
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
File: jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa (raw, json)
Hash identifier: FKj1gefNCtulmFO4JCRBsK88HzAxXe3ErxW6hoTbNtI=
Subject key identifier: 8E:A1:B0:94:1D:6D:E2:7D:99:BE:46:94:DF:EB:52:97:E3:20:5D:D1
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: BD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
Signing time: Thu 24 Jul 2025 01:09:52 +0000
ROA not before: Thu 24 Jul 2025 01:09:52 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.140.248.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 01:09:52 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=8EA1B0941D6DE27D99BE4694DFEB5297E3205DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:5b:31:14:50:17:ef:f2:12:1f:ed:da:09:
2c:fc:dc:ff:aa:db:bc:0e:47:c3:e6:92:d0:14:5b:
0e:b0:4e:cc:0c:2f:af:10:eb:f1:db:f4:88:f4:83:
49:59:04:cf:fd:8c:13:e1:57:ab:e2:15:e2:37:7f:
4a:de:18:70:64:bc:fe:20:22:73:88:1a:1d:65:43:
dd:e2:d6:1d:a6:1a:28:a2:d2:75:21:fb:2a:75:c6:
01:46:ef:03:ad:a6:7f:ef:78:6b:fe:55:df:79:96:
c1:ee:26:32:0b:c6:cb:40:70:a6:26:26:d3:f0:18:
cb:4c:7a:ef:51:bc:84:80:07:78:29:06:5a:7d:1a:
2e:4a:1a:94:0a:82:8d:31:4a:e7:8c:ba:bc:ea:c2:
ca:79:e8:22:04:60:c6:5a:a4:ed:43:0e:ab:2f:0d:
e1:46:c7:df:f4:78:a7:7c:b2:6e:7e:72:a8:3d:6f:
24:be:e9:8c:f0:86:97:14:b4:f4:42:f0:38:2f:a9:
6e:77:81:bf:bc:ef:c5:b5:53:5e:db:e0:c0:ba:01:
61:47:f7:ad:43:87:da:54:e2:ed:c1:ad:07:db:37:
49:47:ea:a9:ff:da:44:a8:9b:0b:a3:2f:4a:89:9f:
9c:c1:51:c8:18:b3:08:6b:4c:ff:c7:14:74:22:ee:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:B0:94:1D:6D:E2:7D:99:BE:46:94:DF:EB:52:97:E3:20:5D:D1
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.140.248.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:4f:8e:47:a7:cd:7d:5b:8e:81:57:38:d9:17:20:82:c5:15:
fb:35:45:47:89:ee:36:a6:24:af:5c:8f:ab:9f:ae:71:9c:99:
d9:c5:53:b2:55:71:d1:7c:b4:c5:67:18:75:be:66:d6:fc:a2:
8f:57:49:af:2a:d9:5e:bc:0a:ba:18:5c:37:d0:92:10:20:65:
64:b7:b1:cb:89:6d:8f:21:a2:e6:7e:e2:75:e8:42:4d:4a:15:
f3:ea:4b:7e:46:6f:b1:c0:60:6e:8a:3c:33:bc:30:a9:ec:05:
49:2a:3d:f4:18:75:54:12:44:eb:47:ee:f5:52:db:e1:95:10:
4f:1c:7b:94:40:41:fc:bd:00:e6:ed:f9:6a:87:d2:ad:f2:9f:
64:b3:8c:96:91:75:e0:c3:bd:8c:d0:12:88:91:39:2e:bc:0c:
3a:ab:69:b6:d4:4b:9b:ce:42:b5:43:52:72:cc:10:e7:41:e6:
88:2e:d5:1a:f3:87:aa:6b:c8:9b:64:2e:c1:89:9a:a7:6e:ba:
e8:65:3e:8e:f4:93:4e:3b:54:21:c5:80:90:ce:ff:fe:71:59:
75:fb:50:a4:1d:fc:43:77:aa:e6:4b:ea:dd:ee:e9:57:e2:a2:
21:ee:8b:79:fd:43:d0:4c:b9:1c:34:46:04:59:74:09:c7:14:
43:ce:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:54:07 2025 by rpki-client