
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
File: YshT9_F4zxKhDZfg8d-D51dNGjg.roa (raw, json)
Hash identifier: OZR0xVucQSuSXglV2CE7SP/ck1J/MHo0TEtmP5xfjv0=
Subject key identifier: 62:C8:53:F7:F1:78:CF:12:A1:0D:97:E0:F1:DF:83:E7:57:4D:1A:38
Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial: 48
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
Signing time: Wed 01 Oct 2025 01:35:19 +0000
ROA not before: Wed 01 Oct 2025 01:35:19 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 37899
IP address blocks: 240b:253::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Validity
Not Before: Oct 1 01:35:19 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=62C853F7F178CF12A10D97E0F1DF83E7574D1A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:2b:2d:2c:ba:b5:01:04:75:ce:22:2c:80:
e7:67:12:d7:b1:96:cd:8b:83:f2:1f:70:1d:ba:5e:
f0:5e:5b:c7:18:79:a6:93:f1:4e:5f:91:dd:1e:04:
ed:ca:62:e7:ed:70:b5:7a:07:ba:03:5e:47:be:07:
24:49:26:a6:c7:0f:27:af:12:8b:84:25:22:3a:40:
05:5f:9d:2f:24:4d:52:52:b6:8d:71:3c:b5:42:17:
44:f8:91:f6:bd:e3:d8:a6:16:3b:f8:48:97:7c:69:
6a:29:db:34:2e:01:94:9a:16:d8:73:90:78:12:38:
f1:69:1e:5c:15:71:b5:1c:8e:07:4e:ca:ac:c0:4f:
99:00:40:0c:8e:96:46:3f:02:fe:40:7e:b6:0e:3e:
21:46:4a:60:35:68:a1:ed:30:81:81:ee:cd:6a:b0:
d1:54:02:ed:dd:ca:76:43:48:24:33:94:2c:df:75:
59:46:b0:b7:ac:dc:ae:2a:7b:6b:74:60:ad:86:2c:
91:f4:cf:3b:fa:78:df:40:ec:e5:47:4c:5c:7c:f3:
4a:f8:1a:d4:c0:38:3a:6d:ee:c2:1d:d3:b6:68:8a:
19:9b:71:ec:4d:b1:61:0c:f0:a9:6a:48:70:bb:93:
01:0d:82:f2:98:20:e7:3c:62:e8:dc:5b:dc:25:19:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:53:F7:F1:78:CF:12:A1:0D:97:E0:F1:DF:83:E7:57:4D:1A:38
X509v3 Authority Key Identifier:
keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240b:253::/32
Signature Algorithm: sha256WithRSAEncryption
0c:24:8d:9b:43:52:29:a3:b5:b6:07:f7:3e:c0:85:f5:a5:bf:
9c:27:32:61:f0:c4:1f:86:93:c3:b9:c9:dc:d1:96:ed:9b:a1:
00:20:38:6b:12:b6:4f:16:23:71:00:c6:6b:49:49:19:f2:ff:
e4:35:b7:21:56:31:a8:c8:00:fb:ef:5c:ef:72:f2:c3:6a:2b:
b4:79:79:13:55:62:cd:5e:7d:1a:a0:78:3d:2e:d1:ef:11:f1:
da:7d:6e:28:82:d2:65:4c:a1:f9:72:30:73:14:60:72:f5:3e:
50:14:31:50:5c:7f:66:39:0b:8d:17:0f:93:ec:5e:c5:fe:ac:
62:bf:7e:0b:56:11:8c:35:c8:7a:ed:ce:24:11:f6:45:64:64:
6e:db:78:f6:67:22:d2:a0:af:e5:6a:9f:3c:65:0f:4b:97:80:
4a:a0:77:be:5e:0a:c9:60:cc:68:2b:9a:9d:c5:0e:a7:d4:57:
c7:74:f1:0c:8d:6e:fd:eb:50:f0:e4:de:c1:3b:ec:1e:aa:76:
5b:e4:9f:b7:c4:d6:8d:14:79:5d:ef:76:91:5a:06:43:72:ac:
1c:1d:3c:34:8a:fe:5c:87:ba:b6:c9:12:7d:58:ac:99:40:68:
0a:1d:c2:9a:8d:c8:7b:d7:71:bd:e3:0e:7c:8b:15:fa:e4:32:
f0:04:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:27:55 2025 by rpki-client