
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
File: Eodx-zThf-1ksqnYnDiXSzlRFyM.roa (raw, json)
Hash identifier: TCAA4Fu/JqaXxjrIgbIO7TGyILlhTAe+UC4xkDqyFR8=
Subject key identifier: 12:87:71:FB:34:E1:7F:ED:64:B2:A9:D8:9C:38:97:4B:39:51:17:23
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: FC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
Signing time: Thu 24 Jul 2025 02:05:29 +0000
ROA not before: Thu 24 Jul 2025 02:05:29 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 211.14.160.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 02:05:29 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=128771FB34E17FED64B2A9D89C38974B39511723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:48:ba:fb:c9:e0:cf:91:e3:23:41:47:b4:
87:83:e0:6d:35:c8:a5:94:70:99:bd:ef:c9:e0:67:
bc:d0:b0:22:65:6c:34:63:5a:a1:00:48:13:41:e7:
fa:b2:e0:74:4e:ba:2b:9f:5b:dd:d2:6c:77:94:b7:
5e:f0:8d:ae:05:e0:df:92:f7:21:2b:b6:30:7f:2c:
29:90:e9:02:38:ca:b2:7f:b1:17:97:63:84:f3:34:
c0:95:2c:ba:ce:cd:26:7c:7d:61:f1:74:c8:62:11:
e7:46:d1:3b:0e:c6:ab:17:80:07:24:b8:60:b5:20:
b7:45:4b:74:88:2d:45:e3:4d:74:40:2c:2d:3d:d8:
84:f7:1d:32:5c:e3:dd:5d:cd:d0:81:1e:92:de:bd:
19:89:63:d5:2e:12:f8:10:54:21:c9:38:64:49:94:
6a:2d:1d:26:44:61:0d:16:27:01:2e:fd:c3:9a:99:
1f:f7:3b:ae:25:a5:47:74:03:8d:25:fe:b7:79:93:
9b:0a:99:05:53:d0:55:48:b7:5a:fc:f4:9e:64:27:
d5:2a:64:f1:ce:ca:0f:0c:9b:0f:73:e7:5c:00:6e:
6a:94:86:a0:7f:f6:57:0f:ff:04:65:2a:aa:6a:1e:
aa:d6:18:52:bb:34:c6:8d:ae:0e:77:c2:86:89:17:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:71:FB:34:E1:7F:ED:64:B2:A9:D8:9C:38:97:4B:39:51:17:23
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
71:c2:49:91:06:f5:83:00:84:43:47:9f:50:bf:55:b8:58:a9:
ee:8a:66:71:7d:ef:6c:c8:da:92:48:89:8d:ec:e6:34:fe:e0:
34:74:da:94:4c:c7:b8:7d:a1:29:55:67:b3:f7:90:80:c6:18:
4e:b0:75:2b:90:fe:83:2d:c3:f6:6f:2a:f7:dc:4b:d9:72:80:
97:fd:ab:43:bf:8c:0c:88:bb:58:5a:96:aa:69:a6:07:84:8f:
f2:35:0e:f7:7a:7d:a3:76:84:b6:fa:96:52:94:04:37:78:98:
f2:ca:c4:8e:52:eb:c1:32:52:be:68:7f:1e:7a:18:6b:86:b1:
34:ae:48:67:29:b9:03:f4:d4:e5:76:6e:33:ad:3d:dd:d4:ff:
29:3c:7c:db:c1:8f:3c:d0:67:96:19:16:c8:5e:bd:5c:8e:b0:
57:3b:a4:1f:00:2f:27:23:7c:e8:f0:85:9d:96:56:a2:35:92:
d9:b9:18:ef:24:7a:48:a7:73:6a:10:1e:4f:a3:cd:1d:23:26:
4f:1e:bf:f3:a7:44:c1:20:c1:77:7b:10:4e:06:53:10:6e:cf:
df:25:01:bd:19:7f:f6:9a:6a:03:06:b5:f7:23:23:7d:a1:7c:
d6:40:d1:fa:fb:3f:a5:a4:e5:92:b4:e7:ab:6f:b2:f1:be:af:
38:c7:04:db
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MjA1MjlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDEyODc3MUZCMzRFMTdG
RUQ2NEIyQTlEODlDMzg5NzRCMzk1MTE3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAMki6+8ngz5HjI0FHtIeD4G01yKWUcJm978ngZ7zQsCJlbDRj
WqEASBNB5/qy4HROuiufW93SbHeUt17wja4F4N+S9yErtjB/LCmQ6QI4yrJ/sReX
Y4TzNMCVLLrOzSZ8fWHxdMhiEedG0TsOxqsXgAckuGC1ILdFS3SILUXjTXRALC09
2IT3HTJc491dzdCBHpLevRmJY9UuEvgQVCHJOGRJlGotHSZEYQ0WJwEu/cOamR/3
O64lpUd0A40l/rd5k5sKmQVT0FVIt1r89J5kJ9UqZPHOyg8Mmw9z51wAbmqUhqB/
9lcP/wRlKqpqHqrWGFK7NMaNrg53woaJF++TAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUEodx+zThf+1ksqnYnDiXSzlRFyMwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9Fb2R4LXpUaGYtMWtzcW5ZbkRpWFN6bFJGeU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQF0w6gMA0GCSqGSIb3DQEBCwUAA4IBAQBxwkmRBvWDAIRDR59Qv1W4
WKnuimZxfe9syNqSSImN7OY0/uA0dNqUTMe4faEpVWez95CAxhhOsHUrkP6DLcP2
byr33EvZcoCX/atDv4wMiLtYWpaqaaYHhI/yNQ73en2jdoS2+pZSlAQ3eJjyysSO
UuvBMlK+aH8eehhrhrE0rkhnKbkD9NTldm4zrT3d1P8pPHzbwY880GeWGRbIXr1c
jrBXO6QfAC8nI3zo8IWdllaiNZLZuRjvJHpIp3NqEB5Po80dIyZPHr/zp0TBIMF3
exBOBlMQbs/fJQG9GX/2mmoDBrX3IyN9oXzWQNH6+z+lpOWStOerb7Lxvq84xwTb
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:52:25 2025 by rpki-client