
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
File: IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa (raw, json)
Hash identifier: wbwIEO/Jz5M/nAtR9EekKIapio7VEIYEOOL+6vKx+yE=
Subject key identifier: 20:EA:C2:05:E6:0E:D5:D3:F8:C6:F2:DA:C3:43:B5:23:71:3E:1D:73
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0466
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
Signing time: Tue 01 Apr 2025 01:42:31 +0000
ROA not before: Tue 01 Apr 2025 01:42:31 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:9f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:42:31 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=20EAC205E60ED5D3F8C6F2DAC343B523713E1D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:30:4d:28:bb:fb:72:9f:69:7b:5b:1b:d7:
27:4c:f4:9a:bb:fd:eb:b8:dc:a5:92:35:fb:0a:72:
c9:de:72:15:9a:9a:85:c4:e5:ff:f4:66:1d:c3:76:
db:49:95:ff:ca:74:40:24:08:24:6e:2c:19:7f:27:
d9:d8:b7:e4:a1:88:b0:e2:a7:a4:51:1b:fb:b8:d7:
43:4d:65:86:d7:00:d6:ae:ae:13:5f:10:c0:07:2e:
fb:23:d1:a1:93:94:b1:0b:c8:c5:7c:86:90:6c:7b:
ec:75:2e:c4:78:3f:fb:a8:11:19:50:5e:e8:d3:3f:
8e:89:ee:45:e0:91:8c:59:3c:98:9e:78:63:27:ba:
24:0e:10:42:cf:b1:78:b2:22:07:53:38:90:77:ca:
08:fe:44:c3:97:2d:77:f7:2d:6c:81:7e:4c:94:fd:
c7:4a:f8:34:a1:9d:df:ee:b2:73:55:69:d3:b2:82:
30:3b:e6:e4:61:64:c8:9d:aa:14:1f:12:7b:09:ed:
d5:87:be:e5:95:e3:56:1a:83:3d:53:6e:39:09:0c:
93:df:3e:b6:d2:6b:ee:d9:b9:b4:c1:3d:6d:7a:08:
6d:eb:4c:e2:8f:74:c4:56:9f:34:fa:65:72:8e:99:
38:f8:dc:fe:ab:e7:d4:9d:29:e2:1c:74:53:16:e8:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:C2:05:E6:0E:D5:D3:F8:C6:F2:DA:C3:43:B5:23:71:3E:1D:73
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
ba:e4:1f:d2:df:fe:35:f1:3f:16:fe:42:95:9a:7c:b2:78:7b:
77:ad:97:25:c5:7d:e5:e9:ed:6c:58:e0:0f:f6:8b:fd:e6:23:
81:80:80:07:7c:6b:0f:c2:59:23:51:5d:e6:8b:80:8c:ff:4f:
01:ed:53:39:9b:10:a9:ec:72:10:c7:4e:6c:da:1c:5c:a2:50:
ed:a8:15:28:3c:e2:51:31:7d:ea:c5:a5:6b:8d:48:68:6d:b5:
b8:6d:a4:56:0d:a7:7a:64:4b:4d:24:e4:f4:cd:96:47:4b:a6:
fd:87:3a:51:ca:f5:06:23:08:a9:04:50:d0:4a:54:5f:be:30:
47:5c:7c:ad:2d:9a:57:8d:c4:9c:3a:36:57:7b:82:66:d5:cd:
a2:96:cf:54:b9:c7:2d:88:bb:43:d6:0e:7d:a0:db:75:8f:c6:
d7:b2:9b:66:70:ec:f4:72:90:10:ef:5c:9b:26:47:b5:d9:39:
42:4c:c4:b3:5f:0c:15:a3:f7:0f:e2:ab:fa:ab:34:fb:d5:08:
0d:f3:90:56:24:c5:f1:92:5f:e8:4f:b9:bf:a7:1a:07:39:e4:
1d:37:06:c7:12:4b:7c:28:1f:ed:92:72:39:bc:e8:da:e8:54:
50:71:7f:60:b2:25:93:8e:18:e5:27:80:0e:3c:98:d6:1f:4c:
f4:fd:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:34 2025 by rpki-client