
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
File: a9BbFe-hJmUsn1g-z7evGix4R1U.roa (raw, json)
Hash identifier: l+1McmjNncla9TVgM6XlSBDb4pliutz4YQ+Aa48utAo=
Subject key identifier: 6B:D0:5B:15:EF:A1:26:65:2C:9F:58:3E:CF:B7:AF:1A:2C:78:47:55
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: EF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
Signing time: Thu 24 Jul 2025 01:58:23 +0000
ROA not before: Thu 24 Jul 2025 01:58:23 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.252.112.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 01:58:23 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=6BD05B15EFA126652C9F583ECFB7AF1A2C784755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:41:9f:47:ad:8c:b4:00:31:59:5f:40:93:
9a:25:2a:db:da:3a:92:5b:3d:90:ca:7e:a7:8c:4e:
3d:69:1b:95:91:97:f5:66:f4:c3:3e:5d:80:35:2e:
02:aa:f8:ca:14:47:3d:9c:cb:20:79:85:73:fd:03:
02:6a:5e:c9:6c:4b:c4:e1:a5:38:03:ee:11:10:49:
5f:c6:a0:92:6f:c7:59:00:86:c2:68:9e:91:11:3c:
0c:1a:0d:14:11:3f:3e:de:16:33:90:01:7a:b8:7f:
65:b1:be:c1:33:03:33:f5:65:d6:e9:e7:13:8f:7a:
c6:f4:e0:34:6a:1d:7b:0e:40:1a:9f:86:73:f3:c9:
71:bc:7a:0c:9d:9b:1f:da:1f:41:86:ac:75:06:05:
3e:a6:04:00:cc:d7:df:98:a4:66:e4:7d:fd:d8:de:
b5:61:a0:94:61:c2:b9:ad:8b:81:1c:50:67:a3:a9:
db:0e:b7:1f:f4:8c:12:6a:db:9b:d8:a3:f3:47:de:
c7:b2:96:a8:d7:a9:be:ed:bf:19:47:8d:e8:b0:55:
79:d3:13:d4:9a:f1:a4:b3:df:ce:65:63:9d:37:73:
86:13:f1:9a:53:c7:a3:e6:a5:b3:6a:52:3e:cd:3c:
fd:08:c0:41:a8:e6:a9:dc:ad:72:a4:9f:09:6f:a1:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:5B:15:EF:A1:26:65:2C:9F:58:3E:CF:B7:AF:1A:2C:78:47:55
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.252.112.0/20
Signature Algorithm: sha256WithRSAEncryption
41:72:e8:00:a4:b0:f1:da:a1:a0:5a:2a:f3:a7:98:3d:cc:88:
cc:6f:c1:21:12:fa:d7:b3:3e:47:c2:7e:40:41:a9:78:c7:a2:
5f:e2:a5:ac:cb:c3:03:70:a0:63:1c:71:3f:c3:f5:19:aa:76:
96:20:32:d9:00:fe:d0:a8:19:93:6d:bf:68:2c:08:e4:44:d0:
53:bb:6a:ae:19:9b:bf:25:a2:67:4c:a6:be:40:5c:d4:cb:d7:
d6:d8:51:c8:38:ad:69:7a:c9:70:b0:aa:26:78:0b:fd:82:26:
75:4f:4b:16:d4:bf:f1:31:9b:67:a4:5c:5a:6d:5a:b7:cf:c8:
2e:e2:2b:25:e3:d6:31:f5:8d:4a:0c:3c:22:4c:3d:8d:41:83:
e7:c1:07:e4:1a:b3:6c:c0:93:23:3e:93:ff:36:96:5c:48:fc:
98:12:72:3e:7e:b5:08:05:c4:cd:d8:59:8b:ac:71:b0:22:16:
52:75:87:45:69:eb:bd:72:07:fe:49:b9:09:92:a5:8e:eb:85:
fc:58:1c:f2:e8:33:de:15:3c:69:4d:b1:87:86:45:94:d7:35:
b1:89:77:0a:d6:4e:5d:1a:0d:dc:fc:33:af:5e:ae:dc:03:24:
28:26:69:7a:94:ac:f9:45:f1:92:25:f7:4f:ea:6e:78:ef:e6:
eb:1c:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:52:00 2025 by rpki-client