
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa
File: 8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa (raw, json)
Hash identifier: rcYvgYPpZAJSsyyCJllulEFshkpQR45dQhf6swzvsjg=
Subject key identifier: F0:FE:AD:0F:E6:DF:73:2D:D3:0C:0F:04:72:C2:68:3C:D5:E2:E4:B3
Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial: 52
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa
Signing time: Thu 01 May 2025 01:29:00 +0000
ROA not before: Thu 01 May 2025 01:29:00 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 131949
IP address blocks: 202.226.8.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
Validity
Not Before: May 1 01:29:00 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=F0FEAD0FE6DF732DD30C0F0472C2683CD5E2E4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:6e:c8:c9:20:50:49:bf:f0:5e:1b:6b:e0:
49:cc:05:9b:9d:d4:fa:c4:a1:0f:d1:af:ce:4e:15:
1d:53:2f:d4:42:a2:ad:45:b3:23:98:c6:b8:4e:97:
e7:5d:41:be:29:5e:19:ee:22:75:32:f4:0f:83:b8:
40:61:87:02:76:95:90:0f:be:91:a8:d6:dd:fc:f7:
9c:73:6b:ef:84:76:e2:55:ac:f6:48:f5:64:2e:22:
54:d3:ad:eb:16:b2:57:41:57:f5:ff:27:0b:01:2f:
49:73:fc:82:ea:75:d7:fb:ce:1b:39:b5:60:b7:be:
80:0b:47:fa:c2:ab:48:ba:1d:eb:5b:4b:30:67:78:
2d:01:da:58:aa:66:b4:c4:1e:03:f5:4d:97:1a:17:
65:df:9a:4b:ee:5e:16:f0:82:64:38:26:b7:68:6a:
9b:ab:3f:5d:5b:51:e3:4a:6c:8b:0e:7f:4e:55:a4:
97:2d:9b:8d:a0:83:2a:13:25:61:4d:db:4d:27:e8:
18:f2:6a:0e:79:44:bd:08:be:06:d9:12:3b:c6:9c:
1d:43:5f:07:47:fd:04:20:15:8e:0d:4a:c0:05:8a:
41:4a:38:bc:b7:53:52:c8:1b:b5:f7:23:73:ff:fd:
0f:ee:fc:6e:da:75:55:b3:ef:96:9b:be:39:e9:24:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:AD:0F:E6:DF:73:2D:D3:0C:0F:04:72:C2:68:3C:D5:E2:E4:B3
X509v3 Authority Key Identifier:
keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.226.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:97:4e:d1:55:1c:8d:bc:bb:70:17:b8:5e:f9:c8:39:7b:5d:
85:62:a0:c7:3e:32:04:11:70:be:3a:03:b5:56:3e:37:f9:c3:
c8:c9:e6:a5:e7:03:34:db:b8:51:b3:eb:13:19:e2:08:e6:2b:
df:c3:91:af:ea:0f:33:7b:46:e4:f0:c1:10:2d:63:da:55:ef:
da:02:99:a2:88:15:aa:07:0e:82:c3:52:db:45:2e:39:d3:c3:
49:30:fd:3b:24:30:a5:4b:25:4e:2a:0e:6e:c8:b9:43:7b:49:
e6:e0:a9:3c:bf:18:9d:2f:19:d5:1e:4f:83:04:0d:8e:1a:1e:
0e:83:1c:92:66:be:6a:03:57:95:1d:18:61:b1:61:c7:82:a5:
f3:79:7a:fb:81:cd:19:8e:0f:b4:e8:77:96:0d:56:c7:38:65:
a9:67:96:b8:ca:fc:cc:a8:9b:cb:72:e6:61:ea:a7:84:4b:71:
6d:83:91:c6:48:f4:8d:e6:3b:76:ae:50:bc:89:d9:30:0a:a0:
99:22:33:b7:1f:ed:83:8d:48:c2:4e:77:a5:eb:46:80:b4:c8:
2e:9c:bd:e4:90:04:5d:f6:ef:8c:53:d9:56:34:c7:9c:7a:6c:
b8:4f:5d:e5:73:29:60:25:36:61:19:1a:1a:ed:35:86:f9:06:
b6:1c:96:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:52:53 2025 by rpki-client