
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
File: bWYqoYT7Bos6OtRplPJHQQFpMtY.roa (raw, json)
Hash identifier: IHK5D3Q4C3SlYchpPP3i22wk8HCro1RGg+CVJVupT50=
Subject key identifier: 6D:66:2A:A1:84:FB:06:8B:3A:3A:D4:69:94:F2:47:41:01:69:32:D6
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: CC
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
Signing time: Sat 01 Nov 2025 01:29:10 +0000
ROA not before: Sat 01 Nov 2025 01:29:10 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9351
IP address blocks: 124.40.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 1 01:29:10 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=6D662AA184FB068B3A3AD46994F24741016932D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:a7:6d:2a:31:2f:81:77:06:5b:d6:f3:d9:
42:fd:1c:37:8a:b9:c7:67:b7:66:8c:b5:d0:96:de:
bc:85:8e:64:30:08:f3:32:bf:09:a4:70:2b:73:78:
71:a9:ed:07:f0:f8:d9:74:cb:e7:a3:2a:56:08:44:
d8:06:a8:d0:12:ce:a7:2b:f9:5a:d7:d6:e7:14:36:
1c:19:fb:4d:06:1a:5a:b0:7f:f4:77:41:bd:b1:4d:
fb:ef:7e:c9:5d:ad:6d:15:cf:06:29:4e:7e:ed:8b:
39:40:b9:0d:65:f5:6e:b8:06:46:a8:74:a9:d4:45:
9c:11:d7:4f:3b:82:2e:a6:fc:6f:b1:3a:67:22:dd:
f8:35:06:ec:77:ec:02:de:1b:3f:88:fa:db:b6:91:
08:e7:39:54:31:a5:ff:ca:2e:e1:cc:40:28:7b:08:
d8:76:50:06:c3:e5:21:ae:37:f2:51:a4:02:89:68:
db:6c:10:f9:f4:f8:ba:9f:a4:56:70:a8:ef:f5:9e:
0b:91:6e:24:59:44:4a:ee:1e:ea:af:33:2b:54:a2:
82:53:80:75:10:8c:01:56:ea:0a:69:33:a7:6f:b9:
c4:73:8c:0c:06:ff:17:6e:8d:97:8c:b1:34:12:9a:
f0:18:22:e7:02:c7:3b:91:13:80:6e:98:f2:4d:ea:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:2A:A1:84:FB:06:8B:3A:3A:D4:69:94:F2:47:41:01:69:32:D6
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:3e:b5:ba:f2:cf:15:e5:79:2a:20:48:b9:9c:70:82:0c:be:
e3:da:6c:66:37:34:f3:80:ed:03:59:58:f6:7f:e5:df:95:41:
2e:5f:e1:1a:e4:ea:a5:85:89:8b:8d:61:c5:95:80:d6:d4:ec:
c6:76:4f:3a:ef:2c:08:94:e5:77:01:b4:14:5f:4f:0f:fb:6d:
94:99:d3:8b:00:f5:55:82:5a:1d:9d:62:2c:3f:a7:fe:53:09:
0a:17:a7:f8:75:26:1a:bd:69:01:33:0b:41:c1:3f:04:33:fe:
ee:dc:ab:23:82:52:bf:fc:e1:89:e1:35:e6:e8:4e:3b:aa:9d:
4a:3f:ff:c0:fd:d6:2a:2d:ee:35:3b:a2:99:f0:a2:e6:b8:98:
fc:61:95:b6:2c:78:f8:96:f1:65:41:02:bb:51:0a:07:17:af:
cf:a4:40:c0:c8:bc:cb:d5:87:c4:c9:24:a5:4d:17:7d:42:97:
26:34:a5:6c:81:fa:90:2e:1e:d8:71:a2:c2:79:ad:e0:e2:27:
71:99:14:f4:33:19:37:69:0f:a8:54:53:ff:d7:05:f5:09:fd:
72:fe:64:43:49:c4:d3:77:c2:a5:3a:ca:a8:4e:fa:f0:94:d4:
54:ec:d8:ca:de:69:a3:6d:3b:ff:3d:d7:de:74:5c:83:17:09:
92:3f:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:24:09 2025 by rpki-client