
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r8jXrQgDnk0oCs-9kSNdzZ2Qy8Q.roa
File: r8jXrQgDnk0oCs-9kSNdzZ2Qy8Q.roa (raw, json)
Hash identifier: 1ogUgKsEtNnwYvNoD2M88v6+bi8fTOlffnGhT/PDhqM=
Subject key identifier: AF:C8:D7:AD:08:03:9E:4D:28:0A:CF:BD:91:23:5D:CD:9D:90:CB:C4
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: F0
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r8jXrQgDnk0oCs-9kSNdzZ2Qy8Q.roa
Signing time: Sat 01 Nov 2025 01:28:31 +0000
ROA not before: Sat 01 Nov 2025 01:28:31 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 3949
IP address blocks: 117.103.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Nov 1 01:28:31 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=AFC8D7AD08039E4D280ACFBD91235DCD9D90CBC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:48:60:17:df:ad:48:cb:39:ef:ad:f6:df:
57:8d:35:f1:c2:e1:e8:2d:1b:1f:4f:90:56:d3:ad:
45:ed:0d:32:be:74:77:63:05:9b:5c:36:57:86:bd:
d3:b5:25:ff:26:47:07:65:05:3f:e6:9c:92:44:b0:
df:40:30:3b:e9:cc:2d:f2:dd:58:d8:4a:c4:f8:f1:
3f:6c:e8:b5:7c:4b:c2:04:36:f6:ca:ef:28:73:1e:
f2:ef:b9:09:ad:d2:89:58:de:00:4c:e9:23:ba:47:
cf:be:6d:25:c9:5b:0e:ea:1e:eb:01:d5:8c:5f:5c:
5a:e6:d7:17:c9:a1:c1:df:17:13:29:64:40:f4:4d:
6b:ae:1d:96:0f:0c:08:7b:98:51:d9:0b:46:29:76:
e5:d1:8c:f3:02:a1:f8:9f:cb:ad:e0:a2:21:43:8c:
05:e1:5a:bc:04:be:14:77:af:15:99:21:27:ae:e4:
a5:fa:59:ff:3c:1d:f8:75:3e:91:b0:eb:a8:c4:a9:
08:35:f1:ea:50:9f:77:6c:6e:1c:c4:5c:61:eb:94:
e2:2a:63:21:3d:61:d6:2e:5b:f2:1c:55:dc:10:72:
60:48:7d:61:e8:3d:5c:ce:9d:3e:b0:b8:51:69:59:
10:48:80:0c:2c:eb:3c:08:19:fa:00:53:48:fd:77:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:D7:AD:08:03:9E:4D:28:0A:CF:BD:91:23:5D:CD:9D:90:CB:C4
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r8jXrQgDnk0oCs-9kSNdzZ2Qy8Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.103.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:36:c0:84:e8:c1:99:65:7b:ac:60:5f:6f:ce:c4:a3:27:f5:
70:24:fa:ee:3b:5e:36:7e:33:72:06:35:ae:b6:2e:04:23:c0:
24:05:35:b4:81:b5:df:a2:14:7d:1b:fc:45:77:c2:34:3a:84:
10:eb:1e:be:46:b5:5b:fa:3b:93:d6:8f:ca:c5:aa:b2:dd:02:
18:97:23:d4:00:45:0c:50:f8:49:aa:35:30:2b:bd:a6:cb:fd:
c8:73:57:12:ba:d2:58:cc:3d:1d:54:db:75:d0:1c:f8:83:a4:
56:87:d0:67:17:54:c2:a9:2c:c2:52:4d:19:81:ad:55:14:3c:
b6:94:2e:4a:08:ba:a0:b7:22:33:d1:17:bc:74:ea:29:64:21:
fb:d4:c7:cb:15:7d:dc:a4:e9:c6:0a:ca:3e:db:5c:5d:ba:b1:
92:7d:66:a7:dc:60:03:80:08:46:3c:76:99:39:fa:19:8e:7a:
0b:48:c5:13:7b:c4:bf:5c:1d:b1:b0:73:53:d4:4b:aa:11:ab:
29:94:fb:4c:33:07:e8:55:7a:9e:bc:e4:e6:ad:c6:4d:39:8e:
1b:9a:c7:c7:3c:41:89:7b:c8:a0:52:91:5b:b2:d3:d3:f5:dc:
0a:dd:89:e0:1d:db:91:11:6d:5c:39:8f:33:94:5b:79:a9:de:
ea:73:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:07:50 2025 by rpki-client