
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
File: Npfb4C8e79gLGycJS0xyJdXQs-4.roa (raw, json)
Hash identifier: mGIfnB1Uynl6YudXTOzs/FKSL1UNx/9izCE+Q5RDTBY=
Subject key identifier: 36:97:DB:E0:2F:1E:EF:D8:0B:1B:27:09:4B:4C:72:25:D5:D0:B3:EE
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: CD
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
Signing time: Sat 01 Nov 2025 01:32:42 +0000
ROA not before: Sat 01 Nov 2025 01:32:42 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:42 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=3697DBE02F1EEFD80B1B27094B4C7225D5D0B3EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:19:a7:f5:ab:e2:03:5a:f3:0e:16:01:06:
dc:b2:a4:d5:b7:1e:0b:52:52:38:cf:b3:26:a6:ef:
05:7d:fd:c4:13:5d:5d:0b:dd:18:6c:3e:b6:66:9e:
5f:5f:8a:49:ed:f5:f7:d9:c3:89:0b:95:38:2b:52:
ef:cc:e0:4a:b6:a9:33:59:76:96:79:39:4d:a7:1f:
a7:f8:30:a8:af:e0:d5:ae:99:fa:f8:56:3d:86:8d:
8a:d4:77:60:43:84:59:db:3b:99:ac:88:46:67:3f:
88:a9:73:83:90:e9:89:38:33:71:ef:51:bd:35:fe:
9a:b1:9e:e0:58:bb:54:3b:b7:c4:74:33:ac:eb:e5:
d2:ac:7d:32:af:21:a7:8b:0d:26:35:09:d6:24:3f:
12:2d:6b:11:4c:43:a0:9c:57:32:ec:62:5f:f8:ac:
97:fa:0a:df:88:03:97:38:2b:49:cb:85:fd:5d:bf:
14:85:f1:41:48:ee:a8:7e:a0:c6:e8:80:d8:12:29:
3e:a2:a0:22:24:87:c4:f0:aa:5d:d5:51:29:be:37:
68:c9:fb:57:d3:2c:87:52:c8:d3:11:55:ae:21:a6:
ea:b1:17:ce:74:ba:d2:e2:b3:91:83:df:b5:81:2f:
b5:b1:c7:f9:ea:39:e3:e0:85:d4:74:94:6e:1e:a4:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:DB:E0:2F:1E:EF:D8:0B:1B:27:09:4B:4C:72:25:D5:D0:B3:EE
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:42:ba:b7:d8:0d:f0:55:8e:aa:f1:54:47:ad:80:b2:2d:48:
9f:c5:5f:a1:b2:cf:a9:54:d1:0f:4b:9d:20:66:fc:ae:53:79:
48:f5:17:83:04:0a:c6:5e:bd:7b:02:c9:a6:88:8c:50:6a:17:
65:6b:ce:43:55:81:e1:94:9b:bd:2d:9c:e5:f7:60:85:47:93:
2f:c8:ee:86:55:08:bf:a2:42:c0:fb:84:1d:0d:ee:c9:0d:b0:
6a:7c:45:fb:31:a1:f3:24:d0:45:a7:4d:cb:a9:a6:98:0b:d0:
de:89:b1:a7:23:dc:93:c8:bd:1b:0c:37:c2:6d:e5:a2:49:48:
93:0e:26:98:53:dd:9f:eb:fc:bf:be:6a:e7:e2:59:9b:2f:c5:
3f:90:bb:4b:33:b1:7f:7b:96:26:4b:10:b2:fc:2b:f6:58:38:
20:7b:fb:dc:f8:33:b8:56:95:cc:07:3a:f1:fc:50:6f:da:cc:
6b:bf:b6:46:a7:79:7f:3c:9c:a3:91:2f:1b:c9:dc:47:86:76:
7f:af:5b:ae:dc:cf:ee:44:68:c6:09:f2:92:1e:5a:95:e2:e7:
61:36:5e:2b:90:1b:08:e1:b6:ef:a8:db:f4:de:12:a7:65:4f:
fa:61:60:79:3c:b4:98:93:f9:73:90:23:ed:d1:b1:22:e5:70:
f6:06:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:21 2025 by rpki-client