
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
File: pcvdN8eeT9cgeQovTbsieupMilg.roa (raw, json)
Hash identifier: towyZeAqbZNNZXpgYiAEZoRcQAZ7lKrlkz+4N3XipBA=
Subject key identifier: A5:CB:DD:37:C7:9E:4F:D7:20:79:0A:2F:4D:BB:22:7A:EA:4C:8A:58
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: D3
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
Signing time: Sat 01 Nov 2025 01:38:08 +0000
ROA not before: Sat 01 Nov 2025 01:38:08 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:38:08 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=A5CBDD37C79E4FD720790A2F4DBB227AEA4C8A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:a9:09:69:71:c7:fe:75:bb:ed:6e:e6:d5:
94:b0:52:ba:2d:40:59:6c:f7:ad:41:f2:33:7a:96:
6e:3e:02:14:2c:73:eb:12:82:d8:7b:44:44:ed:02:
f8:01:c1:cd:93:9c:dd:54:7d:2f:93:5c:26:43:66:
43:3b:8a:5e:e0:b5:97:ef:f8:82:f3:16:5c:37:8f:
77:d2:6b:b2:10:45:ac:7d:c3:69:0f:0a:01:8f:ff:
63:56:71:cd:8c:57:97:f3:19:f7:08:d2:78:0b:61:
eb:c4:8e:3f:8b:95:23:21:19:bb:3b:8f:57:de:96:
80:7a:78:8d:ca:bf:74:43:bd:29:72:74:6d:41:34:
a2:4c:02:21:36:ef:42:6a:a5:d6:8a:b2:3f:30:c0:
fd:83:33:64:26:97:08:d9:38:79:a3:75:32:ae:f9:
8f:53:d1:f7:71:96:5d:9c:05:c6:f2:09:71:ce:84:
e1:a3:c6:0c:c8:f8:a3:17:cc:83:75:d9:93:06:87:
7c:41:25:b5:65:d0:c8:45:c1:f4:e2:c3:4f:79:6b:
d1:c5:1c:0e:59:83:a6:69:dc:37:08:79:54:1f:46:
a6:a8:a1:0c:4f:60:9e:55:63:16:d7:54:24:c0:a7:
34:0a:90:b1:75:02:dd:4c:ad:fe:05:30:30:30:ff:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:DD:37:C7:9E:4F:D7:20:79:0A:2F:4D:BB:22:7A:EA:4C:8A:58
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:f1:8c:18:26:39:c2:82:43:f4:1e:a2:ae:51:70:c6:f5:f0:
32:87:40:7c:09:19:e0:6f:1e:f8:7d:70:43:34:ac:1a:25:3c:
46:bd:ce:46:e0:5a:5b:55:34:08:0c:54:ff:f6:e3:17:fb:48:
ae:60:66:a3:60:5c:b1:f9:cf:fe:37:10:cc:8b:08:ae:11:27:
41:92:bf:84:ac:f2:b3:76:8c:d0:c9:a7:d7:f2:82:cd:84:7f:
be:bb:5f:3f:b0:c2:dc:32:58:ab:aa:19:18:3f:fb:1d:98:2d:
3f:c9:9b:c2:a0:c7:13:2a:a2:fe:ae:12:16:9d:54:1a:14:3a:
41:90:81:7f:7a:4a:9f:53:7f:89:4a:c7:3e:52:5b:77:56:1a:
aa:df:5e:97:0f:21:78:35:aa:e2:66:8b:69:41:91:00:37:35:
55:93:c6:81:f7:8a:12:83:d5:c7:ad:04:2b:11:f3:b4:a8:24:
ca:83:f7:12:24:74:97:ae:83:7f:04:b3:8e:0d:e5:33:ee:1f:
44:60:04:e6:97:af:46:e1:b0:68:80:08:f6:1a:7a:fe:71:f6:
32:21:9e:06:97:11:7b:83:2a:28:7c:c1:ce:59:c2:0a:32:5b:
00:14:53:f9:5c:69:83:94:60:15:8a:e5:5d:90:63:fd:90:88:
67:6b:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:27:52 2025 by rpki-client