
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
File: SBsUQPEv6LVNbg18h4ljqBXLHiM.roa (raw, json)
Hash identifier: MG3o5fsQTEjwjYy70JIHwUAUjZzlKoFVFjRw705c2as=
Subject key identifier: 48:1B:14:40:F1:2F:E8:B5:4D:6E:0D:7C:87:89:63:A8:15:CB:1E:23
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 3C
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
Signing time: Thu 01 May 2025 01:33:00 +0000
ROA not before: Thu 01 May 2025 01:33:00 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 7672
IP address blocks: 101.96.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: May 1 01:33:00 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=481B1440F12FE8B54D6E0D7C878963A815CB1E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:34:65:11:6e:e6:45:4e:9d:04:82:44:a9:
c4:c9:7d:d9:e3:4b:be:57:e3:38:ab:b9:49:fd:11:
4f:e5:1d:d8:61:eb:a2:68:8a:25:18:e7:2b:52:f5:
33:71:6c:9c:eb:f8:b4:9e:17:3c:a4:e1:bf:df:cf:
cc:b3:89:6e:b0:c4:0a:c7:8d:95:bc:d6:f0:18:11:
a0:ef:a4:e3:7b:8f:03:d0:05:5a:8c:c0:40:9b:13:
6b:05:d1:33:4d:91:1d:58:2d:14:82:be:8d:18:d6:
e7:53:a7:3e:09:e1:0c:ad:e6:48:11:c5:b0:4c:c4:
68:36:27:0d:4e:90:c2:99:2d:9e:c6:e1:07:52:89:
75:ec:8d:79:96:86:3e:1e:11:a8:e7:fc:59:d6:55:
58:12:d1:e3:b3:9a:4e:64:90:99:5a:c2:fe:55:ed:
6c:46:23:63:aa:84:57:49:6b:0e:17:60:98:2b:67:
8a:54:e2:31:b3:a3:e6:77:17:44:5b:77:1f:4c:6c:
04:1d:8c:4e:b5:84:5b:fc:4d:a2:9b:29:f2:03:bc:
8a:9a:3b:18:a7:c5:01:06:d8:77:2a:d7:15:73:b4:
cf:5b:6a:fe:dc:28:15:c0:a8:3c:a8:57:46:cf:54:
fd:24:36:d5:47:e6:a0:43:ad:7b:42:14:3d:49:f7:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:14:40:F1:2F:E8:B5:4D:6E:0D:7C:87:89:63:A8:15:CB:1E:23
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.96.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:60:73:4c:95:89:34:57:19:9a:74:33:01:4e:0f:ff:df:d4:
7c:eb:2f:f8:bb:cc:e6:b7:d4:1d:3e:56:56:55:e9:14:73:ca:
98:48:ea:b1:a6:1d:41:33:21:b2:40:a6:c2:1a:0b:09:3b:c2:
7d:21:46:ee:92:df:91:d1:ae:fd:d3:15:26:89:c6:be:6b:2d:
2b:24:1c:06:43:bc:51:59:4b:c8:dd:7d:fc:ef:04:b6:13:67:
28:47:14:2a:96:c4:0f:f2:73:2c:b4:bd:06:88:03:2c:26:04:
18:6e:d4:5d:86:e4:94:07:ec:13:c1:57:ac:0e:2e:96:62:6a:
3f:e7:62:3e:cc:a5:be:ba:18:d2:28:b5:5c:2e:82:2b:7a:0f:
af:82:d8:32:3b:16:fc:ce:ae:5c:8c:4d:91:86:50:b2:51:53:
14:c0:ea:09:f2:89:28:f6:12:5d:ff:fd:46:f9:1a:04:b1:b2:
a5:55:b3:5b:29:e1:19:a8:37:1d:a1:2a:b0:c5:45:ba:2d:b7:
02:f4:82:ee:8a:22:04:af:11:45:4e:9f:7f:55:92:4e:f0:09:
dd:6d:b0:47:87:8b:99:da:1f:dc:b2:62:70:e3:5b:c0:31:10:
95:6c:49:48:d1:a9:ef:c7:b5:01:ab:2e:80:48:44:ef:29:48:
4b:ed:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:35:43 2025 by rpki-client