
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
File: FWESt5rwQxvKCoxPUILP2qQ4wLg.roa (raw, json)
Hash identifier: pCdmyEsME6sYpM3u8uwjq8wAefUwK7aa5ZUjqPKB+mg=
Subject key identifier: 15:61:12:B7:9A:F0:43:1B:CA:0A:8C:4F:50:82:CF:DA:A4:38:C0:B8
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 011C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
Signing time: Sat 01 Nov 2025 01:33:57 +0000
ROA not before: Sat 01 Nov 2025 01:33:57 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2914
IP address blocks: 203.105.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:33:57 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=156112B79AF0431BCA0A8C4F5082CFDAA438C0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:8a:ad:f8:a9:fe:72:8c:e7:53:98:47:5c:
bf:be:eb:ee:a8:2a:99:01:69:05:f3:5b:95:e6:f7:
ee:e2:35:56:2c:93:83:40:a8:74:18:e6:5c:d2:05:
c0:ce:fe:c3:c7:4e:26:a5:bf:1a:d9:5f:25:de:69:
93:89:a2:13:d0:f9:83:42:b4:bd:6c:fc:80:91:77:
9a:41:2a:69:9d:cc:a9:dd:bc:a3:e5:35:f7:dd:18:
7f:8f:cb:f1:2c:53:cf:74:6a:fb:66:62:09:37:71:
9b:e1:e6:ea:2d:84:55:0c:1c:24:9a:c8:39:5b:6d:
b8:66:66:f7:66:b0:4c:a2:54:ce:dd:43:6a:7e:4b:
0e:3b:b2:fc:7d:c6:46:71:78:cb:09:37:9f:fe:68:
85:2b:86:6b:f6:29:10:5b:c4:82:4f:7c:33:15:7f:
0a:4b:30:6e:d7:4d:ad:6f:42:3a:ce:4e:72:e7:8a:
ab:fc:66:72:a4:53:73:71:51:bd:18:66:31:b1:87:
4b:37:c3:d5:55:5d:5b:a9:25:7e:c4:5d:18:41:d2:
25:5f:d7:c4:1f:5c:5a:cc:0d:a3:0e:6e:c2:4b:9c:
a1:07:05:04:42:c2:78:dd:b8:51:39:d7:d2:2a:0d:
c5:d0:32:fb:78:37:89:e1:18:c7:87:a8:67:aa:29:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:12:B7:9A:F0:43:1B:CA:0A:8C:4F:50:82:CF:DA:A4:38:C0:B8
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:d1:29:02:00:49:b7:6c:40:1b:09:25:23:56:46:d0:9f:de:
0a:02:df:03:82:83:ae:5d:d9:5a:ad:d8:f8:c0:70:95:4f:e2:
1b:9b:49:72:ec:ec:21:ad:8c:56:c6:5e:1a:33:fd:72:38:45:
51:ea:3b:9f:56:20:8c:db:70:d9:21:ca:b3:5f:bc:c6:48:5d:
da:fc:95:a8:cb:9a:07:6c:59:57:fb:bb:d8:1e:97:2a:27:dd:
8f:35:2f:8b:06:60:b5:77:87:f9:7e:8e:38:8e:a3:46:8d:d6:
00:3b:09:8b:0c:2a:2b:a2:01:19:d3:9c:45:39:86:f2:7e:b5:
ef:ad:94:5d:d0:b2:2a:26:37:bc:42:d2:d7:2d:af:b3:e0:7a:
ac:df:0e:c5:5c:48:25:59:ea:a3:3e:08:35:5a:0b:df:4d:98:
10:c2:85:cf:20:ab:61:9e:c1:5b:e4:3c:32:34:ca:ab:25:78:
6e:00:76:1e:1f:41:0f:c5:c6:9f:b4:55:71:60:b5:9d:7f:92:
b3:d7:4a:2b:66:f3:db:dc:93:4d:6f:f3:4b:3d:70:a0:6c:94:
8d:0e:79:ca:53:de:b4:34:b8:b8:55:b9:7d:cd:13:d5:40:7d:
b2:c0:30:c8:51:24:62:01:a0:5e:dd:fd:7c:b0:fe:38:59:1c:
b5:2b:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:02 2025 by rpki-client