
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
File: J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa (raw, json)
Hash identifier: yD0bFxvBZCOMnYmktS4kirmNgksCdqzsx6TzNkuTlM8=
Subject key identifier: 27:FB:FC:97:84:61:FF:26:A9:ED:87:0F:FA:04:45:E1:69:61:BC:78
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: DD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
Signing time: Thu 24 Jul 2025 01:50:59 +0000
ROA not before: Thu 24 Jul 2025 01:50:59 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.235.8.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 01:50:59 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=27FBFC978461FF26A9ED870FFA0445E16961BC78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:6f:ce:a0:c1:7c:78:e2:80:02:f1:29:9e:
f2:06:45:f8:8e:c9:16:13:a1:3c:f8:b6:9f:b9:17:
65:c6:da:ec:d7:8e:fc:40:e6:5b:1d:63:cc:18:a8:
3b:7e:3e:a3:fb:f1:c9:dc:da:8e:71:36:1c:9e:a0:
a7:43:da:6c:0c:c2:f5:72:f1:9b:8d:62:71:58:a1:
da:67:76:2a:f5:8f:7d:29:be:0f:8a:54:9d:22:4b:
60:1a:f6:17:d4:6b:83:63:93:ce:fb:2e:ff:c0:17:
a4:81:79:a5:bf:79:89:ff:23:40:4a:d8:d2:58:83:
80:57:0a:8e:b9:1b:69:93:0b:22:2e:c9:7d:20:14:
e1:6c:42:1b:fa:e4:af:db:a6:8c:ad:6a:0e:31:84:
b7:b8:1c:09:4d:da:ab:3c:e1:77:75:c5:a2:f8:5f:
79:88:c6:ef:21:e8:71:6a:c6:2d:45:aa:5e:12:83:
2a:d8:20:6f:5d:55:91:6b:0e:e7:bf:6e:03:b9:7b:
c5:5a:66:1f:3c:a1:53:14:09:bc:e6:d4:e0:05:5f:
43:05:06:5f:9e:4d:4d:c5:41:56:ff:2e:8e:70:0f:
18:c2:f9:e0:da:26:c5:54:b5:d1:7a:ea:de:13:85:
b2:b1:f0:5b:4a:2b:da:e7:61:80:47:2b:0b:6b:8a:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:FC:97:84:61:FF:26:A9:ED:87:0F:FA:04:45:E1:69:61:BC:78
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.8.0/21
Signature Algorithm: sha256WithRSAEncryption
27:a8:31:da:e6:21:07:65:f9:54:63:a5:69:ce:1e:3f:39:bb:
ec:3d:0e:a7:97:03:3e:9b:03:fa:90:54:22:cc:3a:54:3f:9c:
89:92:df:a3:12:2d:2c:0d:ff:ef:bf:f0:cd:51:36:94:11:3f:
e4:21:af:95:b9:a0:53:11:9f:38:67:32:7b:21:04:77:72:73:
ab:1d:f0:89:cf:ba:4e:79:7a:ef:7c:53:cc:ef:ef:75:1a:74:
16:72:79:f0:5d:ae:13:1d:9c:bc:ac:b6:2d:98:84:95:5d:99:
cd:eb:62:95:16:cc:ac:ee:09:56:20:a4:39:a9:03:3a:23:11:
da:f1:72:2d:76:a3:28:b7:89:8b:96:0a:86:cb:dc:76:bf:67:
df:d8:26:0b:4d:54:de:db:82:68:06:22:ea:02:07:68:0a:d7:
17:70:9c:4d:d8:09:ae:d9:cb:f5:ee:4d:bd:3b:ae:4d:01:5d:
5b:b1:af:11:25:6f:bb:b6:76:9e:1a:30:db:e8:7e:58:56:42:
5d:f7:2b:d1:d3:d7:5d:11:c5:cb:50:37:73:96:be:e1:ea:5d:
21:62:4d:a2:c0:91:78:74:4c:5e:de:25:7f:89:71:8c:15:68:
3d:5d:37:77:f8:af:64:57:d0:70:8e:d2:f6:7a:53:ab:b7:4b:
9d:65:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:51 2025 by rpki-client