
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
File: q0yknwtLnYXRZaJHbuIIwWje6fA.roa (raw, json)
Hash identifier: s5cl18Pgbp1T/W8CcZSXNjDo46X77pj+6qzV44teZaw=
Subject key identifier: AB:4C:A4:9F:0B:4B:9D:85:D1:65:A2:47:6E:E2:08:C1:68:DE:E9:F0
Certificate issuer: /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Certificate serial: 2E
Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
Signing time: Fri 01 Aug 2025 01:31:07 +0000
ROA not before: Fri 01 Aug 2025 01:31:07 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 131988
IP address blocks: 103.170.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Validity
Not Before: Aug 1 01:31:07 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=AB4CA49F0B4B9D85D165A2476EE208C168DEE9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:c5:ad:3d:09:52:1c:a0:fe:64:4c:e1:86:
22:f2:1c:f6:d6:ef:06:aa:1a:f5:9a:3c:a5:96:22:
45:16:51:96:0d:a6:26:c0:45:1c:b2:e8:4b:73:f1:
68:4f:5b:ec:60:a1:0a:af:1e:1a:89:23:7d:96:c7:
02:9e:a8:6b:aa:af:c5:09:7c:d6:19:6c:fa:68:06:
cd:7a:44:e6:82:e0:71:b6:da:74:88:c4:ad:a3:97:
16:d0:09:e2:22:f4:da:58:7c:4c:55:c3:ee:b6:e6:
03:82:13:66:04:78:25:b4:d3:07:cb:3b:9c:d0:47:
08:b1:98:d6:9b:08:f5:cf:87:e0:9f:24:59:40:c2:
7e:c2:89:78:90:94:38:d5:51:e7:ea:52:49:95:6a:
5b:7e:2b:2e:3a:fb:e8:63:10:45:86:36:e4:e2:7d:
76:a4:7f:0d:78:73:56:f2:08:23:29:a7:68:b3:50:
a8:6c:91:86:0e:3a:3c:7d:12:9e:36:0b:3b:dc:ea:
00:19:58:25:28:5b:a4:6e:53:3f:11:02:27:6e:4c:
28:10:09:ab:ff:aa:44:d0:d2:91:54:a9:72:69:d4:
c0:74:50:bf:92:f3:da:4c:a5:23:46:89:ee:a8:18:
26:e0:b6:ba:7e:36:66:20:d6:fd:85:3f:8c:cd:9e:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:A4:9F:0B:4B:9D:85:D1:65:A2:47:6E:E2:08:C1:68:DE:E9:F0
X509v3 Authority Key Identifier:
keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:c1:40:df:32:bd:b3:60:fe:65:0b:2b:20:59:fb:4a:2c:69:
3e:63:1b:2f:4a:cd:86:dc:be:dd:36:c0:4a:89:c2:b5:10:8b:
77:60:f3:96:c5:23:f3:b9:b8:09:9f:b3:b0:e3:1f:cb:b2:d2:
25:63:66:eb:73:49:a1:8a:27:99:c2:46:ad:dc:46:c6:e2:3e:
63:4b:9e:11:48:0b:46:a6:50:1d:25:b1:1d:de:5e:2a:31:a0:
55:f1:97:41:62:66:c4:85:4a:73:bf:7c:3d:42:a7:9e:63:9a:
78:51:88:54:b0:c9:a8:d6:2f:f4:ae:63:e0:14:3e:a3:4d:37:
e0:0b:34:77:a5:a8:3b:db:cb:02:f0:90:12:e8:d7:6b:a2:02:
50:2a:2c:23:22:7e:f1:00:3b:89:01:f6:c6:b1:23:98:c7:fe:
a7:19:ed:ed:d0:62:8e:2b:e5:4b:f1:16:3a:bf:e5:42:0d:cd:
b8:3d:29:ee:5a:28:2e:91:da:c3:d8:e3:91:76:67:99:29:71:
62:4d:88:e5:b7:a5:9d:60:2a:26:c2:0f:75:e5:31:39:7f:04:
1a:42:8c:3b:1b:65:70:c2:0f:c1:a7:5c:74:ce:50:17:72:2b:
92:6b:72:e6:9e:a0:fd:27:6d:68:df:20:b5:2b:8a:52:1b:a7:
a3:b1:cc:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:01 2025 by rpki-client