
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa
File: gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa (raw, json)
Hash identifier: If3nJbXIvk0epzW/oyHQv9q1CExO78Wxs1pXlsWxkY0=
Subject key identifier: 80:BE:5C:23:8B:E6:37:30:D0:42:0C:D7:0E:99:0F:94:88:56:30:E2
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03BB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa
Signing time: Tue 31 Dec 2024 01:31:44 +0000
ROA not before: Tue 31 Dec 2024 01:31:44 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 9605
IP address blocks: 240a:61:5c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Dec 31 01:31:44 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=80BE5C238BE63730D0420CD70E990F94885630E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:9a:dc:af:9b:85:e0:bf:e4:c3:f2:94:d9:
17:df:0c:ae:ea:31:cf:f4:4c:26:38:08:79:d9:7d:
24:5e:b2:7e:e7:04:ff:e1:28:a9:92:57:6a:13:36:
d4:27:05:e7:31:4d:d0:85:9f:d1:52:3c:a8:df:b1:
76:4a:a6:17:ae:c9:70:33:68:c9:9e:03:cc:6d:0c:
27:79:81:68:49:09:7e:85:72:c3:f1:ad:46:31:08:
31:b3:74:a6:a0:da:88:32:2c:5c:b1:89:0b:31:59:
d6:9e:cc:2c:71:54:ed:7e:ac:60:c6:4d:88:a1:32:
0d:c4:f3:ab:b4:8d:31:cc:50:13:69:e1:d0:de:41:
e9:8c:6a:91:6e:bc:4a:a5:4a:3d:cd:54:60:d0:9f:
3c:cf:e3:bb:6c:6c:52:a0:0d:83:bd:a9:cc:2f:cb:
df:9a:9f:b8:e7:59:95:c2:b8:92:06:da:ee:f7:c7:
48:a2:d6:3f:39:d7:14:4d:65:a8:ef:5b:df:45:3f:
00:a7:d4:82:e8:b9:b8:20:3b:94:f7:d0:d3:ac:e5:
3f:2d:42:e4:ca:ab:98:66:4d:78:9f:6e:47:af:02:
14:8b:1c:38:ee:cc:24:e8:7a:c3:0f:64:e3:fc:d6:
8e:42:ff:bc:e2:a7:df:92:cf:27:87:32:06:d4:a1:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:5C:23:8B:E6:37:30:D0:42:0C:D7:0E:99:0F:94:88:56:30:E2
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gL5cI4vmNzDQQgzXDpkPlIhWMOI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:5c00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:15:64:6e:89:eb:8f:ce:53:a5:4c:72:65:09:e9:81:82:79:
a6:aa:0a:25:38:9b:91:cd:99:a5:96:45:40:ef:10:4c:a6:4f:
40:7f:c3:39:86:29:59:dc:ef:53:6f:3d:a8:59:7b:f5:d4:a2:
48:25:60:d0:5a:44:25:af:10:18:85:66:9e:a9:30:79:f8:2f:
e8:96:58:da:c9:9b:e6:0e:65:e6:a5:a3:63:78:46:61:3f:08:
db:d4:92:f8:aa:5a:db:b0:41:ad:9f:a7:6e:52:d7:99:14:97:
c1:87:ca:dc:64:8b:4d:bf:b7:68:c5:88:13:33:41:32:ec:a0:
17:e9:5c:ba:46:a9:e4:e1:bc:72:6e:dc:ac:6a:91:0e:39:6c:
64:6c:ce:a1:05:ed:41:e6:53:7d:a6:6c:57:22:2f:05:92:36:
bb:b0:27:ad:89:a4:ce:b2:dd:22:4a:4f:2a:8c:60:f8:6f:ce:
72:7f:a8:f4:c1:22:6c:c7:f0:c9:02:79:95:f5:65:10:9d:b5:
9f:72:d0:35:f7:d4:12:dd:d4:a6:cd:84:fb:05:95:df:1f:15:
50:66:76:53:d9:a2:a4:3c:d3:db:cb:d3:fa:99:07:57:2b:c8:
35:d2:78:1b:13:c6:59:84:3c:e4:46:1e:76:08:2e:23:31:20:
c3:07:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:25 2025 by rpki-client