
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
File: u_X2TzkLse6JB87yKnIk_fNw8vI.roa (raw, json)
Hash identifier: DrC/jEkAk1IU43bs7ICuCkIKl8T/O8WXoj06HDVR8DM=
Subject key identifier: BB:F5:F6:4F:39:0B:B1:EE:89:07:CE:F2:2A:72:24:FD:F3:70:F2:F2
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 010E
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
Signing time: Thu 24 Jul 2025 02:13:03 +0000
ROA not before: Thu 24 Jul 2025 02:13:03 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 203.137.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 02:13:03 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=BBF5F64F390BB1EE8907CEF22A7224FDF370F2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:3a:f6:aa:00:e6:ce:51:f2:39:d6:db:1d:
c2:f3:32:9a:2f:8f:51:69:94:b9:79:6c:c5:92:2a:
33:06:53:1d:53:78:72:a0:9a:44:cc:69:c8:3c:24:
0a:95:74:a3:ea:f5:39:80:27:44:ab:d1:ab:ec:b5:
3b:ce:49:d4:7f:27:ea:65:df:f2:e3:60:0e:86:7d:
61:83:cc:57:91:a0:d9:5c:5a:dc:96:50:1f:7c:93:
ec:18:3c:23:1d:df:d3:61:37:0c:c4:00:53:2e:39:
f1:fb:c5:80:65:6c:5e:2b:e0:14:d5:52:19:19:29:
50:57:7e:07:3c:d3:a6:3f:11:a4:00:9e:dd:48:76:
5a:2d:7c:74:5a:26:f6:7f:bb:ed:02:ad:eb:5c:2f:
66:03:7e:9f:4b:31:71:6e:ae:9d:4b:77:ad:f5:d8:
13:e7:97:3f:ba:37:1a:df:34:a8:e0:b9:bb:f0:5b:
d5:cf:fb:9e:0c:84:db:4f:b3:15:78:17:a6:e2:d4:
d9:f0:8f:34:f5:82:46:76:63:fa:fe:5b:e6:02:80:
74:7d:9a:cb:d4:76:82:ce:2c:af:f9:2b:54:c4:d0:
42:7c:9e:d7:eb:a4:0a:68:14:ab:d3:67:0a:02:c8:
ea:7d:07:3a:89:cd:79:b8:ac:86:bc:14:a4:ea:20:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:F6:4F:39:0B:B1:EE:89:07:CE:F2:2A:72:24:FD:F3:70:F2:F2
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:ee:38:a9:26:34:9a:4b:bb:b9:df:c6:d0:d5:d8:0a:db:58:
2d:ea:3f:3d:c0:84:78:e3:f8:7a:81:c4:96:77:87:25:b3:fd:
1e:48:51:b6:5e:62:0c:4e:ed:5e:f4:3a:e3:a5:6c:a2:8a:cf:
99:a4:4e:af:2b:a6:4d:c7:cb:a6:28:b8:24:da:05:9e:93:ee:
ae:be:89:59:15:cc:33:59:0e:10:87:c3:7d:0a:f3:72:e6:d8:
75:50:10:c5:b6:93:c6:b0:33:1f:71:b4:7b:1d:f6:7c:dd:f2:
33:ac:33:cb:d9:f2:5c:53:66:95:ff:45:40:4a:39:5c:26:37:
05:fb:d0:3a:65:8c:f4:66:92:16:75:a0:46:c1:06:ee:f3:e9:
6b:4a:5f:55:19:58:87:95:2c:92:29:48:41:74:5a:4a:78:a0:
f8:4e:2f:da:15:14:2e:50:26:4b:a4:92:54:51:8a:68:8b:74:
15:46:cb:68:4e:79:f2:91:5a:f5:7e:af:d3:3c:ea:32:17:62:
29:ba:e7:9b:0e:99:e5:f2:99:f5:bf:6c:4d:57:25:fb:ee:4c:
62:d6:42:f0:cb:e6:e6:b8:a6:9a:27:cf:6f:ff:29:b5:17:04:
98:a2:c6:a7:39:ef:2a:c5:f8:6e:40:d1:56:88:4b:4b:04:a5:
3f:51:bc:f8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MjEzMDNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEJCRjVGNjRGMzkwQkIx
RUU4OTA3Q0VGMjJBNzIyNEZERjM3MEYyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGVDr2qgDmzlHyOdbbHcLzMpovj1FplLl5bMWSKjMGUx1TeHKg
mkTMacg8JAqVdKPq9TmAJ0Sr0avstTvOSdR/J+pl3/LjYA6GfWGDzFeRoNlcWtyW
UB98k+wYPCMd39NhNwzEAFMuOfH7xYBlbF4r4BTVUhkZKVBXfgc806Y/EaQAnt1I
dlotfHRaJvZ/u+0CretcL2YDfp9LMXFurp1Ld6312BPnlz+6NxrfNKjgubvwW9XP
+54MhNtPsxV4F6bi1NnwjzT1gkZ2Y/r+W+YCgHR9msvUdoLOLK/5K1TE0EJ8ntfr
pApoFKvTZwoCyOp9BzqJzXm4rIa8FKTqIMD1AgMBAAGjggInMIICIzAdBgNVHQ4E
FgQUu/X2TzkLse6JB87yKnIk/fNw8vIwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My91X1gyVHprTHNlNkpCODd5S25Ja19mTnc4dkku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAy4kwDQYJKoZIhvcNAQELBQADggEBABjuOKkmNJpLu7nfxtDV2Arb
WC3qPz3AhHjj+HqBxJZ3hyWz/R5IUbZeYgxO7V70OuOlbKKKz5mkTq8rpk3Hy6Yo
uCTaBZ6T7q6+iVkVzDNZDhCHw30K83Lm2HVQEMW2k8awMx9xtHsd9nzd8jOsM8vZ
8lxTZpX/RUBKOVwmNwX70DpljPRmkhZ1oEbBBu7z6WtKX1UZWIeVLJIpSEF0Wkp4
oPhOL9oVFC5QJkukklRRimiLdBVGy2hOefKRWvV+r9M86jIXYim655sOmeXymfW/
bE1XJfvuTGLWQvDL5ua4pponz2//KbUXBJiixqc57yrF+G5A0VaIS0sEpT9RvPg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:51:57 2025 by rpki-client