
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
File: jnE1eyuYnroqD1rw9FdYabk0NLE.roa (raw, json)
Hash identifier: kryswI4lubKHWppY8YtAilA+a2EdoaSTBgLg1QQcL2o=
Subject key identifier: 8E:71:35:7B:2B:98:9E:BA:2A:0F:5A:F0:F4:57:58:69:B9:34:34:B1
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 89
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
Signing time: Thu 17 Jul 2025 01:31:24 +0000
ROA not before: Thu 17 Jul 2025 01:31:24 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.152.128.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 17 01:31:24 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=8E71357B2B989EBA2A0F5AF0F4575869B93434B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:7f:80:11:dc:d0:99:eb:7d:f1:f6:99:f5:
46:54:6b:67:ce:fc:b4:5b:43:78:49:0d:43:42:61:
65:5f:29:45:d3:e5:c4:78:10:41:28:14:f0:d1:1c:
0a:98:2b:27:df:a7:e2:86:0b:3c:34:cf:25:a2:52:
e3:47:89:82:6c:67:dc:f6:9e:80:37:c2:8e:cb:b3:
d7:aa:a5:23:39:11:37:d9:15:cf:dd:f5:48:f2:8f:
25:fd:12:62:aa:a3:37:75:42:ec:44:c6:65:94:22:
7d:52:94:8a:be:9e:22:18:6e:61:c7:ba:2a:1b:4c:
94:4d:46:17:8b:41:52:f0:11:1e:80:11:99:ce:b4:
88:b0:16:f3:cb:c4:26:45:60:61:75:cb:a1:c6:4c:
1b:9a:eb:a9:55:85:af:19:1b:96:83:7e:77:f1:98:
3f:6b:78:7a:47:55:4a:42:8e:be:d7:80:ee:2e:a8:
3b:92:cd:e7:50:96:91:f1:0d:ac:60:6b:df:88:e6:
bb:26:12:be:6f:23:db:08:b4:dc:4c:4f:19:77:44:
35:e7:0d:9a:38:94:69:94:3b:fd:93:ed:a4:65:72:
13:57:5f:c0:fa:fe:a3:3d:92:06:1a:1d:3f:49:48:
8f:6d:36:73:c4:03:8e:4c:86:d1:ae:88:b6:50:fe:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:35:7B:2B:98:9E:BA:2A:0F:5A:F0:F4:57:58:69:B9:34:34:B1
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.152.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:ad:bf:2f:ee:bc:ca:df:6f:f8:f4:f8:63:7f:27:e4:f5:c1:
0e:6d:a6:54:8c:8c:99:a9:12:8d:4f:94:1a:38:78:50:09:5e:
eb:43:06:c2:c4:c7:9a:ae:6e:26:9a:bf:c3:3c:75:f5:bd:5e:
5d:8c:f9:7c:5d:7b:74:55:08:84:e4:80:23:44:8e:84:42:16:
27:62:cf:6c:78:f8:a9:c8:ba:8a:d9:92:fd:ed:9a:75:12:43:
fc:1c:be:87:91:b5:70:a3:90:fc:b1:1a:b4:f6:a8:83:cf:1f:
87:8c:3f:0b:03:f2:2c:b8:fc:03:71:6c:42:22:9e:3f:92:ad:
2c:5e:c5:d9:df:ec:6d:86:5d:d5:a2:0a:33:f4:90:e0:d3:63:
7f:4d:c8:b5:91:c0:53:a5:58:78:97:9e:94:8e:7c:04:1e:aa:
b1:6a:7c:1a:9b:65:ba:b3:ad:5e:60:f9:a9:36:0b:80:9b:c2:
61:cb:64:97:78:e3:1e:b8:20:87:d5:98:07:2c:c7:76:ca:1d:
b3:1e:58:5b:d2:58:bf:7c:64:b1:15:3a:1c:fc:f4:c8:55:48:
bc:e8:60:46:d9:7f:ab:9b:7d:2a:91:3f:20:de:f1:18:5c:17:
5a:80:82:f1:56:7c:ea:b8:70:45:be:2a:7d:58:a6:8b:f7:32:
a9:f2:31:e8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw
MTMxMjRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDhFNzEzNTdCMkI5ODlF
QkEyQTBGNUFGMEY0NTc1ODY5QjkzNDM0QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwl3+AEdzQmet98faZ9UZUa2fO/LRbQ3hJDUNCYWVfKUXT5cR4
EEEoFPDRHAqYKyffp+KGCzw0zyWiUuNHiYJsZ9z2noA3wo7Ls9eqpSM5ETfZFc/d
9UjyjyX9EmKqozd1QuxExmWUIn1SlIq+niIYbmHHuiobTJRNRheLQVLwER6AEZnO
tIiwFvPLxCZFYGF1y6HGTBua66lVha8ZG5aDfnfxmD9reHpHVUpCjr7XgO4uqDuS
zedQlpHxDaxga9+I5rsmEr5vI9sItNxMTxl3RDXnDZo4lGmUO/2T7aRlchNXX8D6
/qM9kgYaHT9JSI9tNnPEA45MhtGuiLZQ/tfHAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUjnE1eyuYnroqD1rw9FdYabk0NLEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9qbkUxZXl1WW5yb3FEMXJ3OUZkWWFiazBOTEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQF0piAMA0GCSqGSIb3DQEBCwUAA4IBAQCyrb8v7rzK32/49Phjfyfk
9cEObaZUjIyZqRKNT5QaOHhQCV7rQwbCxMearm4mmr/DPHX1vV5djPl8XXt0VQiE
5IAjRI6EQhYnYs9sePipyLqK2ZL97Zp1EkP8HL6HkbVwo5D8sRq09qiDzx+HjD8L
A/IsuPwDcWxCIp4/kq0sXsXZ3+xthl3Vogoz9JDg02N/Tci1kcBTpVh4l56UjnwE
Hqqxanwam2W6s61eYPmpNguAm8Jhy2SXeOMeuCCH1ZgHLMd2yh2zHlhb0li/fGSx
FToc/PTIVUi86GBG2X+rm30qkT8g3vEYXBdagILxVnzquHBFvip9WKaL9zKp8jHo
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:05 2025 by rpki-client