
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
File: LsUodR-It4qtotFYuiYTadxU3OU.roa (raw, json)
Hash identifier: g4Em9PkXFVwC2z9satg0rZ2JoxKzUX+XkU7YJN0qm44=
Subject key identifier: 2E:C5:28:75:1F:88:B7:8A:AD:A2:D1:58:BA:26:13:69:DC:54:DC:E5
Certificate issuer: /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial: 6C
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
Signing time: Tue 10 Jun 2025 10:51:04 +0000
ROA not before: Tue 10 Jun 2025 10:51:04 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 24296
IP address blocks: 210.229.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Validity
Not Before: Jun 10 10:51:04 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=2EC528751F88B78AADA2D158BA261369DC54DCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:45:6c:34:c1:31:db:4a:ac:69:95:8b:da:
0e:fa:01:af:0b:8e:15:c9:e0:a0:ab:8d:5b:79:02:
19:f6:ba:8a:35:0b:45:21:ba:71:cf:d5:8d:ce:6c:
40:4b:02:7c:fd:97:3c:b8:10:02:91:7c:b5:75:45:
ee:38:75:51:c6:33:66:e7:2d:e9:6a:85:13:36:39:
a6:64:e3:a8:49:d2:09:39:ca:22:ed:16:e8:7a:3a:
33:d6:2d:10:cb:39:8e:50:05:b7:8b:90:7e:15:56:
64:47:a0:e4:09:86:47:fc:98:f8:de:d2:3f:d6:78:
61:65:fe:fa:5a:8f:62:d1:97:2f:33:66:59:85:3c:
55:42:63:ae:db:32:c4:9e:66:33:c5:5b:20:c6:42:
5f:a4:ba:69:62:07:e2:e4:ce:44:1c:56:8c:85:2c:
a0:19:c9:ee:db:0f:bf:55:e3:67:8f:c2:09:35:3a:
dd:80:74:f4:d6:a9:77:8e:3f:83:e4:61:3d:68:f8:
77:53:c7:a3:d0:a8:fd:2b:f5:68:f2:f9:19:5a:1c:
59:99:9a:85:4a:c6:19:43:b4:ca:ee:8a:4b:31:f6:
23:9f:7d:75:cb:a8:f8:f0:aa:3d:e6:63:f5:6e:b0:
19:61:c5:84:e9:49:7d:c6:cc:91:8e:92:6b:6d:a7:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:28:75:1F:88:B7:8A:AD:A2:D1:58:BA:26:13:69:DC:54:DC:E5
X509v3 Authority Key Identifier:
keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/LsUodR-It4qtotFYuiYTadxU3OU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.229.224.0/19
Signature Algorithm: sha256WithRSAEncryption
88:46:08:f4:af:0b:55:c9:d9:6e:c3:b4:95:2f:75:d9:c5:f2:
6e:9d:96:09:81:2a:18:4d:e7:7b:89:00:d0:c6:54:df:c4:b1:
08:69:ec:88:0c:70:ef:f3:d3:b9:7c:de:d7:fe:94:da:42:3f:
10:f7:3f:01:e1:4b:b6:8f:5a:15:b3:ce:35:c9:5d:e5:ea:aa:
01:69:fd:34:1b:0c:2b:45:9e:43:0f:f6:54:9c:44:15:cb:49:
23:06:5b:62:06:f4:df:0e:31:8d:d3:6f:d0:45:00:46:15:be:
e2:8f:67:b3:a0:bb:fe:ed:e4:1a:97:60:71:21:11:5a:68:72:
bc:b9:05:8a:06:f7:d5:d0:90:14:28:50:c2:7e:62:2d:d4:2c:
88:2f:50:fb:de:12:4a:bf:92:23:2b:ad:aa:0d:33:85:b0:44:
83:e2:ae:d8:17:4b:6b:65:3e:33:e2:4e:d4:d9:96:6f:d3:1f:
2b:41:4c:07:1b:02:35:bd:e8:23:73:f7:d5:86:5e:4e:cc:b3:
a7:77:8a:59:de:86:68:0a:0e:25:f5:b1:59:d8:4f:41:cd:5e:
5f:f1:88:71:65:ba:53:a2:c0:dd:6a:5c:b1:00:f2:22:47:c0:
c2:db:6d:f0:bf:0f:bf:d7:65:fb:f2:10:55:05:94:41:a3:6b:
b7:06:e0:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:34:19 2025 by rpki-client