
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
File: AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa (raw, json)
Hash identifier: brUfuLBv+I6t3IGqnfxhluj1hnpLMZxuaHOEdE1OdAg=
Subject key identifier: 01:97:98:12:46:76:10:98:9C:95:FD:73:2E:36:EC:C2:92:D6:EE:14
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04FD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
Signing time: Sun 01 Jun 2025 01:30:50 +0000
ROA not before: Sun 01 Jun 2025 01:30:50 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 240a:61:8c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 1 01:30:50 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=01979812467610989C95FD732E36ECC292D6EE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:97:cd:29:5a:7b:93:c4:a7:d3:ad:d2:9d:
f7:2b:38:97:c8:d8:bc:b2:17:e2:da:1d:00:9f:92:
69:0a:18:e6:48:89:10:c2:bd:f5:c9:31:57:48:2d:
86:0f:3a:46:56:1e:de:a8:ee:cf:0c:dd:f2:4e:47:
f5:e0:44:e6:42:0e:2c:a4:6d:46:d5:af:36:96:91:
af:8d:e3:6b:c5:60:2a:fb:ca:6a:98:37:d4:a3:6d:
fd:22:eb:e8:3e:a6:4f:f8:42:a1:3e:e9:55:63:cf:
e2:2f:1d:14:8e:16:56:db:f3:22:d8:85:29:44:d7:
8f:58:9a:bd:3f:72:28:50:f7:78:62:f7:9d:3a:ec:
8e:43:6d:8d:bf:2c:db:c8:b4:be:61:32:0b:99:2a:
dd:0e:26:46:97:ef:50:9a:8c:a0:f7:06:b5:55:d6:
31:0d:c2:df:6f:b5:2f:36:a5:d4:49:34:c2:0d:60:
3e:4c:23:0c:28:11:b2:ad:47:2d:9d:28:02:6c:36:
a1:b7:14:99:82:b0:ea:7a:8a:25:25:5f:81:9e:84:
5a:53:80:c8:26:6a:ca:94:ea:86:40:ed:42:8f:e3:
91:50:f9:9f:a3:e1:11:f8:3e:f1:c2:91:06:2a:d7:
7f:22:b5:88:ac:d5:33:25:32:5d:79:66:32:ab:6a:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:98:12:46:76:10:98:9C:95:FD:73:2E:36:EC:C2:92:D6:EE:14
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:8c00::/40
Signature Algorithm: sha256WithRSAEncryption
2d:86:61:4d:9b:cb:68:fc:48:98:fb:9b:38:00:16:3a:f1:16:
fe:24:f9:2a:b4:12:cd:6b:3f:b6:00:19:3d:50:61:14:ca:c0:
01:24:9f:a8:74:d6:36:10:35:a6:ea:05:20:7f:22:ee:da:3b:
9a:dc:a1:b7:65:10:20:b5:1a:e9:34:1b:87:93:58:18:fa:71:
b0:9e:ab:1c:a6:ff:9d:a2:4e:f3:b8:e7:3f:39:41:dd:14:94:
d0:44:7c:66:73:5f:b2:d1:bf:8c:42:5a:1b:aa:6d:0b:88:2c:
86:61:08:29:13:65:c6:c3:8f:fb:87:7c:40:75:4e:52:14:7c:
0d:a4:43:2f:ae:b0:1a:b5:42:53:37:50:c5:d9:96:de:23:1a:
50:b1:13:c4:58:d4:ac:4a:93:85:30:6b:73:a9:20:d0:c8:de:
a3:07:d7:f4:21:b2:32:8a:29:52:a4:8a:ab:19:9b:b6:81:58:
f7:9f:43:9b:1b:08:64:88:cb:d0:c7:14:24:49:ff:00:b1:01:
dd:a3:b6:ff:80:1f:f8:bf:25:ce:ae:ed:00:ac:58:08:9f:d4:
88:d0:ad:7c:e3:40:b3:04:aa:f6:35:2a:d6:53:1b:8a:e8:aa:
28:18:a7:95:3e:77:cf:91:a5:0d:4e:4e:16:72:77:e8:3d:91:
7a:37:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:31 2025 by rpki-client