
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/ZxlOTWRHeFRvgR1y7PU4yLNf2f8.roa
File: ZxlOTWRHeFRvgR1y7PU4yLNf2f8.roa (raw, json)
Hash identifier: 4Wksovle1Dh4LP75xWQrQQQtxkwgOvzrp8zwaYbrhjM=
Subject key identifier: 67:19:4E:4D:64:47:78:54:6F:81:1D:72:EC:F5:38:C8:B3:5F:D9:FF
Certificate issuer: /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial: 52
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/ZxlOTWRHeFRvgR1y7PU4yLNf2f8.roa
Signing time: Sat 01 Nov 2025 01:31:38 +0000
ROA not before: Sat 01 Nov 2025 01:31:38 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 18131
IP address blocks: 192.47.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Validity
Not Before: Nov 1 01:31:38 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=67194E4D644778546F811D72ECF538C8B35FD9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:84:0f:93:58:05:f3:a7:48:bd:5f:59:19:
49:7d:d4:f0:33:3e:92:43:b4:cd:22:1e:73:78:d1:
ee:40:b8:c9:26:c1:9a:84:8c:fa:a5:27:c9:76:8f:
d6:57:80:0f:0a:99:b7:24:8c:a8:b4:7a:3a:a8:54:
dd:47:7b:97:e8:f9:99:53:ae:81:37:df:f2:85:b8:
32:83:f3:ae:8e:a5:bb:be:8c:bc:22:55:8d:97:56:
55:42:e0:8d:04:e1:2b:59:31:6a:74:3d:ac:6b:c3:
bf:7c:b8:ea:a1:a4:90:4a:14:f5:bd:08:9d:14:eb:
a8:62:a4:2b:e6:73:ac:08:c6:cf:90:e7:d3:5f:3b:
b8:de:62:a6:77:66:f5:29:da:43:1f:45:1e:19:71:
12:8a:ce:2f:02:08:98:18:26:07:58:b1:52:cd:70:
26:0e:06:ac:00:63:05:1a:ba:ad:99:c3:f3:65:6c:
c2:94:82:ff:33:b6:26:3f:2e:d9:85:ea:d9:d2:9c:
e0:40:4a:a3:6f:5d:e0:b0:32:e8:9c:e1:9f:fd:89:
fc:0f:9f:bf:36:aa:25:aa:a5:a7:d1:a7:d3:cd:15:
2d:cd:74:ca:36:91:66:53:05:cd:88:48:4a:52:9e:
dd:e1:4e:76:b5:30:f5:a9:69:e2:06:0e:ff:01:b9:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:4E:4D:64:47:78:54:6F:81:1D:72:EC:F5:38:C8:B3:5F:D9:FF
X509v3 Authority Key Identifier:
keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/ZxlOTWRHeFRvgR1y7PU4yLNf2f8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.47.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:a5:27:fc:2e:2b:b6:99:de:dc:de:a6:dd:4b:7f:8c:4e:e7:
91:9f:d7:f9:14:79:f6:9d:63:0b:85:40:ee:e7:c0:5a:00:46:
ab:45:0c:d0:80:ec:04:57:d1:99:b9:a7:23:8b:de:01:ef:7a:
e4:99:af:dc:b8:ee:4c:24:24:5e:fc:ae:e1:5f:ee:45:2f:07:
5d:29:42:71:7d:8b:fe:c7:5e:a3:ae:d5:4c:d4:5b:d3:b6:19:
69:f4:0d:04:2b:93:58:c3:d1:dc:3e:02:9e:3c:51:2a:e4:d1:
21:61:a4:06:0b:55:2f:36:40:04:d6:61:89:86:c9:e0:ab:c1:
8d:de:22:0d:14:fb:eb:6e:92:99:bd:1e:94:d8:45:59:76:9e:
0f:9f:4e:46:47:1d:72:67:d3:e8:e1:fe:fa:31:5b:fe:3e:bb:
6f:4d:e1:7a:f8:07:6b:1b:2f:0f:b5:bd:f0:b9:24:bf:e2:af:
6c:49:4d:25:4d:a5:36:0a:c8:c6:67:39:c4:0a:74:d0:89:2a:
84:34:e5:c7:cb:98:ec:61:52:51:06:46:11:ab:fd:07:bf:16:
b3:15:ef:c0:d3:6d:0d:31:9a:e3:f7:1a:0a:21:a5:ee:64:ed:
75:7e:35:ff:88:31:12:0b:7b:06:b7:fc:7a:d6:37:08:34:9d:
bf:d8:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:30:10 2025 by rpki-client