
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa
File: -FBCZU4jMyJlpFLTJmwIdrpwkCI.roa (raw, json)
Hash identifier: ve+ZgocBtp33QML0oEqSj/wnluK9I6cgc/oFyG8eNXs=
Subject key identifier: F8:50:42:65:4E:23:33:22:65:A4:52:D3:26:6C:08:76:BA:70:90:22
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 66
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa
Signing time: Fri 31 Jan 2025 01:32:23 +0000
ROA not before: Fri 31 Jan 2025 01:32:23 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9370
IP address blocks: 2001:e47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Jan 31 01:32:23 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=F85042654E23332265A452D3266C0876BA709022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:95:69:e0:c2:26:8f:9f:b4:cc:73:a8:c0:
6f:4c:59:a0:64:88:c7:ae:ab:ed:c9:66:20:5b:28:
01:a4:e4:89:29:4c:e9:7c:d9:08:12:d3:c2:95:61:
07:55:48:d6:5e:1b:cd:c2:d0:f8:7c:4e:a2:be:74:
6c:70:f5:7a:c6:ab:95:b1:6d:98:f7:16:be:23:11:
a0:60:82:07:e3:a6:91:08:0d:14:f9:b2:4c:a3:a2:
c5:85:db:de:3a:a7:94:80:10:3d:c9:6b:62:94:ca:
7b:45:2e:f6:eb:48:3f:bd:40:4e:b0:d4:23:60:83:
6b:35:03:44:9f:da:70:fc:67:54:27:bd:69:2b:a6:
8b:de:b4:af:6d:ef:c7:86:ab:1b:4b:62:67:79:56:
fb:e5:ac:ea:19:18:1e:b0:82:0b:6c:5a:07:30:64:
85:b5:2b:44:63:a8:40:c2:41:dc:dc:6a:86:5a:24:
f9:55:1d:27:4a:1f:54:50:12:84:92:37:5b:62:79:
cb:1d:0c:a3:33:27:e2:4b:78:bd:c9:00:df:01:af:
0b:f3:9c:11:32:db:95:a1:f5:c0:39:cd:f6:f9:82:
27:e8:db:7f:0b:ec:b6:b4:23:46:51:e2:b7:29:f8:
8f:76:f0:48:47:6f:07:9f:95:4c:9c:82:26:f1:c3:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:42:65:4E:23:33:22:65:A4:52:D3:26:6C:08:76:BA:70:90:22
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:e47::/32
Signature Algorithm: sha256WithRSAEncryption
29:33:f8:47:bb:d0:6c:0f:23:b7:46:32:97:f8:6c:f3:df:df:
b0:aa:74:68:06:8e:61:c3:2a:45:e8:a9:f3:11:37:1c:90:70:
6a:21:f5:de:fa:bb:cc:52:96:a0:17:f3:44:37:0d:bc:91:23:
67:35:ce:77:1d:37:9a:f7:d0:43:28:fb:95:24:8a:77:6c:20:
c7:e0:b7:d8:d5:5b:06:68:b9:83:de:e4:52:cb:c8:8d:c6:4b:
05:e4:5b:f8:c7:9b:5f:24:87:e6:51:59:32:db:f7:6b:f7:69:
8f:9d:d7:3d:3a:11:f6:38:0a:b9:31:5f:70:b0:71:c0:56:cc:
8e:92:4e:05:51:a5:d2:ed:2d:c2:fb:40:79:a0:f1:bd:8f:10:
f2:5c:f3:b1:6d:c3:fa:1a:e1:ee:a3:73:54:2f:ae:73:8c:ab:
89:bd:88:42:59:4b:e0:d4:46:f7:7d:0a:b6:0d:94:ae:8c:8a:
96:83:74:c0:d6:24:f9:73:4d:fa:ee:fe:1a:28:64:85:a7:93:
d2:ca:a2:74:19:e8:2a:40:20:ec:5f:4d:a8:41:85:24:62:a0:
2b:be:f5:0f:9f:2a:8d:7b:98:85:71:f1:2c:34:95:97:6a:20:
f1:8d:89:1b:48:98:df:84:5c:a7:b3:1c:67:f7:61:dd:f2:60:
be:61:30:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:49:36 2025 by rpki-client