
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
File: 2SbOEigCPAPgd6w-C5Nj_4JACas.roa (raw, json)
Hash identifier: EAtB9Uwr7xpFP4r2nio2dU2blhqLUq2nj91GkvdUUrE=
Subject key identifier: D9:26:CE:12:28:02:3C:03:E0:77:AC:3E:0B:93:63:FF:82:40:09:AB
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
Signing time: Tue 01 Apr 2025 01:55:48 +0000
ROA not before: Tue 01 Apr 2025 01:55:48 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:7f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:55:48 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=D926CE1228023C03E077AC3E0B9363FF824009AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:ba:5f:07:2f:d8:8b:0a:24:c6:fc:5f:4c:
80:d0:f8:18:ff:7a:56:57:be:8d:bf:7b:a1:0e:e2:
4c:31:cf:5c:18:d2:a5:42:bb:37:dc:a9:f2:59:92:
b2:2e:11:a1:63:c9:4b:58:1a:b8:23:e0:d4:cc:93:
b8:0e:c0:34:43:eb:61:c0:2d:82:97:5d:6e:b0:ab:
d0:77:06:64:a5:81:15:e9:b6:3c:35:a1:3d:da:9c:
85:88:38:67:dc:8c:e1:9d:c1:7a:c0:34:4c:62:d1:
42:2f:fe:16:a2:39:80:57:88:39:93:a8:6d:10:f8:
55:53:76:58:e2:52:f2:4c:f4:be:2a:34:54:b7:36:
be:d7:36:58:c3:96:13:fa:c0:38:6b:ca:c7:45:43:
35:ad:ac:b5:c5:e0:9e:2a:ee:dc:68:71:6b:3b:8d:
8e:af:d3:b5:4e:27:92:46:14:02:e5:da:c0:24:c4:
18:bb:47:8c:cc:e8:76:17:f1:3e:6d:12:76:b9:1b:
88:18:65:3b:5a:58:a3:14:09:74:bd:96:e6:3a:73:
92:82:11:30:77:9c:61:eb:2f:e8:7b:6f:e5:ac:06:
78:fb:31:ee:75:ca:ed:f2:fd:21:8c:e9:9c:41:03:
f0:c6:ad:3f:c4:a1:40:51:9d:65:60:2d:16:2e:90:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:CE:12:28:02:3C:03:E0:77:AC:3E:0B:93:63:FF:82:40:09:AB
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7f00::/40
Signature Algorithm: sha256WithRSAEncryption
06:99:38:42:a9:2b:b8:7b:1a:5e:12:5b:86:8b:1a:51:c0:10:
e9:c4:c3:8f:ca:b2:a4:ce:ed:86:a0:e3:d6:85:70:b1:78:e9:
20:1d:52:ae:99:fe:88:c3:a8:60:9d:d8:2f:ca:24:d9:3b:7a:
83:51:0e:5e:5d:0f:bb:ec:97:0c:f6:78:c6:72:61:15:8f:59:
a0:6c:69:e3:28:7f:d6:e7:cf:ab:d9:e2:b6:42:d9:25:0a:99:
18:c7:4b:bf:e2:60:63:43:d4:fd:e1:07:19:60:19:64:2f:58:
89:c6:95:ef:c3:0a:57:94:0d:bf:e4:32:74:29:4f:d8:b4:50:
ca:c2:ac:de:a0:24:a8:82:6e:ff:01:5a:e6:9f:f6:e2:3d:ec:
cf:5f:bb:4d:6a:f4:3f:ab:79:52:ea:46:3b:c1:1a:e6:14:18:
ca:60:20:41:55:b4:a5:a9:b6:2f:91:56:1e:06:d1:31:67:48:
f9:ce:8c:17:f0:c9:24:49:cb:d6:80:e4:8b:c4:d5:87:cf:c4:
54:94:10:33:64:cc:12:6f:99:ad:41:4c:fa:f1:9b:98:f1:d3:
e3:b6:aa:2a:fc:3b:78:bf:c7:26:74:03:70:b5:20:a3:e4:dc:
35:d2:74:2f:81:a7:1a:e0:88:55:85:04:7c:c8:88:60:10:90:
67:30:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:25:27 2025 by rpki-client