
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
File: pguJAFboHCpJg-71kwS6LXq-zpw.roa (raw, json)
Hash identifier: haFiVoTPMuFk0Eq6jG7ovfxNE1NDpVLQ+nW4Pzav4ck=
Subject key identifier: A6:0B:89:00:56:E8:1C:2A:49:83:EE:F5:93:04:BA:2D:7A:BE:CE:9C
Certificate issuer: /CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Certificate serial: 2F
Authority key identifier: B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
Signing time: Fri 01 Aug 2025 01:31:03 +0000
ROA not before: Fri 01 Aug 2025 01:31:03 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 45677
IP address blocks: 2407:8f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Validity
Not Before: Aug 1 01:31:03 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=A60B890056E81C2A4983EEF59304BA2D7ABECE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:25:44:fa:57:2e:36:4f:55:3a:81:6a:1d:
d5:ac:3a:9c:b7:54:18:a6:52:a8:6b:49:36:da:2f:
56:ae:f8:4f:b7:30:6e:0e:83:92:2f:17:72:74:90:
36:43:36:57:36:35:b7:6b:fb:3f:36:dd:36:37:b3:
f4:da:bc:85:0a:d2:1b:3e:d5:f0:47:18:69:1a:66:
80:72:c7:8d:ff:80:84:7b:f2:f4:28:fa:d4:ca:3c:
0a:90:92:29:f2:6e:d5:ea:35:e6:0e:7f:1c:17:f4:
11:fc:d0:f2:a4:17:ae:c0:50:11:23:8b:84:b3:ba:
d0:83:1f:6c:b8:18:09:08:e6:40:91:c6:94:da:24:
86:e6:3e:9f:e6:00:9f:c6:f1:45:5a:e3:f1:a2:94:
c3:d5:a1:f0:79:86:51:46:52:e7:e4:67:1e:37:27:
85:54:67:cf:5d:34:d5:be:d9:24:a6:35:bc:5c:65:
8e:90:10:0d:a5:1d:fe:43:2d:c1:ee:4d:14:4c:52:
d6:fc:6f:61:d0:84:32:8a:25:9e:16:32:dd:ae:40:
2b:a0:e2:7c:7a:22:ee:25:dd:ab:fe:91:a0:09:fe:
22:fd:95:bd:8c:68:b1:15:4c:02:7b:d6:ce:c7:d0:
14:71:aa:f4:b7:6b:48:e1:e6:b1:a9:1e:cf:a3:82:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:89:00:56:E8:1C:2A:49:83:EE:F5:93:04:BA:2D:7A:BE:CE:9C
X509v3 Authority Key Identifier:
keyid:B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:8f00::/32
Signature Algorithm: sha256WithRSAEncryption
54:1c:e0:2f:da:42:a8:9d:ce:51:cc:81:14:cd:02:66:a1:28:
f5:8b:ca:d3:c1:8e:c8:3d:4e:a3:47:2b:8f:33:b7:88:b5:32:
79:fd:02:31:40:eb:f3:47:ed:61:a5:e5:da:ec:ec:87:82:25:
51:c0:a4:11:e1:7c:d3:29:7d:96:53:26:ee:ae:7a:ec:ef:af:
88:7a:8a:1c:e3:59:cd:d0:a5:25:9e:f8:e6:56:c5:d0:84:cf:
ac:e0:6e:da:9f:a9:1e:1f:c2:f6:86:3f:69:7f:8f:57:d0:c7:
34:00:33:6f:e3:17:54:e6:07:2d:10:e9:2f:01:7f:7e:2a:9b:
cf:3e:a0:dc:98:d0:39:1b:34:ff:b2:15:08:e6:39:77:a1:98:
3d:a2:ba:7a:28:44:fe:59:a3:68:0e:d7:b0:2c:1c:e4:c8:1b:
f2:8e:1b:05:9f:9b:b0:28:a9:0f:d2:7c:be:a2:60:2b:9d:65:
57:42:bd:1f:e6:87:f0:24:02:3e:db:da:b9:9b:8f:18:27:eb:
80:0d:74:2f:f3:84:94:29:cd:ff:36:77:c6:42:41:fc:5c:d4:
b0:b3:9e:2b:dc:18:ef:f0:b1:cd:36:f1:41:25:d9:c4:52:a0:
e8:d8:65:74:ee:81:42:14:f1:6d:d3:6c:ad:39:09:e5:32:c2:
12:23:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:56 2025 by rpki-client