
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
File: wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa (raw, json)
Hash identifier: Fp6WCcqwYs3+6TTMmKmH9gkRNGR9DZdax5rkDzyIHII=
Subject key identifier: C1:8C:D3:F1:C3:6F:C1:19:26:A9:0D:43:40:88:D2:6E:86:E1:66:77
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 04B6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
Signing time: Tue 01 Apr 2025 01:49:32 +0000
ROA not before: Tue 01 Apr 2025 01:49:32 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b:3f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:49:32 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=C18CD3F1C36FC11926A90D434088D26E86E16677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:9d:bf:86:9b:51:86:02:b9:f0:9e:c9:c4:
6e:0d:d3:ed:5b:8c:cb:28:d1:37:7d:d1:4b:09:12:
d2:b6:70:22:9e:93:4b:06:a2:e5:e3:0d:23:4f:17:
31:f8:62:dd:1d:9b:95:9d:2c:54:81:58:77:11:de:
b3:30:e0:29:6a:9d:98:23:30:de:bb:9b:01:2f:d3:
b1:f6:af:68:9a:8a:e5:23:74:c0:61:11:01:ec:b2:
89:0e:8c:de:ee:c1:f6:d4:2f:2c:9d:ca:5a:90:a8:
f5:da:85:ad:f7:0b:1f:bb:5e:66:e4:e8:a2:2d:30:
5a:04:35:ba:b5:96:45:b5:1d:e6:96:d5:47:a1:d8:
6a:9b:0d:a9:e1:f8:aa:dc:ea:71:d6:b9:88:5c:50:
77:56:a0:69:e7:e8:ec:b2:56:3b:cb:f8:d4:ac:56:
9f:9d:14:95:43:92:8c:16:79:48:a1:a2:a3:1f:ea:
2b:19:79:66:6e:84:00:a3:ba:ef:fe:0f:b7:45:1e:
07:38:4b:76:f6:ab:cb:ed:0b:84:13:89:62:ac:17:
60:d9:e9:2d:ac:f4:35:01:e6:9e:2d:fd:25:9c:5f:
15:da:46:80:50:53:a6:a3:a1:4e:42:e2:c6:b3:ed:
1c:e9:68:0d:5a:41:84:9c:00:ce:a7:b4:7c:9e:ab:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:D3:F1:C3:6F:C1:19:26:A9:0D:43:40:88:D2:6E:86:E1:66:77
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
0f:8a:24:6d:5e:36:5a:cb:66:dd:57:12:90:87:5e:84:05:4a:
3a:9d:d3:c9:b1:eb:27:2d:63:3d:5e:db:7c:dc:58:28:b5:68:
cc:e7:87:40:8d:86:b0:8c:e9:df:a9:c9:aa:1a:54:54:d3:d7:
7a:34:55:c5:dc:a8:6d:72:28:0c:1d:c6:c2:8e:58:18:0f:4b:
8e:c7:7a:d4:d9:17:46:d5:e2:72:46:13:20:98:bd:a7:13:74:
b1:43:29:2a:09:87:30:14:46:59:11:be:67:7c:dc:60:85:40:
52:17:40:98:49:03:db:05:83:ca:58:ce:b0:2e:ab:bb:16:26:
0d:ea:1e:95:27:db:4f:33:94:36:28:c4:a6:f0:78:de:3a:e4:
6c:78:7d:08:7c:1a:f6:a4:0d:19:12:10:79:8e:6c:b0:09:38:
90:5a:63:a9:67:41:7c:40:24:d2:2f:20:d1:ea:ed:27:96:e7:
b8:ef:9f:31:9f:37:67:be:fe:f9:ba:22:e1:e9:d1:d1:d2:8b:
7b:17:74:17:44:fe:15:5d:b4:af:74:59:e1:4d:62:00:88:0f:
5a:4f:ac:d7:53:dc:a8:e1:9f:52:a1:58:a9:0e:bc:ef:0c:da:
9b:cd:76:78:23:59:0d:5a:93:a5:1e:ff:59:89:40:17:c8:08:
99:b8:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:40:53 2025 by rpki-client