
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
File: 3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa (raw, json)
Hash identifier: JJT+5eye6gvHGv7WMJ9EKLcVZXSkRYDBwhAB8/WAJ/c=
Subject key identifier: DE:4F:B9:16:9E:59:2E:4F:11:18:DC:AE:D2:09:FE:AB:75:76:43:41
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0100
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
Signing time: Sat 01 Nov 2025 01:28:40 +0000
ROA not before: Sat 01 Nov 2025 01:28:40 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 59130
IP address blocks: 61.120.149.89/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:28:40 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=DE4FB9169E592E4F1118DCAED209FEAB75764341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:f8:22:0a:c0:8c:0f:21:7b:da:21:fb:f4:
36:ca:e6:15:98:ea:13:a8:fd:a1:1e:68:e4:a8:a6:
53:7b:3f:10:50:a0:fb:93:94:d4:e4:4b:d4:26:8b:
0c:64:b9:54:24:08:ff:44:aa:18:3b:1d:0f:9c:6f:
fd:c9:8b:e3:85:77:cd:7d:25:4a:2e:4d:90:0f:2c:
18:46:79:14:4c:f8:11:6b:70:fd:05:e1:ec:e2:bc:
b5:6b:a1:8a:9a:fc:76:c5:b3:96:d5:d4:cb:c8:a3:
5c:36:ad:2a:e3:a7:ed:12:23:6c:8f:77:b3:db:da:
ba:a1:fd:d6:94:4b:df:bd:bb:ab:ce:d0:f8:8b:f2:
f4:ad:ae:c6:4d:76:1c:11:c1:66:2c:da:3f:82:5b:
59:56:5a:c3:ef:ca:44:66:60:ab:d7:15:aa:9f:c6:
ea:af:54:e5:9f:a0:9a:b9:55:76:66:22:99:0e:8a:
8b:ec:ff:15:0a:60:b5:ec:ff:53:e7:73:4c:94:ae:
03:39:7e:44:2f:23:91:5d:a0:93:2d:69:e9:c5:c9:
2b:a2:da:de:44:73:45:5e:c0:84:b1:38:36:11:35:
3b:f0:5e:a8:13:8f:aa:7a:f3:b5:88:14:54:d6:97:
7a:2b:d0:24:3e:04:41:b3:a6:62:a3:ef:ee:5b:dd:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:B9:16:9E:59:2E:4F:11:18:DC:AE:D2:09:FE:AB:75:76:43:41
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.149.89/32
Signature Algorithm: sha256WithRSAEncryption
60:62:38:e6:af:31:0b:d7:99:4c:74:47:aa:90:c7:51:b0:35:
5f:10:d9:2e:8b:2f:80:3c:87:fa:ba:da:d5:de:1a:4b:81:4c:
52:5b:7c:3f:d0:a7:33:d5:30:a2:41:dc:fc:9c:36:0d:f4:51:
24:0b:b6:e3:c2:20:d9:f6:09:38:ec:0c:73:f2:2d:fb:24:0d:
03:07:16:6e:d0:d4:b4:d9:69:33:69:be:55:1c:e4:02:de:76:
28:22:42:cd:bb:76:7f:e5:97:04:c5:95:f4:29:f4:17:d6:05:
0d:8a:fc:16:76:32:a5:b2:b4:d5:9e:3e:0e:7f:d5:30:c9:dc:
29:fe:5d:40:df:de:5c:e9:90:73:86:e8:64:6b:f7:66:cd:c4:
9a:da:71:30:3f:88:68:82:f5:06:b9:99:bf:8e:a3:d1:25:12:
66:16:bb:b9:42:5c:4f:fb:83:62:d6:a4:5c:ea:92:39:a2:9c:
5c:e9:33:84:33:3d:5c:06:5a:90:e1:82:c0:b5:a9:12:4c:87:
55:9d:e1:dd:e9:53:e2:d4:ed:be:2d:51:09:8e:59:82:8c:66:
9a:fc:04:09:39:b3:18:19:dc:f9:6b:4e:87:5b:0a:16:8d:c8:
9f:a7:db:b4:5f:83:e5:ae:98:4b:95:a1:d2:90:b7:7e:9e:bc:
1f:a8:d7:71
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw
MTI4NDBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFNEZCOTE2OUU1OTJF
NEYxMTE4RENBRUQyMDlGRUFCNzU3NjQzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxivgiCsCMDyF72iH79DbK5hWY6hOo/aEeaOSoplN7PxBQoPuT
lNTkS9QmiwxkuVQkCP9Eqhg7HQ+cb/3Ji+OFd819JUouTZAPLBhGeRRM+BFrcP0F
4ezivLVroYqa/HbFs5bV1MvIo1w2rSrjp+0SI2yPd7Pb2rqh/daUS9+9u6vO0PiL
8vStrsZNdhwRwWYs2j+CW1lWWsPvykRmYKvXFaqfxuqvVOWfoJq5VXZmIpkOiovs
/xUKYLXs/1Pnc0yUrgM5fkQvI5FdoJMtaenFySui2t5Ec0VewISxODYRNTvwXqgT
j6p687WIFFTWl3or0CQ+BEGzpmKj7+5b3VlnAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU3k+5Fp5ZLk8RGNyu0gn+q3V2Q0EwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC8zay01RnA1WkxrOFJHTnl1MGduLXEzVjJRMEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAPXiVWTANBgkqhkiG9w0BAQsFAAOCAQEAYGI45q8xC9eZTHRHqpDH
UbA1XxDZLosvgDyH+rra1d4aS4FMUlt8P9CnM9UwokHc/Jw2DfRRJAu248Ig2fYJ
OOwMc/It+yQNAwcWbtDUtNlpM2m+VRzkAt52KCJCzbt2f+WXBMWV9Cn0F9YFDYr8
FnYypbK01Z4+Dn/VMMncKf5dQN/eXOmQc4boZGv3Zs3EmtpxMD+IaIL1BrmZv46j
0SUSZha7uUJcT/uDYtakXOqSOaKcXOkzhDM9XAZakOGCwLWpEkyHVZ3h3elT4tTt
vi1RCY5ZgoxmmvwECTmzGBnc+WtOh1sKFo3In6fbtF+D5a6YS5Wh0pC3fp68H6jX
cQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:30:21 2025 by rpki-client