
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
File: zx63f-I7XMMSO_Dsik-zgEqtE_E.roa (raw, json)
Hash identifier: sGZyFl3sd5TUDLU8XXIKntQa+0Z9pIg2rpJv/DloITs=
Subject key identifier: CF:1E:B7:7F:E2:3B:5C:C3:12:3B:F0:EC:8A:4F:B3:80:4A:AD:13:F1
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: CD
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
Signing time: Sat 01 Nov 2025 01:29:11 +0000
ROA not before: Sat 01 Nov 2025 01:29:11 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9351
IP address blocks: 202.59.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 1 01:29:11 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=CF1EB77FE23B5CC3123BF0EC8A4FB3804AAD13F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:07:82:55:0c:e5:00:da:da:2c:05:f8:e9:
d7:e1:22:42:ea:e5:8a:74:a2:f9:b4:1b:32:31:d9:
ad:e0:42:b6:23:4f:0c:43:18:9e:dc:92:79:9a:e2:
43:cb:1d:7f:cc:34:33:0f:96:6d:4a:d7:c5:e7:09:
6e:e3:20:87:e3:aa:47:ec:da:0b:49:85:12:6a:82:
2e:1a:c1:bf:10:35:4c:da:2f:f8:46:27:c3:f7:ae:
73:ec:44:5a:9b:36:fe:1d:b9:5e:f6:18:b7:28:6c:
57:a8:56:6a:9d:31:e4:29:2d:5f:da:28:b6:68:9a:
3d:63:07:68:b7:fc:ec:ff:49:e3:f8:ae:60:46:72:
c5:37:01:35:e5:a5:e4:ab:49:dc:e4:72:49:0e:18:
d9:00:51:ff:37:ed:9d:c8:ea:d9:a3:0a:a5:07:d4:
bc:7c:47:51:a1:94:df:92:45:fc:2e:21:ea:8d:f6:
68:1b:ef:a0:80:75:5a:e9:d3:c4:65:55:98:c9:32:
5e:7c:39:cd:ef:77:d5:f1:cd:03:93:01:ef:31:c5:
ee:0c:98:aa:66:42:ec:e8:d4:56:aa:3c:b9:35:ed:
0c:4b:54:b1:a4:a0:6f:b1:fc:d4:c9:34:ca:ef:b5:
56:41:a2:93:d5:5c:96:fc:4d:8e:f2:51:d6:ae:af:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:B7:7F:E2:3B:5C:C3:12:3B:F0:EC:8A:4F:B3:80:4A:AD:13:F1
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.59.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:97:64:11:d3:00:81:87:ac:20:28:44:36:7b:c5:b9:37:57:
b6:06:45:ca:85:4f:0e:bc:5e:f4:1c:f3:a1:35:df:cb:a9:23:
89:88:a1:3d:71:8c:e8:86:b5:c8:1f:5c:86:e2:ec:ec:5b:a6:
b5:c1:7f:b5:14:dd:45:37:e8:0a:a0:5d:b3:d4:c8:31:e8:0c:
7e:2d:19:af:d2:fa:fe:01:d6:9d:f1:43:a1:b6:a9:82:53:8d:
02:d1:b9:16:eb:98:11:d3:9e:54:01:da:f2:93:9f:24:5a:98:
96:52:f6:1d:9e:ae:c8:b5:8b:51:94:44:e4:30:21:9f:78:90:
5f:c1:10:d0:e0:cd:3c:5f:69:76:df:21:42:75:ff:45:79:9f:
a2:67:51:f3:c2:ab:30:e4:8b:18:f3:43:92:25:26:0c:91:25:
60:9d:2a:cd:70:f8:11:1f:b6:1d:3d:c7:10:3e:7b:99:41:cb:
75:30:16:49:63:a8:61:6d:f1:71:a4:43:95:27:06:21:cc:41:
0c:a2:d0:9f:19:cf:76:3f:68:be:80:df:5e:5e:81:5e:35:d5:
bc:17:de:6c:8f:94:01:70:20:52:d9:f5:22:d5:5c:b1:94:f6:
71:35:e6:3f:ac:d5:05:fb:1c:99:16:0b:77:67:db:c2:ea:10:
0a:90:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:24:19 2025 by rpki-client