
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/yDHKnFyFJjLqNqjGCzbKxVrqfq4.roa
File: yDHKnFyFJjLqNqjGCzbKxVrqfq4.roa (raw, json)
Hash identifier: 50ZYM6MzclJKKke31Kb+ujHDGQ0S5V7iMpHWNB8dctA=
Subject key identifier: C8:31:CA:9C:5C:85:26:32:EA:36:A8:C6:0B:36:CA:C5:5A:EA:7E:AE
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: C8
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yDHKnFyFJjLqNqjGCzbKxVrqfq4.roa
Signing time: Sat 01 Nov 2025 01:32:39 +0000
ROA not before: Sat 01 Nov 2025 01:32:39 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 1 01:32:39 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=C831CA9C5C852632EA36A8C60B36CAC55AEA7EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:4f:b4:e6:86:31:e3:9e:01:62:8e:55:6b:
d5:ba:df:68:72:53:83:4d:18:35:be:e5:df:8a:db:
97:e9:80:51:13:ad:0e:05:d4:c8:99:d2:b5:ab:b4:
c5:84:84:9b:d1:5e:5b:fc:1f:ea:de:aa:a2:7e:89:
7e:e9:95:9d:1b:58:15:9f:d4:13:ad:42:de:0b:f8:
2f:34:4c:d1:1e:8e:85:b5:e9:2b:1d:7b:28:bb:ce:
d3:9f:3d:39:e1:e4:f3:00:2e:0e:d2:32:39:f5:92:
52:d1:f7:35:85:6d:50:3d:b7:15:ca:e2:fb:f0:41:
46:e1:21:10:06:ac:b2:e9:2d:95:49:77:08:1b:a6:
46:21:c4:32:d4:01:53:83:68:4d:11:13:f9:39:8b:
63:76:b0:13:5c:8e:33:7f:5b:a8:20:50:5a:76:04:
e5:77:92:2a:10:ac:b4:e2:1f:8b:0b:5c:99:67:b2:
94:d6:83:62:2e:7e:ca:13:f2:7a:6e:cd:99:29:ec:
fc:e0:27:48:89:8a:88:f7:78:b3:2d:eb:65:36:43:
c7:5e:be:a4:92:a5:28:87:4c:68:6e:eb:97:ce:72:
57:71:40:41:22:1e:6d:06:d0:ae:39:bb:bc:7c:20:
4f:3a:99:df:c9:13:bb:6c:05:4e:2a:0f:3d:51:e2:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:CA:9C:5C:85:26:32:EA:36:A8:C6:0B:36:CA:C5:5A:EA:7E:AE
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yDHKnFyFJjLqNqjGCzbKxVrqfq4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
83:0a:8c:a9:7c:76:7a:19:57:65:d6:19:93:c1:a3:85:68:7a:
d3:a0:f7:7a:ac:81:eb:a8:75:5b:4e:2b:4c:41:52:02:ce:6a:
56:96:c5:33:5e:e1:d6:9d:6c:18:3a:7a:42:b5:e5:ad:db:24:
5e:c8:85:6e:25:e1:fe:93:84:fb:d5:a0:cf:e5:f9:12:4f:22:
68:de:c1:40:0e:b2:06:b0:01:73:3c:a2:2f:0b:3b:c5:22:3e:
4f:d8:8a:91:14:c7:2a:b5:23:06:3e:04:fd:09:7e:70:4d:df:
2a:bc:67:35:0c:f0:a8:e3:45:67:1d:0f:34:f3:bc:cb:e0:39:
69:02:dc:c3:15:ca:3c:79:e2:09:ee:34:a9:b5:74:c5:3b:dc:
66:90:34:e6:a0:ca:6b:9e:a8:a5:fc:42:92:47:05:77:5c:9d:
9d:98:4d:70:44:c7:07:de:ef:98:c8:12:06:43:e6:fb:1d:5a:
16:ae:dc:eb:2c:9d:08:a9:7d:44:b4:ad:ce:75:4b:94:ac:e1:
84:c4:39:e6:d1:cd:3f:6b:58:4c:fb:df:0b:7f:e9:e6:20:f5:
eb:ef:d8:94:d8:5d:aa:6f:7d:03:9a:df:77:01:78:e3:4c:8e:
ad:f0:ad:ba:c9:99:c8:cb:74:5e:39:0a:58:94:48:98:2d:2e:
6e:42:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:51 2025 by rpki-client