
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/u_YT9jVuXTm9QTqSpsU1cPqNxOk.roa
File: u_YT9jVuXTm9QTqSpsU1cPqNxOk.roa (raw, json)
Hash identifier: JqsHN4lwK54qoIIrKcWcyO3ckpIBgc4eKe0RvHATjho=
Subject key identifier: BB:F6:13:F6:35:6E:5D:39:BD:41:3A:92:A6:C5:35:70:FA:8D:C4:E9
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: D3
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/u_YT9jVuXTm9QTqSpsU1cPqNxOk.roa
Signing time: Sat 01 Nov 2025 01:29:14 +0000
ROA not before: Sat 01 Nov 2025 01:29:14 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9351
IP address blocks: 124.40.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 1 01:29:14 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=BBF613F6356E5D39BD413A92A6C53570FA8DC4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:97:5f:f5:b2:e9:63:1e:97:86:55:9f:5b:
1b:01:33:e7:96:5c:66:08:61:da:d6:af:81:ce:36:
53:e8:62:af:54:68:fb:10:11:75:15:d0:3d:14:90:
6a:21:58:d8:6d:1a:8a:7c:e4:24:9f:8a:36:43:2a:
30:53:47:b1:79:81:d7:84:66:1c:83:6c:a5:9e:04:
4c:aa:ef:28:24:d7:2b:a9:e9:30:29:2e:60:31:a8:
f8:c1:d7:59:80:36:11:0b:9e:e6:65:83:ad:20:27:
d2:db:4a:9c:08:13:98:df:db:50:62:4e:68:34:29:
44:c4:06:c6:e1:b4:80:6c:b8:a3:0e:96:e3:0e:99:
d2:20:05:d8:7c:70:aa:f0:f7:84:ac:30:7e:a1:74:
95:ca:08:26:a2:94:93:d1:60:0f:f2:e8:f2:3a:ca:
03:ff:8e:7a:da:b9:24:de:19:33:d1:8c:2f:f6:d9:
c0:3c:11:41:ff:f8:a3:27:ee:39:95:a0:21:62:d0:
d3:a9:6e:e0:d7:08:9b:d8:01:12:67:fd:18:ca:7d:
76:ba:b8:c9:d9:79:4e:fc:70:fa:83:17:b8:41:a9:
61:b6:c2:fe:d2:81:08:f7:03:3a:41:ad:3e:0c:c4:
ec:df:30:06:99:e8:84:ff:e2:37:16:b5:72:a0:73:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:13:F6:35:6E:5D:39:BD:41:3A:92:A6:C5:35:70:FA:8D:C4:E9
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/u_YT9jVuXTm9QTqSpsU1cPqNxOk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:ca:d0:14:a2:08:37:63:93:b4:c8:36:f2:0a:0b:1a:63:32:
2f:11:f6:72:e6:7d:dd:ca:b7:3c:62:9e:5b:b9:a6:eb:46:24:
b4:b1:b6:ea:97:f9:68:4a:ce:4d:0c:64:51:f1:a1:69:c8:8e:
44:02:ba:8e:09:89:52:fa:25:38:0a:48:5d:56:30:64:d2:1b:
41:68:17:07:df:b2:13:14:f6:ff:0b:30:dd:5c:3f:8c:f1:21:
42:da:81:40:80:9e:5c:64:ef:90:86:dc:54:c6:b2:a4:f8:c5:
ba:9b:62:8d:33:7b:da:01:5c:b0:f5:b9:5a:78:2c:e6:a9:b3:
6c:1c:63:8f:29:d7:fe:7b:5a:35:3d:9e:0f:19:20:0e:fe:c1:
80:72:64:76:41:3a:aa:72:72:6a:a2:8e:15:6d:05:42:ab:06:
73:10:38:16:00:b3:03:39:1d:0b:b1:42:75:58:88:41:ad:a0:
cf:2b:2b:bb:74:37:77:e8:d3:ae:f0:5b:71:77:84:04:e6:80:
79:e8:a8:e4:b1:67:89:bb:5e:f4:c6:1a:d2:a9:66:84:16:d0:
ef:63:68:b4:2d:88:ef:ad:24:66:31:39:98:bf:f0:a9:17:5f:
3b:5d:c2:6d:a6:3d:d4:bc:86:35:c1:7d:07:66:39:ca:99:50:
53:09:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:57 2025 by rpki-client