
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa
File: yQq_GAN8hUz3TC_PunLVtigoATw.roa (raw, json)
Hash identifier: xX/y/gJkNKxbDUjgZXq2ZdPedfgrDW+gHMSI1kTnWcM=
Subject key identifier: C9:0A:BF:18:03:7C:85:4C:F7:4C:2F:CF:BA:72:D5:B6:28:28:01:3C
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 0110
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa
Signing time: Thu 01 May 2025 01:32:16 +0000
ROA not before: Thu 01 May 2025 01:32:16 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 9370
IP address blocks: 202.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 1 01:32:16 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=C90ABF18037C854CF74C2FCFBA72D5B62828013C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:46:81:99:0e:c6:bd:22:94:3d:a8:bd:d2:
0a:63:1c:47:85:32:c3:c2:53:bc:21:d9:1a:4b:2b:
03:fd:d5:b2:8a:8a:1d:fd:f4:8c:f7:1c:1d:d7:b5:
20:d6:72:ec:fe:a2:7d:ea:a8:42:1a:55:61:b4:91:
d3:f7:e3:0c:20:48:34:f4:1b:05:e5:c9:02:b9:d2:
a6:0f:88:53:06:a9:a9:cd:12:9a:2e:df:56:a2:b5:
a1:4c:41:73:f4:b8:6c:b3:11:c8:da:32:f2:73:68:
65:5f:19:a3:50:3f:20:6b:7b:ad:ae:c6:37:1e:72:
0f:69:de:0e:72:df:43:fc:f0:35:0e:4b:fc:03:15:
c6:5a:23:0b:d6:d6:a7:6f:01:57:de:d4:b9:19:e3:
3b:9c:46:53:0b:c7:75:e7:20:c7:47:75:21:c6:3d:
c2:ef:c0:05:2b:10:05:4f:88:8a:96:9f:5d:21:d2:
37:0f:07:e1:4e:3f:d1:41:a3:57:bc:51:a2:04:e3:
21:2b:d8:49:73:54:48:c7:ee:87:df:1f:70:c6:3c:
ab:8a:10:23:b2:12:ff:d3:69:21:99:44:5d:49:b5:
cc:51:a4:12:7a:c5:05:b9:b2:b6:3d:ec:21:f0:8c:
1c:49:fb:b7:dd:d2:08:e9:95:11:bb:ab:16:6f:02:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:BF:18:03:7C:85:4C:F7:4C:2F:CF:BA:72:D5:B6:28:28:01:3C
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yQq_GAN8hUz3TC_PunLVtigoATw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
87:c2:0b:db:33:4c:34:31:7b:b2:12:c9:e2:65:79:80:79:f0:
a4:16:9f:cc:50:80:b7:75:5c:5a:4b:ca:78:64:65:8b:43:31:
b7:19:29:4c:bc:80:fd:0b:53:1d:d0:bb:25:25:85:ec:4c:4c:
9b:a1:26:ba:58:a7:35:e8:1a:83:0e:ae:69:ea:9f:54:67:dd:
9d:42:ec:54:f6:63:ed:cc:82:8e:30:65:69:c6:78:a5:c9:94:
9a:da:c3:cb:bd:c8:da:5e:d2:29:45:3b:3d:6d:16:06:f7:3e:
72:ad:83:88:34:12:45:70:35:95:85:1f:19:f0:23:f7:5a:6e:
bf:88:fb:44:db:10:64:18:8f:3c:43:bb:9b:47:e1:9c:88:55:
9b:c3:f0:52:a0:95:3e:96:d2:9c:b9:f5:a3:57:92:cf:db:07:
8a:a5:e9:d3:75:10:c3:aa:42:5d:6d:b5:89:f8:2e:14:e9:56:
be:7d:9d:a6:46:a6:ad:b3:9e:c4:b1:3f:bb:df:53:b9:bb:f9:
a7:17:e8:65:0a:f9:6b:3c:86:30:e1:45:68:c0:7a:65:0a:58:
f6:73:d0:a2:43:bd:d5:85:7a:d5:32:19:14:a5:c5:19:55:bc:
9f:33:96:5f:4c:2a:ff:20:e5:8a:ce:db:62:79:35:1e:1f:1f:
f8:b6:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:32 2025 by rpki-client