
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
File: fP63g23JtLOVWlQfdzQ67BKIOvU.roa (raw, json)
Hash identifier: VpLywGMpRBh4VSKGkCxq6/c47UjCUK7KOaatc/f6cos=
Subject key identifier: 7C:FE:B7:83:6D:C9:B4:B3:95:5A:54:1F:77:34:3A:EC:12:88:3A:F5
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 23
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
Signing time: Thu 19 Jun 2025 05:03:09 +0000
ROA not before: Thu 19 Jun 2025 05:03:09 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 18282
IP address blocks: 202.238.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Jun 19 05:03:09 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=7CFEB7836DC9B4B3955A541F77343AEC12883AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:38:fd:c6:80:87:d9:66:29:b8:ce:62:f3:
d5:fb:2c:8b:c9:75:c3:75:40:f9:71:72:87:3e:a1:
8c:82:e1:e2:9e:99:bd:e2:f0:d9:c2:f4:bd:b7:3d:
15:8f:7d:a8:50:d2:2d:70:9a:7d:c5:16:d1:b2:b4:
80:91:11:8b:06:7b:9f:79:4a:a3:0b:74:78:0a:2e:
87:65:40:51:7f:67:ce:dc:0c:e5:d2:5b:09:66:ad:
a8:80:65:ef:39:40:12:0f:f0:84:80:c1:22:be:f4:
8a:4d:62:3f:f0:f9:bf:86:81:91:f5:ca:42:ba:ed:
62:a5:75:4a:3d:7a:02:94:c0:e3:2e:ee:d5:58:67:
55:3e:09:aa:b5:ee:70:bf:be:f1:af:d0:ab:70:9b:
cd:45:cb:1e:9a:63:e9:5c:75:7e:cc:87:b6:a3:45:
27:d7:48:57:ed:9a:cd:00:56:cf:d1:ae:06:58:f3:
d2:89:4d:b9:56:a1:32:0c:46:77:a9:ef:b3:13:55:
56:2c:57:55:0c:60:99:4d:45:a5:f9:bf:d1:b7:20:
0e:2c:f9:fd:53:ad:91:e4:40:f7:c2:5f:98:18:c1:
3e:3d:d4:fd:94:60:fd:0a:4f:be:4e:52:70:ee:75:
39:f5:f3:87:35:a4:76:d9:5f:ab:48:d2:01:d9:61:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:B7:83:6D:C9:B4:B3:95:5A:54:1F:77:34:3A:EC:12:88:3A:F5
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/fP63g23JtLOVWlQfdzQ67BKIOvU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.238.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:e3:c3:4f:0e:a2:51:8f:ba:02:60:b9:4f:d6:04:e5:a0:9b:
8c:05:ef:08:64:93:80:77:b9:94:13:a3:87:01:ba:fe:bf:ca:
3c:07:c6:6e:75:a4:dc:bc:20:5d:22:7e:d9:21:a3:19:21:f0:
96:a5:e2:95:12:ca:36:84:7a:74:2f:0f:c0:3f:3b:ad:2e:5c:
7a:31:0d:97:a5:20:ca:59:10:0f:2e:75:11:3e:ad:c0:52:6c:
2d:63:60:b8:2b:c1:03:15:80:d7:b5:e5:60:58:e5:c3:f9:8d:
3a:44:0a:84:68:4e:09:e6:b7:af:df:d9:88:b4:78:1b:5a:1d:
be:14:06:a1:81:d9:7f:90:ad:68:dd:6e:39:e7:68:f8:ea:fd:
fa:b6:4a:a0:e2:90:ed:94:28:51:1e:70:5c:33:d5:a8:96:1a:
a5:17:e2:9a:80:27:41:3d:4e:7f:da:46:94:49:8e:22:f1:4b:
07:bf:52:86:a0:be:36:b4:ad:30:07:f4:11:25:2e:2f:cc:26:
dd:c8:f9:3b:6f:b0:c9:f3:45:89:0b:9c:68:00:0f:59:0a:57:
5b:14:ef:45:8b:32:23:3a:eb:04:3a:3b:ae:06:ff:d7:1b:8f:
2c:e6:b2:c1:77:74:c0:b6:4c:0e:54:91:78:26:de:cd:cb:7a:
54:bc:4c:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:15:28 2025 by rpki-client