
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
File: ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa (raw, json)
Hash identifier: UBh0F9kZRoqgLV4ILu+QEte2FZ9tKTSKq/P38vwfBp0=
Subject key identifier: 67:3C:41:4B:F4:03:FC:D1:48:45:B8:1B:BF:42:BA:AB:2D:CA:EA:CD
Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial: 41
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
Signing time: Tue 01 Apr 2025 01:30:29 +0000
ROA not before: Tue 01 Apr 2025 01:30:29 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 59127
IP address blocks: 2401:7ec0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Validity
Not Before: Apr 1 01:30:29 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=673C414BF403FCD14845B81BBF42BAAB2DCAEACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:76:0a:27:4f:4f:64:4e:29:cd:a0:04:83:
94:1c:5b:5e:f2:fe:ac:f7:75:43:eb:59:ff:c8:51:
0e:81:8a:17:78:0f:03:25:8a:3c:2b:86:f4:bf:ea:
db:79:5e:45:ba:dc:db:2c:70:cb:1f:82:ec:33:fd:
3a:b8:84:8e:2e:62:6f:0a:ed:65:b0:b6:b0:41:f3:
52:a4:ad:dd:f8:2a:4e:07:64:3f:4f:76:21:5d:3f:
11:eb:67:1c:3f:89:1d:03:ac:24:6b:76:41:ea:08:
a8:92:a1:4b:d0:26:fe:71:34:e4:70:61:7d:f3:0a:
50:0b:ff:9c:a8:1f:34:1e:2b:3c:a0:de:7c:42:ce:
b1:2c:f4:87:f9:8e:6b:d2:12:86:ca:81:3d:6f:21:
a4:a1:b5:73:ee:80:d8:b6:e6:ea:d8:a6:84:73:d5:
44:9f:3d:07:50:86:df:62:65:7a:11:9e:98:90:dd:
81:f2:8f:b5:9f:9a:bf:d5:67:02:fb:d8:db:01:4a:
09:5b:e7:ba:94:d1:02:dc:2e:5f:d7:54:7e:03:70:
7b:c7:ee:1a:f0:19:b1:5e:5a:4d:45:39:06:f3:ae:
48:60:6a:54:e7:fe:2d:c8:e2:eb:8c:6e:3b:a3:e0:
22:a4:95:3d:34:05:fe:70:7f:7f:41:13:94:ba:35:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3C:41:4B:F4:03:FC:D1:48:45:B8:1B:BF:42:BA:AB:2D:CA:EA:CD
X509v3 Authority Key Identifier:
keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7ec0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:6c:fd:18:77:35:30:99:4d:ce:e8:69:f9:be:2f:07:56:33:
9c:f2:89:77:32:10:93:42:52:fb:d0:1f:48:8b:03:63:05:5e:
ff:a9:ba:4c:39:05:f3:80:48:66:fe:6b:32:8f:8e:b0:79:bd:
91:68:ad:c7:5c:51:84:b2:93:32:ac:49:2e:89:30:f2:99:29:
f5:af:39:9a:80:eb:09:d4:65:2c:04:c5:9f:2d:06:b5:6e:2d:
ad:ad:7c:66:be:c7:cb:58:e6:01:ae:f3:8e:fa:1a:3b:13:58:
90:d7:40:60:0b:09:6b:8f:17:ef:9b:ec:32:0b:76:b0:de:55:
0e:60:ca:4e:66:e5:c1:c4:41:e3:48:80:bc:54:82:61:d1:6a:
a0:8f:a7:52:01:e7:71:0a:20:aa:f8:e3:d7:b7:59:63:4a:f2:
f9:c2:d0:d5:30:83:f4:96:7c:b8:23:b8:a0:1b:5c:9b:ca:d6:
76:40:c7:ce:f9:fd:e3:ce:0b:bf:be:0e:dd:c5:3a:c4:0d:86:
4c:75:74:f6:a7:24:0c:05:7f:51:5b:2e:09:c4:36:85:9a:2a:
7f:b2:6c:5d:e8:5a:9b:98:7e:c8:d0:03:e3:7e:82:31:62:04:
db:ea:3c:e1:b3:54:c8:8c:34:cc:f5:1a:1c:47:c2:b5:8e:7c:
d2:72:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:53:52 2025 by rpki-client