
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Us_03DyYp1F3wnZmYfQnEltFDa8.roa
File: Us_03DyYp1F3wnZmYfQnEltFDa8.roa (raw, json)
Hash identifier: S4XGUzX59cp90fuwP+qUFOKc8FwCrSm9F9dIx1O2oWo=
Subject key identifier: 52:CF:F4:DC:3C:98:A7:51:77:C2:76:66:61:F4:27:12:5B:45:0D:AF
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: BB
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Us_03DyYp1F3wnZmYfQnEltFDa8.roa
Signing time: Sat 01 Nov 2025 01:32:32 +0000
ROA not before: Sat 01 Nov 2025 01:32:32 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 157.65.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:32 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=52CFF4DC3C98A75177C2766661F427125B450DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:f2:60:25:a0:6d:e4:17:ed:08:eb:86:65:
40:46:14:01:df:9d:75:bc:f5:d2:e6:83:78:39:80:
72:7f:66:c5:f6:b3:b2:21:10:ef:74:19:09:ee:49:
59:9b:4b:9b:20:1d:9b:34:8c:40:6f:93:8f:09:63:
61:d9:97:22:c5:29:61:d4:b7:4b:09:46:f2:a4:c2:
bc:f0:12:17:7c:40:e3:62:05:8b:72:33:01:65:da:
58:24:aa:49:7f:d0:b0:57:0b:46:77:03:e7:e1:99:
23:f6:83:ce:8c:0c:27:92:3a:27:53:fd:56:84:50:
76:5b:bf:87:c5:90:ec:44:0a:ef:59:a7:9f:68:fc:
70:d2:b9:7e:56:58:45:43:6e:c6:a7:d2:b9:42:20:
e6:36:e3:f8:ef:cd:a2:96:84:b0:2f:ca:e4:57:ec:
79:a6:4f:0b:a5:4d:e6:95:f5:45:81:28:76:af:9f:
5f:82:6a:90:48:8e:3b:b3:46:8e:92:de:a8:08:78:
0d:4e:d5:69:4b:a6:95:c9:f0:36:ef:35:54:04:c3:
34:9b:cf:7d:41:02:a8:25:ea:5a:90:f5:7e:8a:86:
79:6a:45:17:35:d4:d9:b4:64:fe:31:56:7e:54:e7:
32:b8:e0:3c:6c:c3:e7:e6:c4:e3:6f:fa:db:4b:17:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:F4:DC:3C:98:A7:51:77:C2:76:66:61:F4:27:12:5B:45:0D:AF
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Us_03DyYp1F3wnZmYfQnEltFDa8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.16.0/20
Signature Algorithm: sha256WithRSAEncryption
87:98:10:78:ae:0a:30:f0:32:2f:7d:1c:27:12:42:ca:30:4d:
b3:3b:68:50:50:45:57:c1:75:42:dd:77:d8:0c:63:83:15:20:
e5:0f:c1:13:5a:8c:8b:72:b2:35:b2:fc:6d:74:42:33:83:f0:
de:a4:cb:53:69:4c:5e:2c:02:07:34:0f:ac:71:5c:3f:5b:27:
a5:e9:4c:e9:a3:83:27:9f:50:a4:41:4e:bb:46:c2:2e:ec:65:
1d:24:83:89:f2:b3:d9:30:0a:06:5c:fb:bb:bf:aa:86:78:33:
c6:be:00:d0:f7:dc:ad:cf:d0:e9:22:88:c0:46:76:45:5f:07:
21:fe:63:6d:d3:88:17:b8:35:3b:f4:56:4e:8e:5a:23:31:a9:
bf:5d:46:fd:36:93:66:17:d4:3b:a7:1d:32:61:e1:73:0f:72:
a6:be:d4:20:ad:a5:fb:6c:72:27:13:94:ea:ad:77:50:0c:2a:
b9:71:92:08:64:b5:cd:4d:51:68:c7:c7:90:c3:18:7e:fa:a0:
3d:ef:04:0a:92:53:e7:8b:9b:dd:6b:a2:e7:9a:55:08:3f:35:
c5:5d:47:a0:57:aa:23:68:f9:3c:f0:2a:88:b4:c2:79:19:bb:
e6:f8:3a:e8:55:ec:6c:cc:00:64:2a:2c:d7:48:47:5b:25:df:
74:00:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:21:58 2025 by rpki-client