
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
File: Tv82jDkvYXnNklBDEqqgIxpE2L0.roa (raw, json)
Hash identifier: /dWtmfKBETHuIoz+GMPjWu43KeB5O2dbqZH3YSW4dZY=
Subject key identifier: 4E:FF:36:8C:39:2F:61:79:CD:92:50:43:12:AA:A0:23:1A:44:D8:BD
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 010C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
Signing time: Sat 01 Nov 2025 01:33:48 +0000
ROA not before: Sat 01 Nov 2025 01:33:48 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 399077
IP address blocks: 124.40.53.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:33:48 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=4EFF368C392F6179CD92504312AAA0231A44D8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9c:5d:54:00:4b:21:26:50:97:5e:71:fe:84:
bc:e8:e3:b9:9e:de:b2:7d:29:01:f9:80:61:5b:23:
0b:d5:36:fe:d2:8c:ea:d2:d6:1b:94:f9:b1:a1:cb:
d1:a8:9e:40:9f:33:2d:1a:98:f7:33:4d:29:88:2a:
8e:68:ba:e2:df:21:ee:f5:1e:52:ba:35:7f:ab:67:
ef:3e:0e:cf:8f:e9:85:13:43:aa:f6:2a:33:59:ac:
b5:81:3f:af:e6:f0:33:3a:ec:b6:9a:5f:53:b2:b0:
d2:c3:10:d3:79:21:4f:c8:eb:2c:68:5a:de:7b:ed:
c1:f6:78:e3:7b:4a:83:9b:e2:a5:69:40:b8:e5:8d:
6d:1d:6a:bc:9a:a8:e6:86:89:63:91:7f:3f:c4:b5:
4d:3f:3b:6a:b1:0a:b1:26:b2:eb:61:78:3d:f8:10:
88:32:3e:62:19:ec:f1:9b:ba:8e:cb:38:0e:1e:f3:
00:9a:1f:1f:54:42:02:35:9e:f2:49:eb:ce:e4:2d:
84:b2:34:c9:82:cc:d7:c3:b7:98:f7:66:ed:85:68:
48:50:d3:42:ed:65:b2:75:33:07:9a:e4:55:02:a9:
1e:f5:1e:0b:d3:9a:87:b1:6a:19:1e:dd:cf:fc:04:
57:ef:86:a0:19:d7:20:23:e2:9f:2c:02:bb:88:0e:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:36:8C:39:2F:61:79:CD:92:50:43:12:AA:A0:23:1A:44:D8:BD
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.53.128/25
Signature Algorithm: sha256WithRSAEncryption
5e:9e:fb:b9:56:0f:d4:3c:ae:88:20:28:c4:79:f7:d0:64:32:
0b:11:08:92:f5:20:58:35:fa:10:d8:aa:3d:46:6e:3e:8b:e3:
51:a8:e8:9b:80:c8:01:be:65:88:23:76:ff:63:f1:2f:be:be:
1c:9d:e6:cc:b6:1c:7c:8e:3b:f9:b6:62:da:c5:dd:ad:f8:f0:
fb:32:2a:cd:5e:60:7c:31:bc:6b:c8:62:d9:7e:d5:dc:55:6e:
95:fb:cc:b3:6f:be:d8:54:19:6c:5a:c9:99:ee:c5:9d:7b:61:
27:11:40:bb:f8:13:c0:99:f1:3d:fb:d7:d3:33:c0:ce:d3:55:
14:ff:cb:99:c9:f0:82:a6:57:f8:a0:38:c3:cb:5d:71:30:17:
31:a8:6c:1d:4e:c8:cc:a6:94:bf:92:42:5a:d3:36:cd:ef:17:
3e:21:92:7a:95:f2:23:01:6d:42:0a:19:34:f2:82:e0:2b:8b:
37:bd:e2:16:fc:29:db:72:d8:13:0f:a3:ef:43:60:2f:68:b0:
b2:2a:12:39:24:f0:d8:f2:d0:94:ad:bb:92:85:cb:2c:5c:d6:
d8:7f:39:8f:5b:97:44:35:d5:57:7c:10:8b:1f:76:cc:b9:61:
2a:53:ff:fe:87:a2:af:08:c5:1a:6e:00:27:de:41:62:aa:db:
50:4c:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:40 2025 by rpki-client