
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
File: bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa (raw, json)
Hash identifier: 9jo+CMavXZQ8vFYsVVb/gzO8wkdpBeWgx8+p3P2Lxgc=
Subject key identifier: 6E:F9:3B:03:52:B1:E2:9A:92:48:7C:07:20:22:8E:BF:A4:15:06:BF
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 05
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
Signing time: Fri 07 Mar 2025 01:05:43 +0000
ROA not before: Fri 07 Mar 2025 01:05:43 +0000
ROA not after: Tue 17 Feb 2026 15:19:37 +0000
asID: 131971
IP address blocks: 2407:9900:4000::/34 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Mar 7 01:05:43 2025 GMT
Not After : Feb 17 15:19:37 2026 GMT
Subject: CN=6EF93B0352B1E29A92487C0720228EBFA41506BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:b0:43:a7:1e:25:10:f1:ea:7c:ce:1e:e2:
98:3f:ac:ee:d2:98:14:57:c2:86:a1:8e:c9:99:b8:
b6:bd:d4:b6:0f:4f:fd:06:42:da:cf:84:f0:e4:18:
23:ba:75:b4:b2:43:1f:c3:2e:7c:cb:eb:5e:b0:72:
60:fa:33:cb:2e:1f:5b:cf:d5:e8:12:55:40:b8:b9:
cf:db:b5:16:d5:dd:3e:2f:f5:37:3d:f0:b9:fd:de:
37:8d:57:e2:5b:9d:cb:2d:db:17:de:16:2a:ee:36:
39:4c:94:b2:85:d5:a8:12:7e:e0:e2:4a:a8:74:d5:
0e:73:1d:bd:e3:e1:ab:74:1c:16:72:39:f6:7e:0a:
39:bb:18:63:32:37:d2:70:d5:79:b7:a3:dd:bd:92:
b7:06:24:23:91:09:4e:31:26:2b:f8:75:ea:fe:7c:
54:ae:b7:1e:4c:2d:fd:01:b8:12:4f:e9:9b:34:79:
d0:fe:bb:8a:19:97:75:b4:64:b6:13:28:44:7b:83:
2a:8c:0b:48:04:a0:e5:12:d8:19:64:f9:ea:bb:10:
43:f2:4a:2c:b8:a4:de:6f:7c:43:5c:81:cf:99:7d:
1b:6c:3f:90:c3:5f:f3:14:13:23:7c:ea:e4:b3:d4:
66:61:83:44:4e:59:81:ca:98:d9:ec:40:a6:b6:01:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:3B:03:52:B1:E2:9A:92:48:7C:07:20:22:8E:BF:A4:15:06:BF
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9900:4000::/34
Signature Algorithm: sha256WithRSAEncryption
70:68:81:70:2f:ee:5a:4c:73:a5:54:4e:f7:f4:9f:72:10:c7:
85:09:bb:bb:4a:02:f5:64:0f:dd:0d:5c:f6:b0:cf:ae:40:31:
fc:63:ba:38:18:67:47:29:c1:21:8d:08:57:63:f6:4c:23:f9:
fa:5d:72:2b:70:75:c4:37:3b:86:c6:34:41:67:10:e8:cf:bb:
a4:fd:52:63:02:36:b0:53:db:32:bc:6c:70:da:30:9a:32:38:
3c:4d:67:50:e2:41:55:4a:46:51:80:80:8d:3c:ff:20:b3:61:
56:5d:ff:90:e2:e4:49:88:0f:9d:7b:f3:78:c5:65:12:4f:b4:
b2:fd:5f:ed:09:95:6e:da:21:20:fa:09:39:ab:33:f4:1f:77:
e7:e9:d5:5c:9e:6b:70:e3:e7:01:ba:8f:26:86:8a:8b:6f:06:
12:5f:82:10:32:f5:42:4d:ae:26:90:c8:e8:d7:1c:61:a5:b0:
60:0b:e2:80:7d:b1:00:88:ce:0b:59:38:aa:66:ec:b1:ce:fd:
1c:c0:e0:5e:6e:0f:8f:80:8d:00:3c:0e:13:1d:68:6d:fc:86:
99:7d:26:fd:43:b4:6c:cb:d5:26:b6:09:f6:af:8a:7b:53:18:
98:28:ee:a9:ea:95:99:de:74:42:7b:4f:9f:27:28:d3:80:d2:
fa:8a:b0:c0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjI5
OTQ4NzlDMjU4MTIzRkZBMDk3RTg0RTA1Mzc1RjYwQTU5MUE1MB4XDTI1MDMwNzAx
MDU0M1oXDTI2MDIxNzE1MTkzN1owMzExMC8GA1UEAxMoNkVGOTNCMDM1MkIxRTI5
QTkyNDg3QzA3MjAyMjhFQkZBNDE1MDZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANc2sEOnHiUQ8ep8zh7imD+s7tKYFFfChqGOyZm4tr3Utg9P/QZC
2s+E8OQYI7p1tLJDH8MufMvrXrByYPozyy4fW8/V6BJVQLi5z9u1FtXdPi/1Nz3w
uf3eN41X4ludyy3bF94WKu42OUyUsoXVqBJ+4OJKqHTVDnMdvePhq3QcFnI59n4K
ObsYYzI30nDVebej3b2StwYkI5EJTjEmK/h16v58VK63Hkwt/QG4Ek/pmzR50P67
ihmXdbRkthMoRHuDKowLSASg5RLYGWT56rsQQ/JKLLik3m98Q1yBz5l9G2w/kMNf
8xQTI3zq5LPUZmGDRE5ZgcqY2exAprYBRXMCAwEAAaOCAiowggImMB0GA1UdDgQW
BBRu+TsDUrHimpJIfAcgIo6/pBUGvzAfBgNVHSMEGDAWgBTSKZSHnCWBI/+gl+hO
BTdfYKWRpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMTMvMGltVWg1d2xnU1Bfb0pmb1RnVTNYMkNsa2FVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMGltVWg1d2xnU1Bfb0pmb1RnVTNY
MkNsa2FVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTEzL2J2azdBMUt4NHBxU1NId0hJQ0tPdjZRVkJyOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYkB5kAQDANBgkqhkiG9w0BAQsFAAOCAQEAcGiBcC/uWkxzpVRO9/Sf
chDHhQm7u0oC9WQP3Q1c9rDPrkAx/GO6OBhnRynBIY0IV2P2TCP5+l1yK3B1xDc7
hsY0QWcQ6M+7pP1SYwI2sFPbMrxscNowmjI4PE1nUOJBVUpGUYCAjTz/ILNhVl3/
kOLkSYgPnXvzeMVlEk+0sv1f7QmVbtohIPoJOasz9B935+nVXJ5rcOPnAbqPJoaK
i28GEl+CEDL1Qk2uJpDI6NccYaWwYAvigH2xAIjOC1k4qmbssc79HMDgXm4Pj4CN
ADwOEx1obfyGmX0m/UO0bMvVJrYJ9q+Ke1MYmCjuqeqVmd50QntPnyco04DS+oqw
wA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:55:34 2025 by rpki-client