
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IVAW9HvHwoFCW74y6dhFtF6UHdQ.roa
File: IVAW9HvHwoFCW74y6dhFtF6UHdQ.roa (raw, json)
Hash identifier: qOiOtqxmd2Jty0it9UwZKUKDVa2qO4N7xX5M2JCUXak=
Subject key identifier: 21:50:16:F4:7B:C7:C2:81:42:5B:BE:32:E9:D8:45:B4:5E:94:1D:D4
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0117
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IVAW9HvHwoFCW74y6dhFtF6UHdQ.roa
Signing time: Sat 01 Nov 2025 01:33:54 +0000
ROA not before: Sat 01 Nov 2025 01:33:54 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2914
IP address blocks: 61.213.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:33:54 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=215016F47BC7C281425BBE32E9D845B45E941DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:64:27:15:75:52:27:b1:ea:42:05:b8:16:
d3:db:8f:a8:5d:cd:e1:6d:72:6e:31:fc:88:dc:7e:
78:98:b5:e9:ed:c1:b0:45:46:b2:6e:4b:dc:b1:48:
da:86:d8:04:8c:f6:12:25:a5:66:f4:06:67:d6:39:
8f:3e:7e:d2:6b:3b:ca:f0:cc:91:c9:01:ed:0c:1a:
34:35:6c:50:b4:21:7e:d3:fa:e8:dd:34:dc:5d:38:
f7:c1:e8:ac:1c:48:3f:76:a4:04:10:0e:2d:6d:6e:
3d:73:14:09:96:83:9b:c8:8b:ad:1d:dc:39:1e:6a:
26:6d:b6:0d:5c:e4:cd:51:99:ad:f3:5a:81:a0:1f:
00:cf:9a:90:49:84:64:90:80:66:18:96:67:07:a8:
e5:a3:5f:51:13:5b:a7:7d:47:5b:30:23:8b:a4:f8:
f6:8d:f4:60:78:ec:3f:41:69:a7:6d:c2:eb:25:5d:
80:d4:2c:7b:52:57:4b:e2:c3:18:21:bb:47:0a:d7:
e7:12:8f:d7:b2:68:bb:43:d8:9c:49:a9:17:19:40:
60:7f:df:24:3d:3e:1c:59:38:0b:1f:40:2d:0b:fe:
a2:00:c7:b1:4b:27:70:51:a3:86:36:d1:c0:42:e5:
89:2d:73:f3:27:b1:cb:55:6c:13:2c:86:12:3f:00:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:16:F4:7B:C7:C2:81:42:5B:BE:32:E9:D8:45:B4:5E:94:1D:D4
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IVAW9HvHwoFCW74y6dhFtF6UHdQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.160.0/19
Signature Algorithm: sha256WithRSAEncryption
77:e9:23:37:59:27:5f:75:02:95:67:6d:e6:84:e9:99:76:5e:
6c:b6:78:ba:07:fc:4a:36:ed:8c:17:1c:72:a4:68:46:ce:43:
dc:65:04:9c:d9:8d:a2:d2:50:35:1c:a9:14:ed:1d:0f:80:e6:
27:15:07:9b:f1:c7:83:4d:38:2e:61:a3:3b:6f:bd:ba:d7:fe:
1a:44:2b:97:6c:60:01:27:15:2e:0c:29:62:b2:6e:e3:ed:1b:
06:57:98:89:ab:fc:6a:e3:f6:1f:b2:f8:66:46:07:d2:9b:a2:
11:20:37:59:e0:99:ae:80:3b:c7:10:97:51:d6:5a:45:53:95:
7c:fc:78:a3:4a:cb:13:83:10:be:bb:8a:46:98:32:7c:13:df:
58:e5:a8:75:6e:f2:56:c1:a0:24:5d:06:b2:c1:04:da:5a:83:
cf:ce:01:d6:b5:4f:47:77:39:a4:a7:49:e6:1e:f7:4a:ec:c9:
7d:73:fd:a3:c6:69:8c:4d:1e:5b:96:7d:ac:45:1b:a0:26:9c:
f7:37:f9:9a:ba:49:43:e0:60:df:72:aa:38:b2:31:be:f7:fc:
c2:8d:5a:db:2a:04:2c:4a:f2:8c:2f:8a:ad:d4:75:b0:22:17:
8f:80:13:3b:f4:d0:97:09:fb:a5:63:16:62:9a:35:c7:a5:45:
0a:cc:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:20 2025 by rpki-client