
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
File: WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa (raw, json)
Hash identifier: K/OjM+qzrcpE/D4PwV58IsKcsx1EPa8QkW+JxapZIZ4=
Subject key identifier: 59:74:7B:33:0E:56:3B:03:4D:1C:10:93:56:FA:60:B5:54:A4:5A:41
Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial: 62
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
Signing time: Fri 01 Aug 2025 01:28:52 +0000
ROA not before: Fri 01 Aug 2025 01:28:52 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 14618
IP address blocks: 2001:300:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Validity
Not Before: Aug 1 01:28:52 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=59747B330E563B034D1C109356FA60B554A45A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:17:08:1b:05:68:d6:9b:3c:c7:42:f9:ac:
83:2e:f0:77:78:c4:77:ce:50:80:58:a3:29:09:9b:
c2:03:91:f6:2b:40:20:5d:c8:f6:91:66:5c:57:f8:
a5:f0:16:cd:bb:da:ae:59:5d:62:aa:27:f1:05:2e:
2d:41:91:1b:5f:ea:49:74:24:57:12:d2:ed:d9:27:
c8:a1:9f:9e:d1:bb:63:d6:d7:44:9b:8c:26:61:ef:
01:ea:d5:91:7f:36:45:0f:2b:a7:6f:61:2c:40:c3:
0d:4a:40:cb:e6:ee:41:26:a7:09:33:56:75:ec:ce:
c0:e9:54:c5:00:92:89:ad:ef:cb:ec:34:67:2b:e9:
c2:37:6d:b2:1d:e4:d9:33:c6:ae:96:cf:73:86:c1:
6c:2c:1e:66:93:49:8c:00:2c:a9:e5:df:20:ae:17:
76:ff:1b:9d:28:0f:83:e4:5c:7b:a7:67:f2:cb:22:
5e:99:1e:bf:84:b6:e7:a1:b6:74:cf:ca:23:64:fa:
c4:9f:a9:d2:d1:3e:f3:3e:2b:93:81:6d:4a:a6:2b:
f8:80:e4:52:d6:e6:ce:cb:d8:7c:8c:1c:84:e5:c2:
93:79:fe:43:f5:18:61:02:f1:09:bc:0d:2d:e4:33:
2e:27:02:07:0e:a1:09:bc:3b:ae:df:65:7b:14:d5:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:7B:33:0E:56:3B:03:4D:1C:10:93:56:FA:60:B5:54:A4:5A:41
X509v3 Authority Key Identifier:
keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:300:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
a4:0e:cc:18:42:90:1c:af:47:bc:8b:ed:a1:54:c0:6c:b7:e3:
d7:94:8b:63:ad:9a:c4:e2:f9:20:c6:e3:4a:9e:7f:f7:20:20:
76:b4:4f:73:99:82:bf:fd:1d:d1:79:8d:4d:27:0e:3d:4f:c5:
de:c4:90:b1:38:2a:20:10:b0:b7:a9:05:b2:5f:41:0b:82:58:
4d:a4:7c:31:35:c9:da:22:78:ba:1c:1a:7f:bc:ed:77:f0:b6:
54:6a:4a:2f:d3:ff:ab:72:64:bb:14:78:38:6b:21:52:26:15:
75:1b:0d:20:55:b3:30:39:cf:34:da:c0:87:a1:21:59:98:e9:
a4:3d:00:ee:23:bb:b9:0d:a8:e7:bd:ff:3b:fe:cc:db:b5:17:
9c:cf:64:fd:ee:5a:53:80:93:4b:0e:dd:89:ef:66:1d:3a:8d:
ec:69:ef:d8:10:31:4f:c1:83:1a:c0:6c:cf:2e:4d:bb:5b:44:
a2:52:62:74:a9:e3:d4:2f:ee:bf:14:10:3c:81:76:06:6a:ca:
96:5c:ce:68:53:27:bf:ef:49:96:b0:fc:8f:0b:1a:3a:5f:86:
f0:56:f4:81:16:97:2d:1e:d4:55:d1:4c:b0:bc:86:b0:47:75:
5d:3a:3f:c1:fd:78:c5:4d:ab:35:e4:67:6a:aa:06:3b:0b:22:
47:13:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:53:40 2025 by rpki-client