
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
File: L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa (raw, json)
Hash identifier: 1xJie0tZ/UAF3KewLYXaaEgX4nDWAZiDGHloQP8BWXw=
Subject key identifier: 2F:F0:61:D9:63:A1:F3:CB:8A:83:28:B0:17:50:CB:1B:76:E0:B7:40
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: E3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
Signing time: Thu 24 Jul 2025 01:51:04 +0000
ROA not before: Thu 24 Jul 2025 01:51:04 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.236.236.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 01:51:04 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=2FF061D963A1F3CB8A8328B01750CB1B76E0B740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:d9:a7:b6:cc:4e:90:19:3b:81:18:26:b7:
8e:c8:9c:0b:c6:ec:93:6e:d7:f3:44:56:6b:df:05:
47:ea:92:37:db:fc:3f:88:4a:12:1c:e2:c8:28:59:
6b:45:8f:34:f3:0a:ab:18:6a:97:2f:31:08:1b:1c:
30:97:9e:81:be:86:c6:e0:d8:c6:6a:69:9a:85:3b:
33:3d:60:fe:d0:0d:7f:7f:ff:6a:af:a3:d1:94:b5:
c7:a1:e0:51:63:c6:53:db:71:47:d7:91:5a:e3:0f:
3c:51:49:62:0d:87:46:02:5e:e4:16:3a:23:74:df:
25:5b:64:e7:41:72:97:6b:aa:3f:26:51:b2:b0:70:
91:ed:3b:7e:b4:c9:c7:4e:c8:ae:f4:a6:1d:9f:a0:
5a:da:2a:30:53:97:90:17:40:7c:8e:26:51:de:dd:
c6:b7:e3:d1:e8:cf:0c:a8:03:fc:72:86:1b:47:bf:
5d:4a:c0:38:90:0b:58:d6:5c:b3:92:16:c2:36:6e:
7c:b2:37:25:70:79:5d:78:48:b6:05:2c:ec:c0:33:
0d:d0:b4:a7:f7:00:db:55:cf:dc:3a:51:39:c0:40:
ab:17:d7:e9:9c:54:19:fe:d9:65:82:e3:fb:48:69:
d4:a3:77:74:39:99:0b:55:23:7d:ef:6e:b3:60:38:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:61:D9:63:A1:F3:CB:8A:83:28:B0:17:50:CB:1B:76:E0:B7:40
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:8c:35:d5:a9:17:50:62:74:d8:0a:05:15:65:71:87:6e:ba:
8a:55:77:5a:53:a1:6d:dd:b6:33:db:e6:87:86:70:e9:fb:16:
94:35:44:51:ea:82:2d:0f:8d:4a:86:02:d0:cf:40:df:d6:f5:
ff:df:8a:6c:6b:b7:f2:15:a1:fc:71:6e:e1:f1:f0:c4:8a:4f:
ba:78:3f:59:4e:10:85:32:e4:58:d6:79:cc:5f:4e:a7:fb:ca:
67:86:d6:9f:ae:97:a8:c0:b8:31:00:c4:98:d5:f0:84:f8:8a:
e2:ac:f8:70:2f:48:c8:8f:1b:13:a7:f2:36:2d:01:ce:58:67:
d7:d0:c1:ca:f6:48:7c:46:2a:d7:5c:97:c4:ce:00:70:6d:1e:
45:63:29:ee:9b:2e:82:5f:0c:88:8b:06:c8:cd:30:09:7a:6b:
ee:a9:59:73:4c:1c:e0:dd:25:03:0f:b8:bc:2c:dc:83:90:a7:
55:e3:49:33:31:29:df:95:a0:05:84:f7:24:7b:23:4f:20:9f:
d3:b5:4d:11:79:c8:d2:39:5e:da:5f:67:e0:39:33:88:f1:aa:
70:ac:dc:7c:43:bb:ef:88:2c:c5:1a:ec:69:0e:26:77:b7:0c:
18:28:e2:ac:19:1e:99:4f:99:14:da:19:0c:aa:09:ac:0f:c9:
ef:3d:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:54:09 2025 by rpki-client