
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
File: YbyB3t4o75aM3jxL-HSQF-7gcb8.roa (raw, json)
Hash identifier: U/QEZxNfN5MTYeY1lkPnmCE0SgJ5fknWAAaQhRLPXAw=
Subject key identifier: 61:BC:81:DE:DE:28:EF:96:8C:DE:3C:4B:F8:74:90:17:EE:E0:71:BF
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 010E
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
Signing time: Thu 01 May 2025 01:32:15 +0000
ROA not before: Thu 01 May 2025 01:32:15 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 9370
IP address blocks: 153.121.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 1 01:32:15 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=61BC81DEDE28EF968CDE3C4BF8749017EEE071BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:8f:f3:3d:46:32:a7:28:50:48:42:91:81:
20:e6:45:0a:a1:39:84:b2:b2:4b:58:db:c2:61:d7:
b9:df:e9:77:7e:02:04:f6:2d:d8:e6:0e:0c:c7:61:
5e:1d:68:49:bd:ec:03:c8:f8:47:39:b4:db:bf:25:
94:04:2d:ca:05:64:e8:46:aa:fc:92:50:ba:7b:83:
30:71:d5:fb:3f:d8:8d:27:50:74:a5:8f:95:87:e4:
b9:43:05:f3:20:50:fd:3b:9a:eb:2b:ea:cb:29:18:
51:e4:38:e8:98:8f:7f:18:cd:5b:20:a2:6b:71:f1:
15:dc:dc:6b:f2:b8:f4:da:7e:79:80:09:36:ee:4b:
9c:14:eb:31:b4:35:d1:a4:41:ba:d6:44:13:e8:8f:
c5:7d:dd:d4:d6:38:e6:b3:51:1d:31:be:c8:8a:f6:
ee:9c:1a:81:09:96:4a:5a:28:c8:eb:9c:47:96:61:
44:85:b4:eb:9f:21:e2:87:2c:ed:c9:e2:c9:fd:d3:
43:a3:d3:04:56:03:8d:be:f1:28:bf:5e:c7:cb:ae:
b7:33:82:c8:1d:b9:10:4b:1d:f7:bc:ff:3e:0f:65:
cb:a1:5b:ff:9e:ad:fe:8a:18:bc:8d:02:ea:ae:c7:
c7:75:68:d3:7a:21:e3:68:e3:5a:c4:dd:55:b7:aa:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:81:DE:DE:28:EF:96:8C:DE:3C:4B:F8:74:90:17:EE:E0:71:BF
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YbyB3t4o75aM3jxL-HSQF-7gcb8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.121.32.0/19
Signature Algorithm: sha256WithRSAEncryption
10:8a:ec:f7:9c:72:a1:aa:b2:d3:fe:48:b2:d4:f3:bb:99:3e:
12:ae:72:e7:ec:93:ab:63:fa:bf:d4:81:71:e2:c7:3d:db:61:
70:f4:d4:4d:fc:8c:3c:39:04:b3:83:79:6e:87:f0:0b:15:19:
ae:9a:f8:8b:c0:8d:9f:b9:3e:9a:82:16:0f:7d:cd:db:e0:42:
ae:08:c3:f5:82:af:23:78:02:9d:b6:d5:54:48:9b:92:96:43:
61:3e:29:37:43:d6:14:52:7f:2a:e6:63:24:87:39:9b:c4:06:
ea:cb:c1:1a:40:39:6c:f3:71:db:c3:24:d8:de:66:45:03:be:
6c:98:8c:fe:ae:44:3d:6f:04:a7:ae:4a:91:01:b5:27:31:2b:
52:cb:84:32:69:f1:c0:bb:26:43:e6:16:5f:e8:43:83:af:e4:
25:64:96:39:a0:fb:32:76:48:cf:69:b3:1a:b7:3a:d1:f8:1e:
78:f8:05:e2:f9:09:fb:5e:3b:b0:58:2a:6a:27:ae:88:fb:eb:
ab:82:70:c8:59:58:2e:27:cf:c7:fa:2f:4c:8f:78:22:0e:1b:
26:a1:15:f6:63:40:de:54:8b:3d:de:5b:a0:cd:4b:cc:3d:cc:
ca:2a:88:e9:8d:26:bb:f2:7a:17:36:38:3e:1a:42:68:93:2d:
4f:c2:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:57 2025 by rpki-client