
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
File: cjw3qiRqIYqROluuCMJhOEoO-T4.roa (raw, json)
Hash identifier: 8Tmzmxwf5jMnxWJ2ScqjG/5HYTn9Q6yjzS2byZp4PqQ=
Subject key identifier: 72:3C:37:AA:24:6A:21:8A:91:3A:5B:AE:08:C2:61:38:4A:0E:F9:3E
Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial: 66
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
Signing time: Fri 01 Aug 2025 01:34:36 +0000
ROA not before: Fri 01 Aug 2025 01:34:36 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 15830
IP address blocks: 203.140.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Validity
Not Before: Aug 1 01:34:36 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=723C37AA246A218A913A5BAE08C261384A0EF93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:26:e8:ef:cf:1d:57:bf:a2:ec:b7:73:02:
56:df:0c:91:5f:db:1c:e8:f5:85:d2:4d:f3:b3:2b:
2e:da:39:83:a5:36:4a:6d:73:8d:42:ab:5c:0d:2e:
9b:f7:00:f4:81:1a:ae:56:09:0e:e1:6b:e5:68:e1:
c3:9b:7f:b1:02:58:82:2d:eb:d1:9c:8e:e7:4e:81:
cd:6d:76:7a:87:ef:80:a3:df:04:3f:52:b5:89:d2:
39:f3:83:e5:95:d1:de:79:8c:ce:89:f7:50:16:33:
e8:15:ef:4e:37:95:90:21:39:7c:9d:20:45:7e:ee:
92:4a:bf:6b:c6:57:9b:99:d3:b7:e7:ef:88:98:be:
e6:52:7f:75:1a:e0:70:4f:59:ce:60:ae:5a:7c:0f:
66:1d:e7:a9:bf:6f:ca:95:7c:0b:a2:34:b2:51:35:
77:fe:4b:37:99:18:e0:94:04:64:c9:00:ce:12:f3:
9a:c8:e4:75:aa:d9:db:10:dd:fe:e8:2a:d3:d0:4f:
75:aa:6b:36:16:cc:08:40:be:a2:7d:ac:94:d5:8a:
0d:f3:4f:4f:bd:9b:ee:04:3f:60:8c:12:c5:b5:b9:
37:91:65:fe:a7:45:25:f0:bb:28:10:b0:2b:ff:f3:
c0:43:21:0a:af:73:b7:8a:cb:21:1c:5a:9d:9d:b0:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3C:37:AA:24:6A:21:8A:91:3A:5B:AE:08:C2:61:38:4A:0E:F9:3E
X509v3 Authority Key Identifier:
keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cjw3qiRqIYqROluuCMJhOEoO-T4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.140.224.0/20
Signature Algorithm: sha256WithRSAEncryption
83:40:c5:64:7c:9b:c9:60:98:e5:84:d3:b7:dc:c9:54:f3:8f:
be:e1:fc:08:d9:3a:86:e0:37:99:2b:fc:33:1d:1e:66:bd:20:
b6:74:cb:bf:b7:2c:25:ea:87:e1:69:19:b3:80:05:c3:16:8a:
77:93:45:81:9a:4b:38:b9:41:d9:16:11:b9:13:7e:cd:7c:96:
5f:5c:dd:37:0e:15:b0:fb:05:09:2a:60:93:d3:2d:da:94:b0:
b0:b4:fa:3a:2d:b5:0e:b4:9c:cc:57:d6:e9:97:5c:03:30:86:
fd:5a:d2:c2:f4:44:1f:58:1d:6a:7a:14:bd:bb:19:af:af:d4:
aa:29:40:a0:67:f4:a3:2c:7f:b4:50:09:55:42:72:57:af:96:
3c:7d:5f:e2:01:89:5f:61:0a:2f:6d:e4:ab:14:0c:13:8b:60:
7b:d0:4a:28:59:38:bc:32:a6:25:68:e8:56:38:c9:a2:77:de:
e2:65:78:6a:6c:7f:a5:62:3d:e8:46:4b:69:11:12:2b:5d:6d:
15:07:9d:9a:0e:a2:0c:a5:bc:d7:f3:e4:7f:bc:4d:20:f2:cf:
b8:9d:20:69:59:95:bb:73:71:39:fb:58:a6:d7:cb:20:4d:72:
ad:b3:b7:79:c1:f6:bd:9c:9c:ee:43:ac:46:dd:93:c1:43:fb:
b9:b8:76:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:47 2025 by rpki-client