
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
File: _MWX6-q4MFkkE6gJJbhQYJEjX1I.roa (raw, json)
Hash identifier: HEh8HhTRKQZ/S5YQlhBo/SS/W8Bv3Td28TUqeCbe2ec=
Subject key identifier: FC:C5:97:EB:EA:B8:30:59:24:13:A8:09:25:B8:50:60:91:23:5F:52
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 4C
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
Signing time: Tue 01 Jul 2025 01:32:06 +0000
ROA not before: Tue 01 Jul 2025 01:32:06 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 9597
IP address blocks: 180.235.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Jul 1 01:32:06 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=FCC597EBEAB830592413A80925B8506091235F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:d8:25:fb:68:2c:32:c6:a3:d6:7a:c8:94:
b2:fe:cc:63:c7:12:8b:f6:7f:a1:dd:dd:3c:74:35:
1e:34:94:04:1a:6b:7d:fe:33:45:e3:27:ac:da:8c:
06:08:0c:6d:58:dd:ee:3e:a2:a4:76:22:84:41:7e:
96:fe:80:ad:31:a0:7f:6d:f0:7c:6e:57:e0:9f:8f:
8a:ef:98:c6:5d:3d:ef:9b:21:0f:57:13:fc:00:d8:
eb:76:b3:7c:ae:5f:73:d3:f4:ed:15:35:3a:11:78:
2a:54:ec:9e:0d:fd:88:d9:60:84:41:7b:6f:32:b4:
d1:13:63:1b:95:72:87:7c:fe:9c:22:1e:e3:64:68:
89:1d:f7:a4:e7:68:79:ab:3f:49:78:da:94:c7:69:
5c:a8:8f:05:51:70:e1:73:77:e8:01:58:6b:6c:3a:
24:c9:16:ea:e8:c0:c0:b5:e3:27:71:22:55:12:4d:
72:21:b1:ca:95:cd:06:f8:49:c9:61:8d:ef:21:de:
d7:57:06:e4:71:b6:9d:ef:ef:eb:b8:d9:b5:c2:5f:
04:2d:5b:6a:41:c7:a9:94:b5:ed:31:8e:c0:a8:c9:
9d:11:3a:ca:e7:0d:87:2e:7a:6d:26:db:f7:c6:08:
ec:69:9e:36:0e:92:d0:b7:91:9c:ce:e9:86:63:9e:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:97:EB:EA:B8:30:59:24:13:A8:09:25:B8:50:60:91:23:5F:52
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.235.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c7:b1:bf:09:f1:1c:d4:35:d3:b0:2e:d0:1b:d7:99:65:6c:fe:
03:6b:b1:80:a1:71:9b:5e:e9:b3:aa:32:6a:9a:4a:33:55:b9:
31:77:7f:3c:27:a7:ab:c3:09:f0:89:54:f9:fb:41:f3:ed:05:
5e:62:5b:89:72:90:24:22:5d:e9:e1:93:82:ad:ee:bf:a7:1e:
58:0f:fb:b5:9b:9b:4a:ca:17:17:87:fd:12:c7:8d:c2:7f:bf:
98:73:a1:3f:83:dd:d4:66:25:f1:88:91:d0:2b:ad:aa:92:d7:
d9:42:e2:bd:34:54:79:cc:91:64:76:c6:4f:64:02:b3:b4:ac:
bc:8c:50:fb:05:54:ce:9e:26:05:53:d2:ee:d1:cd:1c:bf:b2:
25:6d:d0:92:25:d2:02:a0:76:d3:73:73:5b:11:03:2e:52:82:
ff:cd:e2:1a:aa:16:e8:9a:c3:fa:0a:93:98:e5:46:ee:52:c2:
1d:97:8d:c3:fd:eb:5d:19:ab:6c:fe:38:34:56:43:bb:b2:4b:
de:92:02:e2:28:6e:5a:b2:a8:0d:b1:2b:e6:4a:b8:01:2e:81:
09:db:dc:92:90:2d:3d:06:1c:ce:ee:f4:5c:b2:fc:98:61:96:
01:3b:b2:4f:fa:c0:0b:84:fb:1a:71:5f:f4:d5:17:bd:74:92:
08:3d:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:06 2025 by rpki-client