
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
File: Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa (raw, json)
Hash identifier: 5bFxdYZ758EkXLXK3PDzGGyTLnsBzgLmuyidR+abhA0=
Subject key identifier: 4E:2C:EA:F4:69:4C:33:68:95:3A:C6:99:B5:91:16:F3:20:98:CD:A4
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 39
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
Signing time: Mon 01 Sep 2025 01:32:02 +0000
ROA not before: Mon 01 Sep 2025 01:32:02 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Sep 1 01:32:02 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=4E2CEAF4694C3368953AC699B59116F32098CDA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:49:a4:81:33:cd:5c:4f:fa:bd:04:bb:9b:
04:3c:55:5f:6e:be:a1:dc:3e:a3:0d:79:23:88:5c:
f2:55:b7:68:c3:50:45:5e:4a:0d:b2:e3:73:36:93:
b3:a4:b0:76:e0:81:22:e0:b4:bf:e7:b7:65:b8:e8:
71:da:14:d9:c5:13:4e:8c:bb:3f:15:b4:46:ee:ac:
19:a2:07:b8:da:54:61:9b:e7:b3:94:23:56:6b:b5:
0c:b7:08:f3:47:ea:26:7b:6e:7b:60:db:b4:b3:4e:
ec:15:df:42:89:f0:fb:a3:2d:f1:56:8d:37:f5:3c:
66:53:05:2d:b1:03:bb:60:53:57:ac:2e:25:13:56:
a4:d6:ec:bf:71:08:5c:51:99:82:8c:16:ba:41:a4:
dc:6d:52:4a:c8:61:14:b8:43:75:30:85:d0:fd:45:
dc:2f:0e:50:c0:36:a1:92:a2:8c:9e:d6:93:60:02:
db:44:f8:3d:2f:b9:8f:0d:ca:3f:3a:af:ce:c4:db:
c9:c7:4e:a3:7d:b4:9d:44:16:7d:7c:e4:32:f2:77:
59:12:45:87:e8:a3:6e:00:da:93:bf:10:50:44:e9:
77:78:4a:b2:0c:a0:f8:41:bd:7b:a4:32:0b:9a:e0:
c5:ca:f7:a6:54:b6:ed:c1:72:71:27:10:b1:31:82:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:EA:F4:69:4C:33:68:95:3A:C6:99:B5:91:16:F3:20:98:CD:A4
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:dd:1d:97:f5:6d:e0:16:cf:d9:8d:b2:51:92:d7:cc:70:16:
80:8d:7b:1f:65:40:29:76:ba:95:0c:7d:81:fd:43:5f:ac:67:
e8:72:f6:3f:c2:43:c8:2d:87:ea:bc:5e:e9:6c:7e:27:a5:35:
91:f3:5d:0e:d8:d8:dd:96:8d:5e:51:28:ed:89:68:e8:36:7e:
dc:24:15:4b:d1:91:fc:07:99:99:ea:91:23:60:e2:b0:7d:c5:
a7:9d:49:e9:b5:a0:89:4e:92:7c:49:0f:87:97:e8:3c:93:cb:
8f:ba:cf:f2:6b:fa:63:d3:94:d6:9b:03:d2:d9:2d:d8:51:0d:
a9:03:d6:48:24:14:12:53:36:2d:ed:74:2c:58:2f:75:67:c3:
86:ef:64:d6:0d:a5:7e:25:43:6a:91:6a:15:6a:df:42:ad:29:
e4:ef:31:c8:8a:a5:6f:83:63:25:b1:86:81:34:30:26:1a:7f:
24:18:6a:a0:ed:06:e5:22:3b:de:08:0e:17:07:d4:8d:65:9a:
04:83:0a:d6:e4:e8:4f:65:58:2a:6c:8b:5e:96:34:cc:61:d7:
a0:67:4c:57:f8:d4:23:17:e4:a4:ee:eb:cb:be:64:69:2a:c9:
a8:66:47:a4:3f:29:53:89:c3:18:ee:aa:5f:84:dc:9c:e6:8a:
c8:4a:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:20 2025 by rpki-client