
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
File: 5z_-51uYyoMEIkDHSQc2wEowqYg.roa (raw, json)
Hash identifier: o4Sa2jSKMeDj62XvdDfDoQP7x/2M3UU+pO4A/r8tl0Y=
Subject key identifier: E7:3F:FE:E7:5B:98:CA:83:04:22:40:C7:49:07:36:C0:4A:30:A9:88
Certificate issuer: /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial: 1C
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
Signing time: Tue 27 May 2025 01:59:00 +0000
ROA not before: Tue 27 May 2025 01:59:00 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 7668
IP address blocks: 202.245.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
Validity
Not Before: May 27 01:59:00 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=E73FFEE75B98CA83042240C7490736C04A30A988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:7d:8f:6f:ed:b9:a5:80:63:3e:cd:28:4c:
7b:8e:92:64:fc:75:1e:32:53:4e:13:ea:f6:4f:81:
b9:e8:1f:e6:e7:94:f0:62:85:e0:61:c1:f0:a2:47:
76:fa:ae:42:7a:7c:cf:c4:74:3e:f8:5f:c8:e1:d9:
54:1b:58:57:89:ee:90:c1:d9:64:a3:d1:b8:9f:0f:
58:a6:e0:6a:ce:3f:8e:2e:94:8f:66:5a:8f:b8:d8:
e0:d0:12:b2:99:65:b4:4e:b5:0e:2e:52:4a:6d:e5:
34:9f:54:4e:22:a3:85:b2:20:10:4f:d6:01:5d:9a:
17:b2:f8:01:ec:79:1e:c1:4b:0d:54:1b:6b:18:b1:
14:e9:50:21:b6:91:4a:a2:7a:31:d3:57:c7:98:3f:
11:08:c4:72:86:94:be:8b:8d:b8:90:20:f3:cf:63:
97:e6:45:f1:84:85:5d:02:a4:5a:a0:af:4c:84:1f:
d4:c1:2e:fd:da:fa:95:45:8a:83:b7:ee:53:e2:a5:
33:ec:43:44:d2:b5:80:12:64:f7:a7:f1:47:2f:8b:
c6:8f:f7:70:ef:b7:dc:7c:17:42:ef:2b:79:c2:d1:
ac:6e:02:88:3f:9c:ab:1b:08:3f:8d:cb:41:e2:d3:
78:c1:50:92:0a:a4:73:0a:52:99:ea:c4:41:71:d5:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:FE:E7:5B:98:CA:83:04:22:40:C7:49:07:36:C0:4A:30:A9:88
X509v3 Authority Key Identifier:
keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/5z_-51uYyoMEIkDHSQc2wEowqYg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.245.196.0/23
Signature Algorithm: sha256WithRSAEncryption
08:4b:3c:e6:db:2d:91:ff:e4:ee:66:65:d7:ff:6c:02:34:0a:
bf:e0:45:04:08:24:1e:87:12:d0:ba:bf:7f:69:6b:b0:32:eb:
0a:02:f3:a9:be:8e:19:c8:7e:fc:b5:67:23:aa:d6:04:bc:98:
a6:c4:2f:0e:f7:f8:78:9e:24:2c:3b:48:dc:5f:2d:bb:21:59:
99:1d:90:02:89:64:02:b0:f1:67:b7:da:52:a6:d5:85:ed:02:
cc:48:b6:b6:52:ce:53:ae:64:68:c3:22:25:01:b6:04:e9:68:
f4:4c:b7:1a:5b:c2:f4:4f:cd:c6:56:4e:f0:c8:e6:f1:e1:14:
05:c4:ed:75:4b:60:17:82:bf:bb:7b:e3:98:f2:52:c0:d1:b0:
a3:2a:50:82:6a:ef:74:f3:ce:6e:35:89:a4:1f:62:82:52:f1:
fb:52:24:79:96:9f:25:66:88:a8:de:54:ed:d2:38:c2:18:7b:
e1:27:3f:08:82:86:1a:55:b5:5d:a2:16:1d:fa:71:59:22:cb:
51:7e:29:9e:a0:00:e8:b6:07:5b:4d:46:3c:08:8c:96:3d:c4:
f7:fe:a2:08:21:e2:bd:77:61:db:69:dd:b8:1e:3d:96:7d:59:
bc:87:ee:eb:2f:93:2c:a1:ca:6b:2d:7d:7c:4e:ff:5d:ad:cb:
c4:5f:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:34:15 2025 by rpki-client