
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
File: GRhuwT6D45y9aXWF-hSWda1gAmQ.roa (raw, json)
Hash identifier: GzgX/WrILfLO3zl5meb96EuRj0uYdQIL9FVMtxje5wA=
Subject key identifier: 19:18:6E:C1:3E:83:E3:9C:BD:69:75:85:FA:14:96:75:AD:60:02:64
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 010B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
Signing time: Thu 24 Jul 2025 02:13:00 +0000
ROA not before: Thu 24 Jul 2025 02:13:00 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.235.30.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 02:13:00 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=19186EC13E83E39CBD697585FA149675AD600264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:f1:b0:98:a3:e7:36:3a:83:cf:fe:d7:3e:
49:7e:da:70:62:9c:9d:3f:47:31:45:18:5e:93:d2:
2c:1e:7e:1c:5e:fd:db:fd:b6:fc:b1:42:cd:ac:cc:
20:40:ea:25:14:73:1a:82:ca:0d:87:0d:a4:21:d8:
78:fd:7d:78:da:ac:98:3c:15:94:72:71:e6:a9:a8:
02:c5:01:93:83:a1:89:0e:3a:d4:24:e4:fe:ce:95:
bb:81:93:fd:82:3c:ba:3f:fe:3e:db:0b:67:00:24:
11:34:31:71:40:69:08:ce:42:1f:b0:e2:d1:8e:ad:
77:74:07:f1:21:d4:e6:2c:c6:e2:8b:1b:59:f8:e9:
1c:2b:a1:45:84:89:2c:c3:eb:79:b8:10:82:ad:a3:
01:cc:05:a2:01:5d:0d:f2:ea:ed:f3:f9:fd:d8:7a:
26:3f:99:39:56:5d:fd:e4:00:ee:55:6c:54:b2:48:
fe:e1:b0:68:dc:7a:c5:1d:a7:af:4d:49:48:b4:93:
e1:44:75:2f:46:16:79:6d:e5:65:8b:ef:d1:bf:90:
bc:b5:5d:45:d1:aa:ec:7e:1b:01:05:9e:0a:b2:b8:
7a:34:f3:de:fc:b3:5f:1d:a6:21:c8:55:fb:3d:0b:
18:25:ce:14:34:8e:f9:f4:5c:17:56:40:c6:f2:37:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:6E:C1:3E:83:E3:9C:BD:69:75:85:FA:14:96:75:AD:60:02:64
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ed:56:bd:42:98:b4:c5:39:97:ec:14:db:ef:35:23:74:b4:
84:79:d3:32:da:86:4c:46:6f:19:ac:c7:40:f0:dc:ed:3c:54:
3d:db:d6:a7:3b:17:e4:12:d7:98:99:a3:1d:84:43:0f:1e:da:
9c:33:bf:78:72:e7:d2:40:25:a1:ec:3f:0f:6d:eb:b9:78:78:
62:ff:e8:e9:7e:bb:1f:d8:8c:c1:bd:88:6c:6a:df:b2:82:6e:
73:f2:6c:d7:51:f2:9b:db:01:6e:16:39:07:27:b4:b9:16:66:
51:4b:26:d7:95:07:7c:ec:df:55:37:29:36:e6:c8:fc:85:a2:
52:00:5b:76:4c:ce:52:17:d3:89:a4:8c:53:ce:18:48:04:93:
d0:9d:fa:d9:eb:2a:28:8d:24:65:c6:26:2d:9b:5a:6a:1b:0e:
84:5a:a1:d3:c9:14:c2:c7:a4:32:e0:2d:7d:58:1e:04:b9:30:
20:04:1d:97:b0:3d:e4:55:59:53:9e:b5:b1:a3:34:c3:51:ed:
98:bf:b6:b6:a1:91:55:bc:5f:76:62:2f:33:2f:48:f5:94:b0:
e3:e4:5d:12:97:35:e8:a9:de:2e:94:86:bc:56:8b:f3:42:23:
70:c3:e4:16:a5:95:10:86:97:e8:52:d7:5c:75:60:6b:e5:d2:
7c:c6:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:46 2025 by rpki-client