
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
File: tDtEdnGCh0-OA6CMt4-h47W-dGM.roa (raw, json)
Hash identifier: pNz4/XD93NugqRvPfP1OkRiemAxaxwI0JIjV40Yoqhk=
Subject key identifier: B4:3B:44:76:71:82:87:4F:8E:03:A0:8C:B7:8F:A1:E3:B5:BE:74:63
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: D0
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
Signing time: Sat 01 Nov 2025 01:29:12 +0000
ROA not before: Sat 01 Nov 2025 01:29:12 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9351
IP address blocks: 218.45.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 1 01:29:12 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=B43B44767182874F8E03A08CB78FA1E3B5BE7463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:d8:ad:50:09:63:30:cf:ac:b8:5c:aa:1c:
6d:63:71:2d:9f:ea:b8:e0:96:98:cd:86:4f:1f:fb:
8e:1e:1e:8b:21:9e:1e:1c:7b:86:ff:00:96:e1:57:
34:3b:74:9b:c7:9b:2a:24:52:7c:e1:7f:15:98:ec:
b4:a9:7a:22:b7:9e:30:b2:a1:64:35:3e:4a:bc:69:
f8:b1:46:23:a9:8c:d5:ad:07:79:7a:fc:a6:a2:98:
4d:36:0e:ae:37:64:08:78:84:8f:43:60:e8:d1:72:
50:29:e9:6e:d3:01:78:ae:20:a2:96:73:ee:89:6f:
9e:7f:81:21:7b:69:dd:57:b1:ec:94:d2:65:81:23:
f5:3f:d8:c1:0a:e0:f7:5f:92:36:d6:52:11:d1:9f:
56:0d:bb:70:c5:1d:87:3f:93:e8:6f:6c:28:0a:6b:
4b:7f:62:bd:d1:c4:1e:ec:4c:36:c5:d8:21:74:8f:
e4:7f:8b:33:2e:a9:10:74:59:6f:7c:72:0e:4f:21:
7e:6d:ee:1f:df:c2:29:15:cf:f9:a4:31:95:0e:82:
12:29:e8:a5:c9:75:46:18:9b:cb:99:c3:9c:b9:13:
b4:00:4f:d8:87:c6:db:92:ee:fb:d7:79:82:f4:ea:
6a:f8:81:f6:18:c6:29:6a:2a:7c:d5:68:de:07:67:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:44:76:71:82:87:4F:8E:03:A0:8C:B7:8F:A1:E3:B5:BE:74:63
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.45.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:c6:e2:ec:23:e2:92:4e:f9:e6:3b:fa:19:fd:1e:10:db:f9:
17:32:55:ad:4f:db:13:ed:07:7d:75:57:4e:15:39:a3:df:bb:
ae:a8:b5:24:c1:b1:c8:fa:e4:fa:57:63:dc:73:b4:fe:28:86:
c3:06:f9:22:8f:34:da:dd:4c:f6:f9:1a:0d:24:9b:e6:91:b8:
16:be:34:fa:6b:bb:c7:1a:2e:cd:28:c3:c6:21:b9:ee:cb:af:
b8:1c:23:41:a3:82:7c:2e:41:51:07:95:95:82:d8:2d:78:f2:
06:69:5d:11:1a:f9:0a:b0:c9:70:63:9a:9e:f8:87:4f:d1:27:
a6:66:0a:5b:20:75:24:1c:58:fe:fb:0f:77:5f:39:e0:70:cf:
eb:a8:22:ba:df:75:e9:00:66:5f:a6:7d:2c:7d:8a:5a:e8:d0:
f3:b0:67:28:33:b5:26:d8:01:a0:da:7b:bc:07:63:4f:22:53:
1a:98:b9:48:11:97:77:1f:a8:ff:73:95:9b:6b:4f:0e:29:74:
79:89:6f:f9:1a:38:0b:bd:a4:13:31:6e:5c:05:84:91:bd:2c:
71:1c:c5:e5:6b:0e:ce:ff:d6:44:fe:3b:12:a1:aa:c0:60:0d:
76:f9:65:24:01:f5:65:3b:5a:f4:9d:2b:71:51:b5:b3:52:fd:
11:2e:4b:6f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNTExMDEw
MTI5MTJaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI0M0I0NDc2NzE4Mjg3
NEY4RTAzQTA4Q0I3OEZBMUUzQjVCRTc0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRiditUAljMM+suFyqHG1jcS2f6rjglpjNhk8f+44eHoshnh4c
e4b/AJbhVzQ7dJvHmyokUnzhfxWY7LSpeiK3njCyoWQ1Pkq8afixRiOpjNWtB3l6
/KaimE02Dq43ZAh4hI9DYOjRclAp6W7TAXiuIKKWc+6Jb55/gSF7ad1XseyU0mWB
I/U/2MEK4PdfkjbWUhHRn1YNu3DFHYc/k+hvbCgKa0t/Yr3RxB7sTDbF2CF0j+R/
izMuqRB0WW98cg5PIX5t7h/fwikVz/mkMZUOghIp6KXJdUYYm8uZw5y5E7QAT9iH
xtuS7vvXeYL06mr4gfYYxilqKnzVaN4HZ1XNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtDtEdnGCh0+OA6CMt4+h47W+dGMwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0L3REdEVkbkdDaDAtT0E2Q010NC1oNDdXLWRHTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATaLZAwDQYJKoZIhvcNAQELBQADggEBAHrG4uwj4pJO+eY7+hn9HhDb+Rcy
Va1P2xPtB311V04VOaPfu66otSTBscj65PpXY9xztP4ohsMG+SKPNNrdTPb5Gg0k
m+aRuBa+NPpru8caLs0ow8Yhue7Lr7gcI0GjgnwuQVEHlZWC2C148gZpXREa+Qqw
yXBjmp74h0/RJ6ZmClsgdSQcWP77D3dfOeBwz+uoIrrfdekAZl+mfSx9ilro0POw
ZygztSbYAaDae7wHY08iUxqYuUgRl3cfqP9zlZtrTw4pdHmJb/kaOAu9pBMxblwF
hJG9LHEcxeVrDs7/1kT+OxKhqsBgDXb5ZSQB9WU7WvSdK3FRtbNS/REuS28=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:59:23 2025 by rpki-client