
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/5askLyai4s6Ch9MhcyZomFd8vio.roa
File: 5askLyai4s6Ch9MhcyZomFd8vio.roa (raw, json)
Hash identifier: 8kZ3o5lXnb6SiT1ZykLnQBCWgYe3zGL6zJ2Gmylk1Zo=
Subject key identifier: E5:AB:24:2F:26:A2:E2:CE:82:87:D3:21:73:26:68:98:57:7C:BE:2A
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: B7
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5askLyai4s6Ch9MhcyZomFd8vio.roa
Signing time: Sat 01 Nov 2025 01:32:29 +0000
ROA not before: Sat 01 Nov 2025 01:32:29 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 143.125.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:29 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=E5AB242F26A2E2CE8287D32173266898577CBE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:a6:67:18:eb:8f:59:df:a7:95:69:3d:f4:
6c:a8:c3:9a:c3:ea:4d:eb:65:c2:7c:f7:47:2e:d5:
ab:d0:03:d7:85:a3:66:c8:75:86:70:d6:27:9d:03:
de:81:99:50:aa:10:23:6f:d5:56:db:04:bc:9f:32:
06:c3:20:78:d5:68:1c:b2:df:51:16:96:83:d4:4f:
48:dc:f3:c8:79:1d:7f:17:71:a3:ea:24:25:74:a3:
26:a5:92:c9:95:d8:d9:95:a7:c4:cc:d3:0e:ba:1d:
86:42:fc:3c:61:e8:22:f0:92:52:89:f9:15:ea:ec:
b7:79:9b:54:d7:19:45:e9:33:8e:fd:dd:ad:63:3e:
e9:ec:07:71:a3:27:64:0f:2d:3b:a2:2e:87:40:fe:
d0:7b:3e:e0:1f:8c:e4:26:d1:13:05:b6:d5:b7:9d:
1d:f6:02:4c:1f:d9:84:dc:23:a5:49:8f:a4:57:45:
62:97:c9:2a:38:2a:0a:c1:4d:f7:87:a5:ee:00:1e:
52:b1:0f:89:a9:bb:00:7e:05:07:74:a3:93:98:e9:
2d:2a:4f:e8:b5:b5:24:03:3c:3c:b5:f7:08:11:63:
01:0a:60:5b:b9:3c:c1:eb:26:f2:b2:c0:76:d8:f9:
fe:46:34:cf:2a:52:51:e3:57:d5:6a:94:4b:c7:70:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:24:2F:26:A2:E2:CE:82:87:D3:21:73:26:68:98:57:7C:BE:2A
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5askLyai4s6Ch9MhcyZomFd8vio.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.125.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:92:6c:d8:bc:da:94:88:14:0c:53:9f:bd:96:27:39:fb:50:
2e:9a:b4:0e:de:47:9b:77:b7:05:e4:dd:83:57:b4:d8:90:c7:
2a:fd:a5:c6:36:0f:27:83:c9:a8:99:d7:52:25:08:11:7c:c9:
2b:98:d9:8d:03:f0:d0:1e:65:e3:a7:91:1e:38:dc:cb:cd:6e:
db:d5:56:e8:46:f8:e4:8b:f9:37:dc:62:aa:29:25:25:1f:2c:
7f:75:da:5f:a5:ea:67:e3:45:ef:cf:fa:bb:56:26:5d:f0:9b:
7c:e0:6f:40:c2:9e:cd:8a:4e:ba:28:9b:55:02:ea:b0:eb:c3:
7d:b6:c5:79:37:b5:7c:7e:96:ac:12:86:04:52:d6:fd:31:d5:
16:a5:49:80:50:55:38:76:ad:1c:5b:df:02:c7:be:d6:14:1a:
1b:81:37:55:2e:b7:4f:83:6a:4d:0f:6f:ee:63:96:9f:f0:17:
43:8b:54:31:63:ba:24:7d:4b:d9:00:39:d7:5a:97:7a:19:05:
7b:41:fe:03:89:22:50:61:11:26:1d:00:45:2a:72:4b:3f:dc:
c9:da:36:5e:74:18:73:31:07:2a:b9:d5:99:20:83:b9:3f:76:
84:85:fd:85:d6:5a:2f:9c:89:f1:7a:04:f3:19:05:ab:19:44:
37:96:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:57:13 2025 by rpki-client