
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
File: qs1pUxI6yj-W2EjaNKX6JCKugtI.roa (raw, json)
Hash identifier: 1dPB9J6qUXp8OKKbj9xh3ATkY/2PROqEzgTE08b/Aug=
Subject key identifier: AA:CD:69:53:12:3A:CA:3F:96:D8:48:DA:34:A5:FA:24:22:AE:82:D2
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: BE
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
Signing time: Sat 01 Nov 2025 01:32:34 +0000
ROA not before: Sat 01 Nov 2025 01:32:34 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 157.65.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:34 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=AACD6953123ACA3F96D848DA34A5FA2422AE82D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:67:ee:8c:68:ea:aa:7b:a7:67:65:f2:5b:
fa:1e:6f:f0:02:e9:2b:00:19:66:e9:df:e6:6c:08:
c7:14:56:5d:84:4e:ef:48:98:05:88:31:96:3a:2d:
de:38:13:e3:95:05:2b:df:b1:48:dc:fe:8b:91:0a:
86:0c:5f:e7:60:36:d4:3f:7c:c9:9a:98:70:61:20:
e0:a7:f0:0f:80:f0:91:e1:53:10:6e:5a:77:21:e9:
74:65:64:a5:30:e7:46:5c:a9:49:73:0f:01:4d:eb:
e1:8a:90:fb:af:87:ca:52:0c:af:e2:a5:6b:11:ce:
eb:b1:07:77:df:49:2c:3a:fc:f3:f3:e2:a2:00:e9:
e1:e2:a3:ad:89:f4:db:e8:21:73:b3:0c:ac:cb:77:
01:4a:b2:fe:4d:ae:17:77:19:23:c0:15:f8:25:a3:
1c:b7:1a:8e:16:9b:99:a2:a1:9f:f3:f2:ae:7d:3f:
34:1e:13:cf:c9:c2:8a:54:58:56:88:ef:83:88:32:
3b:3f:d5:31:28:a3:59:63:81:2d:99:42:eb:37:10:
a3:de:69:be:95:ae:ce:15:20:0a:ea:f0:54:d2:ce:
df:5d:3a:5a:51:17:89:57:94:82:e3:c3:dc:36:e6:
83:fd:2e:f4:63:00:d5:a2:7e:ed:a5:be:26:a1:dd:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:69:53:12:3A:CA:3F:96:D8:48:DA:34:A5:FA:24:22:AE:82:D2
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.128.0/19
Signature Algorithm: sha256WithRSAEncryption
36:be:6e:c0:5c:a2:a9:d9:cc:2a:1c:e8:a5:0d:7a:01:0a:c8:
f0:4f:97:6b:2b:14:f9:1c:3f:cb:c6:49:a5:07:6a:5e:52:78:
85:12:e4:97:b8:e3:81:3f:6d:f5:d6:90:8b:e5:8b:0e:a4:86:
39:59:dd:53:23:f9:06:27:7a:86:4b:ae:c6:22:d8:c0:ba:a6:
8e:37:12:fa:ea:f5:9e:32:a2:6e:af:43:72:ba:24:78:fc:b4:
3b:09:67:d8:ae:28:ce:dd:48:56:69:87:6d:24:6d:65:1f:fc:
86:98:3d:05:c1:72:67:ea:71:8f:34:7c:59:42:01:63:68:a3:
af:a1:f2:bd:aa:87:d8:36:21:f9:19:9e:a8:b7:7b:0e:03:5f:
55:14:28:e6:ad:5a:b0:32:d9:0a:b8:a0:da:8e:c3:0b:2b:35:
dd:35:7b:e5:18:43:7c:8a:ef:13:da:80:0c:fa:2d:81:06:7b:
7f:af:61:01:1f:6b:d6:80:ec:ce:35:2e:c3:e7:1d:da:ab:22:
c5:e7:78:d5:95:92:1c:4b:65:09:a0:17:85:60:77:20:8d:4f:
bc:c2:97:7c:1a:06:08:ad:b5:10:1e:86:b6:67:d7:da:3d:cf:
cb:36:d5:13:32:ea:e4:eb:00:b1:cd:8f:e1:b5:2a:05:2c:7e:
b6:af:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:46 2025 by rpki-client