
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
File: o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa (raw, json)
Hash identifier: XGbLVX4Q6e8Ta3YyM0Iztk5bCUPM9wYG+07e0jQ4w3g=
Subject key identifier: A3:64:F3:F9:12:80:D4:CE:A9:96:87:83:8D:30:CF:29:55:64:81:D7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0419
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
Signing time: Tue 01 Apr 2025 01:35:34 +0000
ROA not before: Tue 01 Apr 2025 01:35:34 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:1600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:35:34 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=A364F3F91280D4CEA99687838D30CF29556481D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:f0:78:68:fb:e7:c3:06:f2:4c:ba:2f:d6:
6c:be:55:9a:38:2b:8a:11:57:b6:2a:6c:e8:8d:17:
41:0e:00:15:36:8f:e1:d2:da:c0:e6:90:33:9e:08:
40:e4:91:e4:87:bc:db:eb:d2:01:5d:14:18:a7:cc:
45:f5:83:c3:40:46:a5:39:84:16:13:86:6a:c0:75:
3f:8a:46:7b:70:9e:07:4c:11:32:dc:e3:85:52:fa:
1f:62:d9:c7:07:96:13:ac:ea:47:5f:2d:1a:bd:b7:
01:94:da:58:d4:c7:58:e7:81:fd:1b:d6:2d:90:d0:
7a:e7:52:06:74:d1:91:56:a6:48:e1:1c:2e:60:f0:
b0:b1:dd:f4:37:b2:3f:e0:6d:e5:92:35:64:30:de:
56:92:85:8a:83:2b:54:45:ea:9c:a1:58:5e:c0:dc:
fa:16:f1:c9:cf:30:86:fc:66:63:ef:49:69:e3:cb:
bb:8a:70:55:b5:5a:2b:56:a2:0a:70:0a:6f:b2:d4:
39:de:db:63:96:a0:00:3f:0e:16:f2:ad:ef:aa:ec:
f0:7c:d2:87:74:77:4e:98:aa:43:30:12:18:7b:0c:
1e:78:df:36:25:c0:a1:b8:c0:be:1e:57:1c:dd:1b:
a5:62:b8:cc:8c:e8:f3:b6:43:bb:24:98:28:db:8c:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:F3:F9:12:80:D4:CE:A9:96:87:83:8D:30:CF:29:55:64:81:D7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1600::/40
Signature Algorithm: sha256WithRSAEncryption
98:71:4c:4d:12:f0:61:f5:a9:50:c8:36:11:e9:65:bc:f2:cc:
01:75:52:55:f3:5e:0f:7b:a5:cb:48:05:1e:4f:32:71:48:2d:
79:c6:aa:a1:47:58:d4:81:fa:87:bd:65:0c:fb:30:1d:f5:63:
8b:5a:cb:97:25:be:dc:51:63:97:26:49:b2:02:80:fe:6a:9b:
55:d7:1b:24:f0:0d:24:87:b2:44:1b:5d:e4:74:2e:3d:ae:74:
e3:fa:d7:d0:b3:a4:fe:90:7d:52:44:6b:61:99:ca:4d:64:3e:
a1:fe:88:0d:70:a9:8f:63:a1:d3:48:ff:18:b7:31:52:ee:6b:
57:97:e7:f0:41:ab:5f:ed:49:a7:bf:43:eb:dc:33:f2:4b:cd:
bc:38:fd:97:10:c8:20:c3:68:dc:95:b1:f3:97:ec:da:aa:c8:
76:ce:0b:38:b7:4d:84:b2:52:db:6c:db:04:11:c6:f2:38:4e:
c2:05:5b:de:b8:10:9d:67:48:e4:05:e3:e1:8a:3f:e2:bf:48:
74:c7:7c:39:7f:3b:fd:a4:3f:36:17:74:87:98:d5:5e:07:ea:
8f:83:95:b2:1c:b5:8b:8e:e8:ca:a2:54:c8:2e:18:91:a8:03:
94:22:30:50:49:7a:13:73:8f:d0:e0:74:79:8d:9d:52:c8:17:
1e:3d:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:46 2025 by rpki-client