:b6:ff:3a:a6:a0:56:2e:0d:4e:1f:b1:72:76:29:
bf:9a:48:ea:02:25:9c:82:a6:27:9f:c6:c1:88:8e:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:1E:C4:95:65:1A:6C:40:09:1F:84:24:E6:75:58:92:AD:83:C2
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.120.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:7c:35:4f:66:cf:40:f1:36:7c:ec:28:4a:79:1d:cb:fd:b8:
bd:79:a9:2f:fd:c8:37:b3:3d:b8:74:38:ca:69:6a:7f:48:18:
15:5e:b4:2e:44:8a:35:58:36:86:68:76:37:f2:fb:45:c7:41:
24:ae:33:ba:a4:32:2b:a6:9b:dd:43:99:80:c3:8f:85:85:e8:
fd:c3:26:60:73:8b:14:10:41:34:7a:39:53:d7:e3:fa:b5:a0:
67:c4:61:24:ec:c7:2b:a6:5d:db:e8:32:db:b4:2f:5a:27:80:
28:a4:d3:27:5e:21:b4:21:ef:3a:05:eb:c1:1c:29:2d:e8:4b:
50:9e:77:9d:ca:bc:b3:f0:d8:ca:5b:12:9b:7d:aa:c7:98:04:
64:26:01:d1:5a:f2:24:fb:07:06:23:d7:c2:22:4e:64:ea:a1:
10:93:bf:92:31:7e:e2:bf:8a:2f:09:86:dd:99:4d:59:fd:dd:
56:20:6d:29:d0:be:7b:10:e7:2b:29:15:df:56:fb:b4:1e:1e:
8a:63:f4:9a:80:8b:19:96:74:73:cd:66:7b:53:0a:c3:ee:40:
de:be:38:58:bf:56:dd:d1:59:f0:45:81:2e:a7:1d:10:1a:b3:
b5:e8:4c:b4:5d:67:20:46:f4:84:f2:56:f0:2f:b5:96:77:78:
5b:38:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:55:37 2025 by rpki-client