
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/QN47ulBs-qdJgMR0KFG7zcmDjig.roa
File: QN47ulBs-qdJgMR0KFG7zcmDjig.roa (raw, json)
Hash identifier: AUmqwaQmSpo8ZF+ngkyaIc24hi8He3aUybu3aQrU9yw=
Subject key identifier: 40:DE:3B:BA:50:6C:FA:A7:49:80:C4:74:28:51:BB:CD:C9:83:8E:28
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: C0
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QN47ulBs-qdJgMR0KFG7zcmDjig.roa
Signing time: Sat 01 Nov 2025 01:32:35 +0000
ROA not before: Sat 01 Nov 2025 01:32:35 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 157.65.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:35 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=40DE3BBA506CFAA74980C4742851BBCDC9838E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:09:89:51:b5:ff:2f:73:20:bf:f4:42:38:
4c:b8:fa:31:a7:f6:fc:a1:f1:b5:70:c1:14:ee:79:
ef:ee:7b:fe:70:13:27:a0:d8:55:15:00:5d:a3:a0:
41:31:19:86:ea:e6:05:50:e0:90:ba:cb:c1:d2:3b:
3c:f1:d8:d7:37:c0:4d:d2:04:e0:e4:9d:bc:69:86:
cc:c9:55:da:7c:06:0d:b2:6e:3f:61:a8:d0:5d:b1:
8d:8f:db:5d:f9:e4:91:45:47:f2:26:06:c0:a2:0d:
91:29:42:a1:11:da:0d:25:14:d9:78:ee:94:c8:cb:
a7:af:86:bf:4b:63:0e:76:58:d5:c8:e0:e0:57:53:
06:20:8b:47:40:3b:11:4e:68:02:cc:f5:20:13:7e:
af:4b:05:57:b4:c5:99:d7:d8:b3:1e:ce:ec:fc:85:
5b:c6:de:3c:a6:b5:77:d4:28:d2:c5:b5:d9:f6:d1:
ef:9d:8c:b6:68:60:09:cc:96:d1:ed:32:b4:2f:12:
66:a6:0b:1e:2e:33:0b:c0:cd:cb:f5:34:c6:7f:90:
b1:0a:a9:74:f7:cd:2b:68:45:87:69:85:90:76:80:
ad:0b:54:42:04:5f:5f:fd:2b:70:ac:32:78:59:26:
ca:f5:0d:7d:3a:a0:eb:85:37:fe:7f:88:b2:77:20:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:3B:BA:50:6C:FA:A7:49:80:C4:74:28:51:BB:CD:C9:83:8E:28
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QN47ulBs-qdJgMR0KFG7zcmDjig.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:d4:29:75:5f:f7:30:d0:79:c0:49:33:02:4d:1f:cd:b0:45:
43:14:eb:80:63:b5:d3:74:e0:b5:ed:69:4f:bb:63:a3:86:97:
01:a5:d5:c1:5d:61:67:0c:b5:35:ce:1b:b1:f9:09:88:af:12:
d2:8d:d4:ab:34:2a:41:dc:0a:41:7a:db:7c:98:47:34:1a:18:
4f:69:5b:99:48:c2:85:f9:63:b2:04:ca:9a:54:a0:70:7d:13:
67:b1:90:9c:ba:08:58:c2:31:6b:10:45:aa:38:71:c6:7a:8d:
40:13:56:be:e8:34:25:aa:bf:a4:be:91:65:b1:f1:31:9d:73:
7d:9f:1e:89:35:29:17:a0:2d:0f:25:14:1c:8b:04:b1:35:df:
2c:1d:3f:81:72:9a:a0:7e:3a:82:ea:c2:40:84:92:9a:5b:b1:
1a:96:7c:a8:41:48:43:49:38:3e:14:71:ea:9b:7e:e5:0b:62:
8c:85:b1:77:65:e2:fe:cc:cb:f7:ce:5d:e4:fe:71:4a:e9:17:
6d:df:00:40:81:56:f1:31:4a:53:1d:41:40:f0:04:bd:fc:a6:
f5:a6:59:50:1e:96:82:1e:0e:64:75:3d:11:b2:3c:e9:00:07:
10:85:4b:d8:03:c0:8a:5b:ca:7b:bb:50:38:79:f3:89:89:6a:
19:8a:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:45 2025 by rpki-client