
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
File: opmYDIxN--IeoPkwkk3WNJ8Zj20.roa (raw, json)
Hash identifier: d4mTgAC4k8ZGIefSzgSUVhlDxevCG4dEwHaquIkdtA0=
Subject key identifier: A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 0E
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
Signing time: Thu 03 Jul 2025 03:30:35 +0000
ROA not before: Thu 03 Jul 2025 03:30:35 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 146979
IP address blocks: 2001:cd0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Jul 3 03:30:35 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=A299980C8C4DFBE21EA0F930924DD6349F198F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:39:34:fd:92:3a:5f:b6:88:ba:5a:c7:40:
f5:e6:ff:9f:6d:76:3e:ac:3d:b4:9d:09:3a:5a:2f:
6d:de:08:d0:7a:65:bb:67:d8:1f:43:6a:2e:ac:cd:
c2:bd:7e:99:2b:a9:55:7c:fb:44:06:31:15:85:46:
28:7d:1e:2c:96:d5:97:0f:b8:1f:a9:4a:05:d6:fc:
5f:cd:72:09:44:84:43:13:26:ec:38:5f:36:d7:93:
77:3f:6d:5e:2b:fb:54:d8:bc:a3:80:f8:3c:07:7b:
17:57:d3:91:0d:3c:1a:1e:83:7e:c5:df:b1:a2:9a:
63:05:15:a5:ca:2c:7f:f1:58:82:c3:5c:7b:a7:5f:
6e:a4:f2:45:6e:7d:63:aa:71:b7:80:18:3f:e3:5a:
16:81:f1:04:a9:39:b1:78:e4:f3:47:c0:17:69:ef:
c2:32:39:ff:64:9b:8d:f3:88:8c:38:56:31:2d:f2:
d1:31:5c:64:35:19:d9:96:04:8a:60:2c:92:85:e8:
74:b2:45:8e:d5:4a:6d:2e:be:61:da:24:6e:fe:a6:
8a:60:eb:90:55:4f:d5:eb:73:a4:20:05:c4:3f:22:
3a:64:7c:b1:66:f2:a5:bf:d1:b3:3d:6f:99:07:f4:
2d:76:7e:28:01:83:ab:87:90:b6:53:99:a3:60:b7:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cd0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:fa:59:0a:4d:84:a0:52:c6:13:31:21:0b:cd:c5:44:e2:b4:
28:71:b0:9a:32:b5:42:e0:db:f9:c9:4e:14:0c:d3:a8:60:3d:
d7:6a:47:68:69:a5:f8:4b:1c:17:c5:24:7c:47:f7:5c:b9:a4:
3f:13:bd:c6:8e:7b:03:54:ab:1b:f7:31:97:b5:3e:f2:7b:58:
45:70:44:9b:93:5f:9e:2b:75:d3:d4:0b:a7:f3:d4:d0:61:80:
9e:96:b1:30:f5:d1:f4:4c:c1:50:5d:0d:ee:dc:2a:4c:69:0e:
33:16:37:3a:6e:fa:9a:24:30:2a:df:32:eb:5a:e5:37:ae:d1:
c1:6d:0b:63:49:24:13:84:99:42:19:93:54:52:eb:84:da:bd:
5b:09:c1:bc:43:9d:bd:48:6f:ba:33:0a:06:fc:50:1b:e5:8b:
d4:84:4d:ae:8b:d0:0b:38:2b:be:9c:3e:53:94:53:cd:a6:c6:
98:28:10:42:d1:9b:ae:cb:fc:19:5a:db:f6:fc:3b:32:bb:fc:
17:d1:8b:b8:f0:85:12:a3:ed:cb:1d:5a:8d:21:53:9d:62:10:
c8:60:44:6c:6d:c8:a6:97:a5:9e:df:32:75:28:5f:99:11:32:
9f:ef:dc:0c:31:5b:f3:24:54:11:30:29:7b:72:03:d6:07:9b:
68:04:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:41 2025 by rpki-client