
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
File: aqicje0PPm_bBvL43LuK2AAbUpk.roa (raw, json)
Hash identifier: 18sUHWpVD/Bg5tvuCCuNGQXI5q5YoC20iXhicEnSwts=
Subject key identifier: 6A:A8:9C:8D:ED:0F:3E:6F:DB:06:F2:F8:DC:BB:8A:D8:00:1B:52:99
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03DE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
Signing time: Tue 01 Apr 2025 01:28:58 +0000
ROA not before: Tue 01 Apr 2025 01:28:58 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:3700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:28:58 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=6AA89C8DED0F3E6FDB06F2F8DCBB8AD8001B5299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:b1:a9:36:fc:97:95:6a:d5:d3:f9:70:66:
88:43:6a:c9:21:78:55:1c:25:53:fe:b7:5d:64:d4:
14:43:4c:9a:e1:01:3d:47:7e:d5:48:c1:66:d7:29:
a7:aa:2b:f2:b0:e7:51:f3:10:f2:21:8d:1e:d0:47:
35:e6:08:bb:aa:1a:8b:7b:e6:74:26:75:e4:c9:52:
4f:be:66:1c:f1:aa:d3:d7:2f:8c:62:42:ea:b8:d6:
c4:85:d2:13:0c:cf:70:44:2d:bc:cd:e7:b2:6f:ee:
bb:62:0e:bf:0b:63:e3:70:de:8d:fe:35:99:db:b2:
40:1b:0a:b7:be:2f:a8:cd:b0:fd:b0:1b:0c:bf:7e:
3c:c4:ab:fd:cf:14:4b:cf:6e:2d:3f:2b:21:80:31:
e7:1d:3a:5f:0e:6a:8e:b9:66:13:d9:5e:7d:5c:d9:
38:8e:c9:63:56:aa:a5:09:3e:9a:cf:5c:8d:b7:02:
83:3f:53:39:c3:35:6b:ab:5b:0f:ff:5c:44:fa:6e:
cc:ad:52:ca:dc:fd:1e:38:a6:7b:b7:21:af:3f:0a:
0b:d3:e6:cd:eb:fd:95:88:62:11:b4:4c:1c:78:d6:
e2:c7:3c:68:63:d8:ee:f3:53:d5:17:d3:3f:19:57:
ce:75:d4:87:fb:ee:9b:1f:e0:af:93:a2:2c:c2:b4:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:9C:8D:ED:0F:3E:6F:DB:06:F2:F8:DC:BB:8A:D8:00:1B:52:99
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3700::/40
Signature Algorithm: sha256WithRSAEncryption
b2:0b:0c:ed:34:6e:d9:2d:f6:37:4d:e3:e5:5a:0c:c7:0d:ad:
9f:de:bd:c1:61:94:22:e9:b5:c3:45:01:6a:83:61:b1:9a:f0:
e3:49:e9:e1:3c:79:df:f3:48:f1:03:3c:a4:77:87:eb:e7:21:
d6:6c:d2:84:df:dd:d0:a5:b2:fd:e4:ec:e6:c6:61:ea:5f:51:
55:54:cd:fb:eb:b9:42:50:c5:bd:86:de:73:7f:10:ba:08:94:
2b:80:0c:5f:52:89:26:45:b6:16:91:19:8f:8a:9a:50:5c:68:
d1:de:61:1f:1c:2e:95:8f:22:73:c1:42:38:57:79:60:e5:ff:
05:0b:af:17:67:92:82:09:05:a5:ff:73:82:27:ef:56:72:82:
19:55:a2:ec:1d:66:fd:74:6d:df:ef:c8:dc:2a:7b:39:ff:d6:
4b:57:6b:95:bb:5c:76:b1:7e:7a:87:5a:a2:39:85:98:58:71:
a9:57:91:00:fd:15:65:c6:89:8a:a7:47:59:6f:c7:15:eb:4d:
f3:42:90:e3:a8:b9:c4:da:43:d2:60:1a:34:29:c4:cf:e4:8a:
a8:98:1a:fc:97:74:6c:4a:3c:86:92:c4:47:21:d1:a9:c4:9f:
11:0d:bb:4f:15:6f:a1:e9:35:a9:1b:cc:c6:7d:85:a3:79:d9:
92:35:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:59:23 2025 by rpki-client