
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa
File: GSwZyruZNekLCwi8YUz48MW1TYE.roa (raw, json)
Hash identifier: Q+WVgMNIArLHewuPkC5zYZ4jRZNi9Lfi/vSfkwKh69Y=
Subject key identifier: 19:2C:19:CA:BB:99:35:E9:0B:0B:08:BC:61:4C:F8:F0:C5:B5:4D:81
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04F8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa
Signing time: Sun 01 Jun 2025 01:30:47 +0000
ROA not before: Sun 01 Jun 2025 01:30:47 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 240a:61:7800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 1 01:30:47 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=192C19CABB9935E90B0B08BC614CF8F0C5B54D81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:b9:ae:14:75:d8:7c:df:12:38:4e:7d:42:
64:c2:7f:92:ba:c9:1f:f5:02:62:e3:09:3d:0b:47:
97:7c:29:4b:3d:62:9f:28:89:bc:0c:dd:c6:f2:41:
58:6b:0c:cc:35:be:98:d9:3b:1f:dc:42:91:b4:3c:
d7:a4:82:e5:3e:31:ed:9d:8b:a4:d6:1b:48:c8:7c:
18:72:b9:8c:8c:52:b4:c7:fb:fa:73:5b:e0:1d:6b:
07:dc:ae:4a:2a:3c:12:f3:6e:97:6e:3b:65:82:a6:
ea:0a:5f:50:25:66:f2:9b:24:0b:7d:eb:c3:ab:64:
a9:60:87:e7:3a:68:aa:3d:05:cf:98:e0:fc:87:e3:
d8:fd:ce:1c:d8:2f:77:ad:0a:c2:3d:e0:86:e8:5f:
a7:0c:ab:51:6d:f8:16:af:d5:68:a3:c6:58:41:f6:
97:b6:d5:82:c0:06:8f:ff:fa:5e:a4:ac:c8:05:79:
e0:74:22:97:66:91:f8:c1:6f:b0:78:cc:58:c6:20:
2b:62:89:e2:fb:ee:1a:32:f4:cf:cc:55:0c:63:ca:
fb:fb:48:b1:49:15:89:81:ae:26:23:d2:d3:db:51:
38:cc:a9:d1:9e:3a:ad:d2:be:51:b5:bc:7b:b7:a4:
8b:24:b7:95:49:7a:9a:dc:42:a4:67:63:10:a3:89:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:19:CA:BB:99:35:E9:0B:0B:08:BC:61:4C:F8:F0:C5:B5:4D:81
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GSwZyruZNekLCwi8YUz48MW1TYE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:7800::/38
Signature Algorithm: sha256WithRSAEncryption
a2:c8:7f:07:3e:e2:c5:9a:9d:72:b3:3c:3d:2c:98:94:f1:1e:
b4:55:9b:38:a5:ec:88:be:68:c6:e7:7b:ba:ec:70:35:f6:5f:
fa:fa:c4:97:8c:20:55:a6:82:23:67:fb:c4:0c:3d:ec:86:84:
95:29:50:fb:5a:24:97:32:24:4f:79:ae:2d:e6:64:84:ab:02:
b7:84:ca:e5:9a:45:dc:e1:20:8a:84:91:03:4b:94:0b:f7:58:
68:23:d9:b1:4b:31:0f:7b:04:c6:78:7b:09:6a:31:69:ad:1a:
a1:58:42:20:04:cb:e4:94:1c:a8:75:a5:23:f3:7d:70:64:25:
7a:26:7e:bf:d0:a2:69:c7:04:38:5c:89:49:ca:93:a6:d4:55:
82:55:5b:bf:b5:df:75:57:6f:c2:fb:15:23:73:06:97:5d:c7:
2b:68:95:30:89:69:9e:f6:87:18:84:89:8c:65:d8:e9:0f:b1:
54:b6:2c:cf:0d:cd:b9:14:84:8a:f7:0c:a1:53:6d:f9:b4:dc:
f8:7d:b0:9f:e7:1e:09:9e:a2:61:b2:ec:b6:ff:0d:a2:60:d0:
f9:3f:5f:48:24:a0:62:90:16:e9:4b:b7:fe:64:e7:ba:03:d1:
90:ff:83:6c:bd:b5:44:1c:26:d7:be:a6:a3:ac:24:76:a1:81:
73:0f:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:10:46 2025 by rpki-client