
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
File: sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa (raw, json)
Hash identifier: drMW8S+YDpAXh3Hd1UM6hszehIsnv8zdiZD0SN1IRWQ=
Subject key identifier: B1:10:E8:32:76:4D:64:50:4B:84:34:AF:4B:A0:CD:D5:6B:A8:B2:0B
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 049E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
Signing time: Tue 01 Apr 2025 01:49:21 +0000
ROA not before: Tue 01 Apr 2025 01:49:21 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:9400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:49:21 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B110E832764D64504B8434AF4BA0CDD56BA8B20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:a9:a5:b3:68:79:b9:9f:de:5e:7d:d5:6c:
2e:b6:aa:4b:05:e8:1c:60:88:b5:1b:00:eb:76:aa:
a4:f1:6b:a6:4e:1e:f8:f2:4f:b0:46:07:a0:99:2c:
ac:7f:19:26:17:2b:e4:9a:7d:80:c5:d0:8f:17:e3:
c6:55:ed:0c:22:a9:7e:ea:6a:de:c5:f2:92:bf:05:
37:80:a1:85:a2:1f:21:25:d7:f7:1c:16:64:a3:0f:
44:9b:a3:19:fd:3b:b4:fe:1a:44:72:41:e5:25:43:
bc:d4:25:43:ca:38:bb:2d:c5:c4:6e:cf:7f:b7:ec:
89:f1:0b:1e:fc:0f:79:2a:b3:8d:5c:da:ed:78:a1:
7e:c8:a2:b3:67:d2:d6:d6:6f:b3:82:33:7f:b1:04:
87:00:27:04:0f:9c:de:d3:e6:cb:03:6e:85:7d:6c:
14:0d:d0:a1:e7:c5:24:42:ea:85:65:d9:cb:18:4a:
00:fe:42:50:96:3f:94:39:4e:51:a7:d5:7f:58:a4:
1d:7f:87:9d:91:6b:46:8f:27:42:9d:64:86:1b:d4:
37:3d:fc:64:32:eb:c8:ed:c1:4f:57:45:05:fb:69:
88:c2:80:a0:bc:38:99:b0:b0:7d:ac:52:67:82:9d:
7f:f2:80:fa:d5:7b:d5:b2:e2:6d:22:f6:3f:74:5e:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:E8:32:76:4D:64:50:4B:84:34:AF:4B:A0:CD:D5:6B:A8:B2:0B
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9400::/40
Signature Algorithm: sha256WithRSAEncryption
0a:1c:11:0c:60:b5:8f:13:17:ae:1d:d7:5e:a2:86:97:c0:55:
bd:ff:ea:c8:47:00:11:71:61:df:fa:94:ec:ed:00:92:c2:7f:
ce:8a:46:3c:37:b8:ce:4e:61:df:36:7e:20:2a:76:75:5c:25:
a9:34:40:85:59:0c:6b:f4:19:86:aa:ca:8c:1a:63:5f:34:e5:
bd:9a:b7:59:2e:b3:11:be:1e:db:e8:51:0f:a4:b1:d6:63:bd:
a1:45:4e:0c:cb:e1:5d:a3:99:97:22:1e:e4:a0:be:5b:cb:16:
57:a8:03:fd:34:de:ab:b1:32:90:dc:16:6c:5d:f9:6a:46:85:
77:41:b5:da:e8:f8:59:cb:88:e4:e0:de:c7:30:84:75:5f:e3:
06:27:80:0b:55:3c:41:2e:f0:0a:12:e4:21:74:4a:78:cd:c7:
a3:8a:56:1c:80:0a:f3:89:b1:e7:ba:72:c1:64:56:be:86:94:
77:35:6a:b9:0f:e3:77:6d:9f:4a:da:42:b5:11:f0:cc:da:be:
6d:c5:5f:00:ef:b3:5c:9b:d3:10:0a:eb:bc:42:d3:c3:2b:4c:
13:52:54:20:d6:b1:35:33:96:cd:4f:b3:b9:13:8d:f7:a9:81:
02:a5:9f:97:45:2f:af:57:17:a0:f1:be:64:85:e3:50:e7:a1:
c8:ef:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:24:42 2025 by rpki-client