
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
File: B80TFmvGB2B8PcWgV35zHexL0hw.roa (raw, json)
Hash identifier: QBLe25emIUN7523U7dTIgIR6ZI/mkUrdKSKApflOSTM=
Subject key identifier: 07:CD:13:16:6B:C6:07:60:7C:3D:C5:A0:57:7E:73:1D:EC:4B:D2:1C
Certificate issuer: /CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Certificate serial: 02
Authority key identifier: D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
Signing time: Mon 30 Jun 2025 07:42:11 +0000
ROA not before: Mon 30 Jun 2025 07:42:11 +0000
ROA not after: Tue 30 Jun 2026 06:23:17 +0000
asID: 4675
IP address blocks: 2001:338::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Validity
Not Before: Jun 30 07:42:11 2025 GMT
Not After : Jun 30 06:23:17 2026 GMT
Subject: CN=07CD13166BC607607C3DC5A0577E731DEC4BD21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:82:0b:28:bc:90:58:f8:47:06:cf:a9:18:
76:4d:c1:79:aa:48:b5:8a:ff:6a:2e:86:09:9e:af:
d0:83:64:1e:84:f5:d8:04:7f:b0:65:4e:7b:fb:fb:
39:c9:ee:30:2d:51:69:a4:55:37:ea:21:96:93:96:
e8:52:9f:52:40:2a:b1:cf:19:cf:dc:b1:1e:0f:da:
ef:ae:2a:d5:a2:b7:79:ee:ac:34:67:bc:31:c2:dc:
6d:f0:69:89:a1:42:35:29:79:19:cf:b0:15:a1:a1:
1e:e5:e5:fc:04:f2:57:11:80:86:d0:7c:5d:d6:fd:
bb:cb:21:f9:a2:b0:f1:92:7c:2d:36:c1:d6:cc:27:
ec:5a:be:1e:b7:2b:b6:f8:ce:0a:4e:3e:d2:e8:f5:
e0:c2:6f:ae:ad:38:23:91:3a:35:60:10:12:3d:ce:
be:cd:86:5e:b9:c1:db:7e:8e:0d:1e:9d:67:a2:83:
d8:11:4c:b3:17:de:56:cd:0d:ec:32:17:a4:22:6b:
8f:14:43:56:65:13:42:d6:75:a4:d5:4e:08:db:2a:
c9:1b:03:ae:ff:73:89:a3:6c:10:66:11:d6:e4:04:
32:33:25:04:fe:2e:da:9c:d4:6e:61:1f:e7:52:4a:
da:3f:d3:5e:d9:76:2b:19:4c:d0:37:cb:65:f1:87:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CD:13:16:6B:C6:07:60:7C:3D:C5:A0:57:7E:73:1D:EC:4B:D2:1C
X509v3 Authority Key Identifier:
keyid:D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:338::/32
Signature Algorithm: sha256WithRSAEncryption
09:51:41:ca:1f:01:42:22:e3:55:49:21:19:20:3a:e7:6d:37:
90:71:06:35:4e:3e:ce:9f:c5:26:39:77:82:71:a2:c0:57:6f:
7c:c9:4f:d4:45:00:43:8d:3f:20:9f:1b:d8:a2:21:46:1d:b3:
ed:48:0e:41:bd:8d:9e:06:66:fe:45:80:ab:95:70:0a:43:2b:
85:dd:ab:33:ec:a1:fd:26:a6:2e:49:3e:d3:a3:97:1a:89:78:
c5:59:1e:24:c5:25:fe:f2:a8:6c:02:a9:50:4b:54:76:f1:9b:
15:74:aa:02:f3:ee:72:13:91:46:a9:c3:e7:f6:ad:22:83:72:
57:f3:e3:c5:6e:b9:6f:cd:4f:a9:6a:44:0f:db:fd:d1:fd:6f:
00:29:88:72:2c:08:ed:8a:71:09:33:b2:d9:82:94:e5:0f:65:
71:69:43:ee:72:5b:0c:d5:2f:8c:53:52:46:78:e0:b1:61:4d:
aa:67:b2:bd:77:d7:e8:51:9b:0a:5e:b3:a5:6f:05:4b:15:36:
16:b0:26:0b:7f:94:d2:8d:9f:a4:5c:dc:89:74:37:52:44:ff:
a6:32:b2:d7:21:e3:80:85:6c:46:a8:1b:c0:24:af:a5:c3:e4:
24:3e:a9:6d:50:ca:d9:cb:95:fd:dd:d0:24:7e:b0:de:99:8d:
74:d3:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:07:46 2025 by rpki-client