
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
File: SOTPCEr74fQMr3wriXgNsW6H3Hk.roa (raw, json)
Hash identifier: a3P5dGsrn2+RSHugnXIQlmJr4q4JAEEgcnQHBrww/Ks=
Subject key identifier: 48:E4:CF:08:4A:FB:E1:F4:0C:AF:7C:2B:89:78:0D:B1:6E:87:DC:79
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: E2
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
Signing time: Fri 24 Oct 2025 10:27:09 +0000
ROA not before: Fri 24 Oct 2025 10:27:09 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 23918
IP address blocks: 153.254.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Oct 24 10:27:09 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=48E4CF084AFBE1F40CAF7C2B89780DB16E87DC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:9d:1b:00:f8:9a:94:77:20:11:c4:1d:f7:
d7:f4:04:eb:6e:cb:f8:98:f4:a5:07:17:21:92:3a:
f6:14:be:98:d5:5e:16:e3:d5:25:07:28:db:c7:c8:
9c:d7:fc:0c:2a:e3:7f:1c:04:7f:7e:ab:48:63:84:
60:ae:3d:35:db:4d:f5:75:68:d9:b7:65:75:e2:67:
49:d5:75:36:24:f6:64:b2:f2:cd:85:66:74:f4:73:
6c:14:6b:21:cc:1b:0c:54:3e:40:ae:ac:22:d5:8f:
21:78:94:49:35:84:f6:89:76:0d:fd:b6:71:8f:55:
49:36:d5:2a:bb:61:db:8b:5f:f1:e7:ff:33:95:87:
2a:d7:12:72:21:14:26:7c:5c:83:9d:d9:67:54:2b:
54:e9:ca:f2:f6:22:a2:ca:3e:8a:48:c0:2c:fc:d8:
72:41:84:71:b0:99:be:01:9e:34:1b:76:c1:47:f4:
be:74:27:f8:cc:3f:54:5c:b3:62:82:98:ba:37:45:
7b:e5:d3:fd:6f:7b:f8:4e:8d:91:d2:c8:31:ac:8a:
c9:25:ce:e9:23:69:b1:4c:26:b4:ff:3b:94:0d:f8:
a8:14:d4:e1:6c:33:a0:a6:eb:00:d6:9b:e7:c2:e5:
55:5c:82:ed:0b:15:b3:1f:8c:7b:01:2e:62:e9:64:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:CF:08:4A:FB:E1:F4:0C:AF:7C:2B:89:78:0D:B1:6E:87:DC:79
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.254.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:02:63:ca:0f:80:5c:f2:5b:0e:2c:14:94:7c:24:1d:17:3c:
82:fd:c0:69:a1:aa:1f:33:16:55:54:1e:9f:7b:f0:cf:7f:9e:
b5:04:b0:fa:de:a2:c9:52:e9:44:bf:36:81:df:58:b3:f5:79:
3f:d2:e3:56:6d:72:06:42:1c:a4:82:5e:24:5f:07:3f:bd:97:
f4:90:db:a6:2e:5d:b4:1a:08:2b:2f:9f:12:7e:8c:29:13:c4:
4e:22:e6:4e:f8:e1:4b:86:9c:ae:6b:0e:60:e1:f6:b7:fe:05:
fd:c0:d2:e2:32:4b:8c:45:eb:dd:08:4a:bf:4f:01:d3:3a:1a:
db:e9:ee:37:22:13:09:f0:44:ce:6a:ff:10:18:d8:c5:db:65:
ae:2e:7b:7b:db:de:50:4d:f2:79:4f:9e:c3:a5:0a:c4:09:76:
50:80:7b:3a:9c:80:91:bb:5d:e6:35:66:18:41:d4:c7:42:6d:
2d:77:48:39:ca:79:10:34:a0:9e:53:ab:72:aa:91:a9:8f:f9:
de:8b:70:7c:87:ee:bb:f5:87:d4:e8:43:87:80:68:71:d2:37:
3b:c4:74:8b:20:2b:ab:52:46:91:85:63:2a:33:d2:4f:6a:59:
05:ed:9f:35:61:ba:8c:b8:03:6c:cc:0d:9e:f1:6f:91:59:84:
c7:eb:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:22:38 2025 by rpki-client