
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
File: Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa (raw, json)
Hash identifier: HGOyuRi4xBWCwp8bP1BpWwm4zwAapi7xuaYgf97TEaU=
Subject key identifier: 5A:A6:B9:24:2C:3E:88:66:D1:67:5D:11:08:47:51:CE:E0:25:A9:78
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 011E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
Signing time: Sat 01 Nov 2025 01:33:58 +0000
ROA not before: Sat 01 Nov 2025 01:33:58 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2914
IP address blocks: 117.104.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:33:58 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=5AA6B9242C3E8866D1675D11084751CEE025A978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:a3:9a:e5:99:d5:56:83:eb:5b:2d:62:41:
4a:cf:d2:6c:23:b9:00:14:c3:3e:5c:af:38:73:d1:
c1:5e:92:05:c6:f4:b2:bd:9c:64:d6:23:af:d4:08:
90:cf:42:14:e9:6f:8e:87:1c:59:42:3f:1f:4f:87:
3b:85:68:6a:57:12:0f:c0:8f:76:f9:b9:05:06:c3:
7b:45:32:1d:a9:09:64:6a:f9:5b:3e:89:97:c0:35:
19:d6:57:89:22:2e:4b:d1:6b:c2:fe:56:b9:f4:c2:
57:72:75:e4:4c:1a:ec:be:98:e5:a9:7f:3f:43:6f:
89:4b:7f:28:92:11:f6:3f:43:db:2d:87:27:7e:fd:
69:3e:c8:18:ad:8e:5e:2e:eb:85:ce:b1:ff:1c:e8:
01:44:b7:26:19:50:2a:26:17:d8:3f:fc:5d:13:75:
80:6b:f5:b2:73:f3:e6:ab:d6:b9:a8:b1:e1:50:30:
5c:63:6f:00:16:da:bc:16:9b:46:81:79:23:e3:0f:
1c:c7:b7:b5:c8:82:72:20:c0:aa:0f:dd:0a:c3:8f:
80:66:55:28:5f:96:c7:9d:30:2f:13:68:0e:c7:53:
d7:e4:26:73:81:5e:30:8c:62:2c:c1:25:25:05:78:
86:f0:9e:df:f0:56:3c:30:ad:18:9b:89:9b:a8:8e:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:B9:24:2C:3E:88:66:D1:67:5D:11:08:47:51:CE:E0:25:A9:78
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.104.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:b9:63:74:d9:ea:3e:22:05:8a:0f:6c:96:7e:88:04:dd:a0:
a4:56:0a:02:48:75:d8:46:88:b9:bb:66:3c:8a:a1:53:cc:8c:
51:91:3a:2c:c5:b8:b2:22:b4:fc:68:ab:1b:75:50:6f:72:16:
43:ef:a4:9e:f1:10:ee:dd:06:37:63:6e:65:ae:48:fb:0b:7d:
26:26:c5:64:c7:8d:14:98:c3:e1:17:00:9c:75:a2:b5:5d:06:
02:8f:57:c8:95:6f:f3:6f:74:20:06:79:9d:e7:7e:fb:39:98:
67:a3:4d:d1:0c:26:3c:83:44:a2:b9:1f:e6:81:b9:95:fe:d4:
ae:bd:d8:24:a0:cb:c6:b4:7e:5d:09:7e:7d:c9:01:96:ca:a4:
e9:45:35:66:e6:61:c3:21:15:7f:71:97:f5:51:2e:2c:81:c3:
50:a7:fc:30:fb:9e:20:ae:a1:e2:c3:ff:7e:ea:29:71:e3:99:
03:49:2e:45:f6:e4:03:dd:ea:b0:2c:e2:3f:3f:05:11:11:8c:
00:33:49:ab:21:02:3c:5a:ef:07:1f:57:21:ed:01:2c:95:d2:
c2:29:34:7b:8b:f4:e8:13:10:59:88:e6:05:a4:cc:5b:8f:de:
14:75:71:2a:4e:7f:73:06:c9:ef:ce:e6:40:1d:62:51:6b:a4:
14:f1:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:09:30 2025 by rpki-client