
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
File: jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa (raw, json)
Hash identifier: Ayeq7pm0DhPrDChyc57XtijhExMMpul71yfcyFlBFd8=
Subject key identifier: 8E:06:15:95:46:FE:69:82:78:A5:7C:2A:DA:85:BC:B8:0F:6B:7E:60
Certificate issuer: /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial: 03
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
Signing time: Tue 22 Apr 2025 01:42:03 +0000
ROA not before: Tue 22 Apr 2025 01:42:03 +0000
ROA not after: Wed 22 Apr 2026 01:29:23 +0000
asID: 55895
IP address blocks: 2400:e000:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Validity
Not Before: Apr 22 01:42:03 2025 GMT
Not After : Apr 22 01:29:23 2026 GMT
Subject: CN=8E06159546FE698278A57C2ADA85BCB80F6B7E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9a:d1:c0:55:a8:a1:10:9c:8c:ba:a2:a4:19:
4f:f3:12:e1:8b:01:40:60:e6:5e:8d:ae:84:20:fb:
1b:7b:f2:f8:45:95:04:47:87:dc:0c:7f:9c:16:45:
8e:39:bd:88:56:30:f0:ae:62:88:39:50:59:39:c0:
2e:00:14:c1:44:b6:31:1d:5d:a8:0f:0c:33:a7:59:
a7:21:43:24:76:cb:f1:f3:78:b1:ed:1f:a0:3d:34:
bf:10:cf:49:10:51:56:c0:fb:b6:e1:07:98:58:a3:
99:54:a0:69:82:bc:66:37:02:26:36:3e:ec:b7:9f:
ab:3f:bc:38:76:74:a6:b1:00:2e:fd:0e:2e:02:43:
8b:1d:f9:40:4c:b4:b6:c6:cb:7b:38:80:3c:e7:af:
2e:45:06:a9:73:bb:d9:24:a4:f9:61:d5:50:ec:88:
75:99:67:cf:eb:a7:2a:f0:89:e4:da:2c:f1:f5:3b:
33:28:25:4d:b3:26:66:0a:55:cf:0e:b3:97:6d:7e:
bd:3a:f3:1b:3d:cf:25:19:a7:89:ac:32:70:4c:22:
4d:1b:09:c6:78:8d:2f:f8:8b:10:22:b6:16:3f:d9:
04:11:50:d0:07:43:9f:b2:f0:b7:56:9d:b0:cb:51:
9b:21:44:ae:36:58:6e:38:48:c0:07:c4:68:8a:d1:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:15:95:46:FE:69:82:78:A5:7C:2A:DA:85:BC:B8:0F:6B:7E:60
X509v3 Authority Key Identifier:
keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e000:105::/48
Signature Algorithm: sha256WithRSAEncryption
4b:63:37:f7:35:d9:7c:b4:3c:4b:29:d3:77:a5:e4:e1:63:26:
31:22:ab:4a:cb:c7:5a:49:9d:48:41:fc:09:75:a4:95:79:0d:
7f:6d:b3:f8:cb:86:cf:e4:3f:e9:27:df:1a:12:c6:c2:b8:86:
a8:93:a6:2b:ff:7d:1d:3e:f3:d4:f3:79:86:e0:99:e3:bd:92:
be:9e:89:53:1f:7a:90:60:c6:06:a2:85:95:06:ca:32:62:ae:
68:c9:45:07:7f:38:81:16:48:12:c0:f6:4c:77:da:2d:79:2f:
83:75:69:39:0c:b5:ef:cf:d4:b5:dd:54:83:5b:62:b3:4b:0a:
74:33:84:a6:2d:9c:a7:09:6d:71:87:9a:de:0c:69:ca:23:f5:
f2:75:5c:f1:35:ae:c9:9e:bc:34:93:6d:45:20:d6:ed:d5:9f:
7e:f4:82:6d:c2:9f:1c:38:98:bc:27:ac:71:ea:9c:ca:49:0d:
f1:f5:96:c1:50:50:ea:15:a2:8c:d0:b3:c7:56:93:00:ab:49:
7a:5f:88:45:92:be:eb:0d:29:db:d7:24:38:91:c1:c5:6c:a5:
1e:7e:9f:e0:74:0c:3a:47:c4:07:43:f3:d9:3f:06:cf:6b:99:
c3:60:e6:84:24:09:41:51:6a:f0:32:ba:de:c5:8e:76:ef:82:
5d:de:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:31:19 2025 by rpki-client