
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
File: RFiDLPpEUonAevullOvvWjeKiW0.roa (raw, json)
Hash identifier: Ar3QKVkFiNN+wRafohQxx5M+cHPDHys05oSNo12UVI4=
Subject key identifier: 44:58:83:2C:FA:44:52:89:C0:7A:FB:A5:94:EB:EF:5A:37:8A:89:6D
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 5C
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
Signing time: Tue 01 Apr 2025 01:33:08 +0000
ROA not before: Tue 01 Apr 2025 01:33:08 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 63789
IP address blocks: 202.9.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Apr 1 01:33:08 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=4458832CFA445289C07AFBA594EBEF5A378A896D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:d9:27:eb:46:9c:f0:69:49:14:de:55:78:
b7:47:f8:92:b7:88:92:ac:db:5a:85:8b:4e:c1:64:
88:e2:ca:99:54:07:92:a4:80:ca:3a:82:71:57:78:
3f:1f:be:b9:7a:b4:66:27:10:21:3c:77:9b:06:ab:
9a:11:2b:c4:e7:fd:6f:8d:82:dc:b2:95:a9:78:99:
9b:60:04:2a:25:96:35:dd:3c:95:65:50:70:5b:8f:
8f:16:cf:eb:6a:33:e7:13:50:bd:ca:f8:3f:1d:54:
12:ec:30:e1:71:7a:dd:f9:20:1a:1e:45:da:96:75:
6a:11:69:8f:5e:6d:b7:7b:25:28:68:ca:8f:c3:52:
75:bb:0b:af:18:eb:56:48:00:97:e4:eb:1a:7b:32:
c2:de:e7:8b:c0:25:81:ee:68:2e:83:42:bc:66:7e:
40:f1:d5:a7:5b:8f:9e:ca:b1:2a:a1:e4:53:89:c7:
a7:d3:8b:de:3e:ad:de:b0:1d:95:fd:ec:14:47:e4:
45:bd:91:db:e2:8a:00:c2:32:b8:6e:b4:24:d5:64:
f1:c3:55:2c:c9:3b:4d:b1:c3:6f:1a:de:7f:09:31:
22:03:75:20:bf:f0:21:88:2c:d2:56:66:62:b7:46:
88:2c:aa:a6:40:18:6a:cd:bf:21:cd:a6:d7:3a:47:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:83:2C:FA:44:52:89:C0:7A:FB:A5:94:EB:EF:5A:37:8A:89:6D
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/RFiDLPpEUonAevullOvvWjeKiW0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:84:ce:74:e5:26:1d:93:72:02:0c:9e:42:19:67:43:66:67:
7c:c0:57:66:c8:6f:bc:83:4a:f9:54:fb:65:0c:df:f5:42:56:
80:59:e1:25:f6:56:9f:70:4a:0d:4d:64:bf:51:1a:54:82:86:
6d:5e:c2:a1:0e:ea:fb:98:9d:c1:3d:4d:59:44:bf:3f:13:df:
c2:d5:3f:99:a8:e7:1a:43:92:0b:9e:27:d0:fe:8b:17:08:ec:
18:37:2d:de:86:11:dc:2a:aa:3d:59:2e:51:a3:30:50:58:67:
98:1b:1e:79:bf:90:e3:a5:89:ef:be:fa:bb:9f:80:d1:fc:de:
3b:3c:bb:ea:77:ad:5f:78:f3:e0:83:7c:c2:84:54:6d:e0:45:
9d:38:fc:57:a2:36:37:a1:c4:21:bf:3e:70:4a:bc:94:d5:ca:
9e:88:8e:3d:2b:d0:e7:95:f2:be:13:45:f1:86:8f:53:20:39:
7a:f6:4c:4c:1c:ea:3a:3b:92:03:91:43:91:b7:ee:24:85:89:
76:96:38:cd:b7:89:40:bd:b8:c8:9f:7a:42:46:e4:31:94:e4:
00:e4:32:f0:ab:11:43:4b:c1:c3:d7:05:af:4a:e3:78:6e:83:
ff:80:86:ed:06:ac:aa:a7:f3:d1:30:6d:8c:99:8c:50:2b:c7:
e6:9e:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:14 2025 by rpki-client