
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa
File: ibCcZEuJr53xGMPo_b1ct2A-5R0.roa (raw, json)
Hash identifier: 0XXOiQHH6W5V6mjBeoYryRT144IVbQyFLexB9I1QO9Y=
Subject key identifier: 89:B0:9C:64:4B:89:AF:9D:F1:18:C3:E8:FD:BD:5C:B7:60:3E:E5:1D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04C0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa
Signing time: Tue 01 Apr 2025 01:52:52 +0000
ROA not before: Tue 01 Apr 2025 01:52:52 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:52:52 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=89B09C644B89AF9DF118C3E8FDBD5CB7603EE51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:87:cb:d9:a7:34:c3:a9:1d:dd:3f:93:83:
9a:11:11:2b:64:18:04:e4:d4:58:6f:fb:5f:b5:fe:
0c:c9:4d:91:35:53:11:cb:cf:e5:d1:8a:c6:94:98:
23:2b:5e:50:c0:c7:fe:cb:65:94:db:e9:0a:a2:40:
55:b2:81:61:a5:b9:aa:35:e3:5c:7f:a9:3f:69:27:
0c:19:ba:aa:cf:a7:a7:8a:54:58:5b:fc:9b:24:f4:
30:3e:b2:ea:48:15:da:ae:66:c1:aa:79:e7:d1:69:
3d:da:e5:78:b2:67:97:b3:72:2a:f1:dc:9a:a0:45:
1a:a0:40:f7:06:bc:2b:08:9a:79:c1:53:15:56:cf:
bf:b5:69:07:64:c0:74:71:21:84:c4:bf:b7:3d:eb:
58:18:bd:69:06:e6:db:8c:ed:ff:4c:19:9f:5f:83:
f8:fd:3c:44:fc:4a:1b:79:e5:0a:ec:a6:d6:c6:6d:
81:18:27:4e:47:4c:d1:f3:45:32:0a:89:00:25:a1:
db:48:a8:36:ce:d9:4b:70:bf:a3:ca:ab:1b:3a:95:
30:b4:cf:17:7c:a2:ae:84:cc:b8:8a:ab:49:41:4a:
85:f8:11:ec:cb:b0:72:a8:5e:a6:80:3d:20:4f:7f:
a0:a4:2c:71:0a:f7:6b:d2:0a:73:4d:9c:95:a1:52:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:9C:64:4B:89:AF:9D:F1:18:C3:E8:FD:BD:5C:B7:60:3E:E5:1D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibCcZEuJr53xGMPo_b1ct2A-5R0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:e00::/40
Signature Algorithm: sha256WithRSAEncryption
bb:cb:76:5f:89:bb:84:73:6e:46:47:74:2e:db:8e:d2:ae:1c:
78:5d:55:63:01:f3:b6:7a:26:69:de:79:d8:73:ad:2b:6b:8f:
67:49:77:c9:22:33:da:ee:80:42:ef:77:db:2a:a9:fa:4b:08:
69:18:e2:51:ff:76:eb:93:ff:28:75:57:28:be:4c:09:fa:30:
e0:a5:f3:a8:50:a2:48:25:56:c0:d3:94:7e:90:22:d0:b1:f9:
04:37:93:36:7d:15:07:86:37:03:06:52:5b:82:b7:cb:85:a3:
29:1c:25:5e:0e:4a:6f:b0:ff:3f:1f:21:ea:21:41:fa:82:59:
2b:8b:5f:ec:ac:91:3b:62:c9:05:b7:d5:7d:e1:a8:90:b9:77:
21:02:27:2b:1a:3a:2e:ec:2e:c9:74:48:65:8d:9e:5b:98:63:
17:35:81:2e:bd:1b:7d:88:fd:b7:7d:5d:f2:59:28:4e:b4:1d:
9f:46:49:8a:af:6e:c6:9b:7e:e6:6e:8c:ca:01:cf:da:77:2a:
11:89:92:6a:39:45:84:4e:85:07:82:9a:2c:eb:0d:7f:74:af:
11:6b:f4:65:33:f0:1c:d7:ee:4d:b2:47:dd:01:85:0c:a0:15:
41:30:c7:ce:3a:c1:3e:37:65:73:da:0d:39:8c:fa:f3:ab:ed:
86:d6:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:45 2025 by rpki-client