
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qTU4TEAejz80w5hA2RsK3U98EmQ.roa
File: qTU4TEAejz80w5hA2RsK3U98EmQ.roa (raw, json)
Hash identifier: XPV7I1OrGp0MU86gLOdbv1w3OyrLhI7MQDVjDSaR8pw=
Subject key identifier: A9:35:38:4C:40:1E:8F:3F:34:C3:98:40:D9:1B:0A:DD:4F:7C:12:64
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04FC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qTU4TEAejz80w5hA2RsK3U98EmQ.roa
Signing time: Sun 01 Jun 2025 01:30:49 +0000
ROA not before: Sun 01 Jun 2025 01:30:49 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 240a:61:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 1 01:30:49 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=A935384C401E8F3F34C39840D91B0ADD4F7C1264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b1:fc:5d:76:e8:2a:5c:26:55:df:32:c8:7f:
e3:0a:72:c1:d0:53:4a:c8:1e:22:1a:57:4e:f4:40:
76:77:25:5f:ba:62:82:e5:7c:28:e9:61:de:99:67:
51:6a:30:06:60:21:1e:ff:a6:79:a2:9b:19:73:31:
84:1b:4c:d2:e6:35:2f:0c:a8:fa:50:d2:1b:ed:70:
11:6b:db:91:16:9a:09:cd:ca:2c:a8:21:e8:c9:a9:
25:10:8c:06:14:0a:9c:02:a8:3c:04:e3:65:f1:c8:
e9:45:ac:f5:d0:46:74:72:09:65:6f:aa:d2:11:b1:
84:4e:6b:04:ab:c9:e2:ed:44:19:f8:69:47:e5:10:
c9:a3:b2:bf:fd:1f:0a:8d:3b:57:bb:34:25:c0:fd:
60:59:d2:ae:2d:7a:74:6e:fc:a7:90:01:6d:00:47:
8e:8a:1c:35:e1:5d:4b:89:68:9b:b4:82:3f:c1:4b:
7e:00:2f:42:ec:0c:b7:36:80:30:50:16:e7:01:3b:
1c:3e:e7:6a:1d:79:5d:1e:6a:b1:b8:98:11:6a:62:
d6:18:07:a5:e9:26:21:d9:6c:cf:db:2e:e1:93:70:
81:6e:b3:61:69:ed:80:88:93:8c:f6:2a:44:d5:d8:
c4:ac:ed:f9:5d:d5:93:00:55:0a:4c:a6:81:fc:ce:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:38:4C:40:1E:8F:3F:34:C3:98:40:D9:1B:0A:DD:4F:7C:12:64
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qTU4TEAejz80w5hA2RsK3U98EmQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:8800::/38
Signature Algorithm: sha256WithRSAEncryption
b0:97:07:bd:39:8e:5e:97:01:17:ef:7d:72:22:59:47:9d:78:
83:7d:9b:ce:4f:a8:6f:29:2c:e6:c7:18:69:38:68:2b:0f:92:
9b:51:cf:ea:d0:32:9a:43:b3:9f:2a:5d:bd:6d:79:01:59:ca:
2f:e1:59:9b:e6:c7:53:05:24:e7:38:31:22:29:99:8a:f2:15:
1b:e2:96:94:c9:74:02:a7:e8:d8:bd:b5:cf:67:c3:b9:a9:2d:
e5:72:69:a6:59:25:01:92:74:17:69:54:11:cd:de:3a:f8:f3:
d6:30:b1:34:94:27:d2:4c:2a:0d:13:9d:6c:2e:f7:d9:42:48:
49:c4:ca:84:2b:43:3a:4f:c1:13:4f:9a:da:ec:4e:de:af:ef:
57:de:24:da:26:a9:af:46:0e:ce:48:a9:dc:c3:01:31:ba:ea:
3a:69:e5:e5:0a:d9:23:7c:3c:02:85:af:ad:2a:99:6d:d9:58:
ea:62:20:65:0f:c8:cf:72:55:69:79:45:95:c0:bf:1e:11:1f:
3a:0a:d7:93:95:f7:6d:ec:c2:74:c2:8b:9b:69:83:d3:00:84:
bb:d9:2c:b9:b0:9f:24:81:9f:9e:a6:f7:6a:58:75:ac:12:06:
b1:89:68:31:81:b8:bf:65:7d:52:d8:95:07:85:9e:d8:31:5f:
8b:95:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:10 2025 by rpki-client