
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
File: R6iVdx4UfcFYALJpTJoh7uZh_3U.roa (raw, json)
Hash identifier: Qw+j8BTYK04PlMMlVDgfvow0GLGYrRlcouc7mypgq/w=
Subject key identifier: 47:A8:95:77:1E:14:7D:C1:58:00:B2:69:4C:9A:21:EE:E6:61:FF:75
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 010B
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
Signing time: Thu 01 May 2025 01:32:13 +0000
ROA not before: Thu 01 May 2025 01:32:13 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 9370
IP address blocks: 59.106.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 1 01:32:13 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=47A895771E147DC15800B2694C9A21EEE661FF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:b2:29:6b:b9:c0:c7:28:2f:03:a2:dd:f3:
3f:d0:38:f2:40:1a:b7:84:ef:97:b5:00:7b:c4:3d:
37:49:19:d8:cd:ce:90:ba:ea:9b:b5:c9:9f:13:07:
fe:ef:39:7a:42:18:0b:43:6a:b3:c5:86:18:64:db:
0c:3c:b5:fa:89:ea:4b:47:e9:bf:4f:d8:bc:43:61:
55:d1:fe:2e:ed:7b:d0:3b:1e:fc:0b:58:2d:6e:b9:
02:7f:5a:e1:f4:24:6b:c2:45:05:df:6c:b2:d9:82:
d0:66:f4:39:b0:72:63:49:70:59:10:db:b9:c1:3b:
3f:61:9b:80:d8:9f:2f:f8:de:e4:0e:f6:ee:f7:70:
58:b4:85:a8:81:b0:7f:ec:aa:b3:e2:2d:c0:f5:12:
d3:9c:cb:15:76:50:38:a6:bb:dc:d1:5e:f2:c5:45:
b1:2e:9a:7f:09:e6:8d:a7:59:cb:48:ae:27:f6:ea:
a8:1b:d1:32:2d:68:1f:3e:54:49:0a:bf:6e:e1:1c:
29:55:15:9d:41:37:41:13:4d:93:31:a2:7f:60:70:
8c:35:45:0f:72:e1:2f:53:0e:53:df:56:fc:d8:85:
59:8c:e1:a4:48:e5:60:da:89:97:2d:68:43:87:4a:
17:51:8b:e8:ff:d2:46:67:c2:4d:a3:e6:7f:b4:b2:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:95:77:1E:14:7D:C1:58:00:B2:69:4C:9A:21:EE:E6:61:FF:75
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.106.128.0/18
Signature Algorithm: sha256WithRSAEncryption
08:d8:eb:cc:74:d3:b1:0e:78:68:d2:cc:c6:31:1a:5c:13:4a:
92:fd:ed:64:b6:e2:ac:d0:d0:44:2d:47:a0:89:59:83:b4:21:
2a:5b:8f:eb:17:91:c2:f8:0a:6d:28:d6:54:35:6f:e4:cb:ac:
8d:09:89:ee:e7:52:ce:f6:e4:b7:63:84:7e:b6:f8:2d:79:63:
2a:12:ff:8e:2e:45:00:b5:89:ff:2b:65:75:88:9f:8e:6c:1d:
5a:3c:dd:3c:af:45:72:e4:69:6b:65:0c:82:f8:32:c1:cf:f7:
ce:cd:95:08:82:59:94:84:1a:67:9c:5c:7e:85:32:71:c1:45:
f4:be:77:84:54:a6:b6:d0:ae:e6:dc:26:be:ee:be:b7:ef:9b:
db:60:03:26:fd:6b:e7:4c:74:35:13:11:a8:cd:af:c3:46:a8:
db:d5:e5:db:8e:22:0f:81:2f:7e:41:ef:0b:95:a3:2e:8e:27:
d1:b0:d4:0b:13:3e:45:19:89:42:b1:17:4a:bd:f6:36:15:6c:
36:a8:e9:91:e8:ac:88:e0:39:b3:d2:74:dd:97:85:a7:e8:75:
93:30:43:06:c2:b9:23:bd:23:b3:c6:ac:4d:f1:5d:ab:e3:09:
8f:ad:f0:77:41:ac:94:a3:43:00:50:f2:5f:43:62:a0:e1:90:
b7:c9:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:42 2025 by rpki-client