
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
File: -HXWOByHjv0r2ImzbF-IybXWwbc.roa (raw, json)
Hash identifier: qXld1y4pmOgh7/G3L8LhpTa+NwaXsZRhkI9Pu0LUP34=
Subject key identifier: F8:75:D6:38:1C:87:8E:FD:2B:D8:89:B3:6C:5F:88:C9:B5:D6:C1:B7
Certificate issuer: /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial: 3D
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
Signing time: Tue 01 Jul 2025 01:40:05 +0000
ROA not before: Tue 01 Jul 2025 01:40:05 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 9617
IP address blocks: 2400:3800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Validity
Not Before: Jul 1 01:40:05 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=F875D6381C878EFD2BD889B36C5F88C9B5D6C1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:1a:1d:4a:e9:15:fe:70:f0:26:a6:04:af:
51:b7:18:ba:d1:49:09:53:8c:81:53:bf:0a:91:f1:
2f:d2:f1:f8:39:bc:88:ae:7b:99:2e:4f:b9:7e:33:
15:56:c0:ad:22:3d:0d:ff:4e:9c:2c:65:63:13:ac:
63:44:c2:27:bf:f3:9e:47:2c:e4:18:91:76:56:9f:
d3:86:8c:0f:fe:64:c1:7f:5d:90:30:8e:ea:0c:d1:
8b:5f:f4:b7:b9:e4:e1:53:74:51:a2:9b:0b:c2:ca:
ed:60:bb:19:15:22:03:98:59:81:cb:41:87:3a:e1:
d2:96:1f:cb:4d:8f:f5:c5:e6:02:4a:84:4b:a9:30:
62:c2:3f:83:e6:c1:4c:47:d6:dd:e1:ea:d6:7d:09:
ef:00:54:47:30:a4:cb:42:c5:de:4d:aa:47:e0:27:
23:8f:e9:84:7e:30:8b:0c:b6:18:08:00:cd:0d:ef:
cc:26:4f:a2:de:bb:6a:6d:d8:63:a2:b1:9e:e0:53:
d9:00:fa:7f:29:6a:6a:d3:d3:ce:82:98:94:bb:9b:
6f:2e:4a:13:b8:52:1b:72:6e:75:8a:c6:8c:b3:47:
15:c4:16:d8:2f:a4:b9:b1:ec:38:81:dc:a7:92:2b:
7f:6e:2a:ce:9a:47:90:57:05:9b:c4:dc:52:47:c2:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:D6:38:1C:87:8E:FD:2B:D8:89:B3:6C:5F:88:C9:B5:D6:C1:B7
X509v3 Authority Key Identifier:
keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:3800::/32
Signature Algorithm: sha256WithRSAEncryption
0a:40:4b:73:b9:67:43:32:c0:ec:f3:d3:d8:ab:4e:8b:f0:85:
c8:61:16:80:1e:28:7f:76:67:58:5d:15:f9:92:d7:24:f6:85:
9b:07:4a:76:0e:1c:80:89:a8:43:9e:dc:78:80:8e:aa:6e:21:
99:cd:e1:4b:2f:3c:02:ba:b8:4f:71:f6:7d:25:45:51:7a:de:
52:b2:37:c7:fe:70:7a:e4:ce:6c:18:e2:c5:7c:6c:80:69:19:
88:42:74:46:c4:3b:e6:c0:09:91:09:e1:84:25:7e:83:3f:28:
33:3f:00:b7:c3:70:75:ca:78:a3:f7:27:eb:89:5a:a3:bd:ed:
35:44:47:c7:a1:e4:de:46:79:7f:ba:a7:e9:71:c5:a2:53:b7:
95:98:ec:d7:bc:d7:93:37:b3:70:a5:6d:ec:98:6e:cb:d3:7e:
0b:a5:5d:be:aa:71:bf:0b:a4:37:75:c9:cb:3c:d8:5d:0e:d7:
b7:a0:b8:d6:4b:9c:0c:3d:bc:31:d2:26:56:1e:9f:10:9c:2b:
3f:b5:a2:18:fa:b7:71:a2:da:dd:f0:99:c9:db:65:e3:95:b8:
0f:8c:3f:33:1d:7a:5d:39:9f:36:0c:fe:8b:a5:cb:f7:b5:88:
24:ae:32:47:11:24:ee:f0:af:96:a3:2f:72:62:43:af:8e:f3:
9b:3e:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:16:07 2025 by rpki-client