
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa
File: Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa (raw, json)
Hash identifier: J/9L2ss10CUbaiYAvD2BzWwZb9c6BB9og0n011qJXHc=
Subject key identifier: 59:CC:BD:47:DD:4B:D3:3E:A6:5E:A4:26:3F:CF:F5:3D:3F:28:46:D1
Certificate issuer: /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Certificate serial: 25
Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa
Signing time: Mon 01 Sep 2025 01:34:34 +0000
ROA not before: Mon 01 Sep 2025 01:34:34 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 4685
IP address blocks: 2001:c28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Validity
Not Before: Sep 1 01:34:34 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=59CCBD47DD4BD33EA65EA4263FCFF53D3F2846D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:99:ff:a2:56:a2:6a:8a:20:5f:0a:0e:e4:
33:fe:5d:03:ce:08:06:b0:b4:b6:f8:2e:95:d0:af:
10:90:83:2d:3f:ae:ad:00:29:01:bd:82:4d:15:a8:
66:5f:20:eb:33:50:d6:02:5f:5e:f0:38:ab:40:72:
f6:90:94:48:97:fc:70:a3:57:f8:50:53:f9:0d:c4:
08:4d:2b:2d:25:73:8c:e1:15:a5:6f:23:4c:7d:53:
1a:27:94:5b:2c:c5:ef:90:85:0f:5f:8e:e0:68:5f:
2f:20:4f:76:b8:b9:8f:40:59:97:c8:d9:da:19:f2:
2e:c6:08:16:ee:d1:bf:21:e5:4a:12:26:1c:47:aa:
a5:9d:87:62:b0:74:22:aa:2b:a9:da:c1:ac:d2:fd:
70:10:12:50:36:a6:d5:be:25:15:60:f9:53:10:90:
ef:0a:a8:8e:56:1f:98:f3:5d:4a:e9:1e:e1:78:48:
13:30:63:cd:11:38:7d:94:34:51:4f:90:21:f6:59:
d6:93:13:4b:34:2d:c4:94:1a:ef:0f:05:f5:51:28:
5c:24:26:25:d4:91:93:bb:1e:06:8d:f9:9b:da:a2:
24:ec:25:fc:47:74:a3:79:22:89:09:eb:24:df:3b:
c4:54:c2:e3:a3:95:e3:f3:9d:ce:b5:f1:37:96:81:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:BD:47:DD:4B:D3:3E:A6:5E:A4:26:3F:CF:F5:3D:3F:28:46:D1
X509v3 Authority Key Identifier:
keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:c28::/32
Signature Algorithm: sha256WithRSAEncryption
70:c2:46:9b:20:3c:0c:ba:7e:2f:77:5d:49:86:50:57:a8:29:
9c:7c:de:5d:3f:e1:87:70:d1:eb:15:17:24:68:4b:c7:f0:e7:
b4:1d:45:54:64:86:9b:54:14:86:fc:a4:8c:9e:a5:f2:a4:cc:
ff:e6:70:d8:40:57:a3:ab:8a:ef:de:8b:80:43:ed:f3:fd:a4:
76:b1:a3:0e:1a:67:b4:ce:36:42:a2:cd:fb:82:50:d2:06:6f:
7a:7d:b6:ec:a1:33:5c:d1:eb:7a:d7:fa:1d:b4:82:1c:03:18:
e3:ba:ee:6a:aa:b1:06:e7:cf:cf:f6:85:14:4d:26:cd:d3:6a:
37:8a:b6:c2:59:35:70:14:92:7d:e2:aa:2c:fa:db:e4:d1:c4:
88:2b:21:b0:1d:f2:fc:be:2c:c4:a8:ba:55:c4:e8:f4:66:5a:
cf:26:37:69:e5:e5:5c:a7:32:7b:66:c4:e7:11:5d:6f:c2:eb:
40:4c:40:d5:db:bd:c9:6d:41:93:b0:15:89:85:a8:f9:90:8e:
7e:21:33:38:03:9d:a6:2d:5a:17:82:27:fd:91:65:5e:5c:a5:
06:e2:6a:ab:fe:42:58:bc:bd:7e:72:d8:7e:3a:6d:20:4b:eb:
1f:37:89:77:d1:27:a1:0c:44:55:64:06:aa:04:c7:62:03:73:
2f:28:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:34:19 2025 by rpki-client