
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
File: HTQZHZI57G81PjLkqrIYsY_8A34.roa (raw, json)
Hash identifier: 6EWy+rb6CW9+FBEyPayWg8F/eSJi1w6LdqP9/aIHSe8=
Subject key identifier: 1D:34:19:1D:92:39:EC:6F:35:3E:32:E4:AA:B2:18:B1:8F:FC:03:7E
Certificate issuer: /CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
Certificate serial: 15
Authority key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
Signing time: Thu 19 Jun 2025 05:31:12 +0000
ROA not before: Thu 19 Jun 2025 05:31:12 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 18282
IP address blocks: 2406:2800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
Validity
Not Before: Jun 19 05:31:12 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=1D34191D9239EC6F353E32E4AAB218B18FFC037E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:32:05:6a:cb:33:ed:71:d1:2a:16:4e:72:
8e:51:f8:b5:6f:02:eb:f8:81:91:08:90:86:15:8b:
7f:d3:24:59:e5:94:4c:09:7d:78:34:e6:cf:06:be:
72:90:c0:fc:2d:9c:f6:46:c1:c5:cb:15:9f:e4:96:
c8:1a:51:86:23:f1:8a:98:35:00:ab:ce:e7:8e:d8:
b4:e0:07:59:20:6c:bc:9f:31:26:9d:c3:29:47:b8:
cb:22:94:35:50:43:70:61:58:69:92:66:37:8f:ef:
ac:ef:df:32:47:b7:16:5b:33:eb:ee:81:20:8f:e6:
22:be:41:8f:05:34:6c:ee:88:96:47:33:29:96:46:
92:f0:bb:58:3b:60:6d:53:a2:f1:85:da:e1:a4:cd:
57:1d:ce:1f:6c:fd:57:e7:ed:06:d8:0b:5b:75:c7:
c8:0e:6f:ed:8e:b5:1a:85:95:f9:23:ad:85:8a:f1:
ca:f3:ea:97:57:38:0a:c8:a5:c5:67:ff:c6:b0:c9:
73:45:fc:e5:ff:36:f2:62:e7:af:73:a6:3f:cd:6b:
2e:e2:bc:ed:09:4a:e7:cc:39:8e:a6:92:af:90:30:
a3:62:af:9c:09:77:7b:e0:75:62:7a:31:b0:4b:c3:
19:cc:91:6e:76:bc:3f:dc:7f:cd:9e:50:f3:30:11:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:19:1D:92:39:EC:6F:35:3E:32:E4:AA:B2:18:B1:8F:FC:03:7E
X509v3 Authority Key Identifier:
keyid:8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:2800::/32
Signature Algorithm: sha256WithRSAEncryption
bc:30:2d:6d:25:db:13:a9:6e:ed:2c:f2:bf:97:ef:7c:82:ac:
9b:fd:23:4e:75:a9:fd:52:3a:29:6a:df:05:16:0d:fa:69:61:
e6:31:70:21:5b:52:36:e7:a9:c6:bc:f9:74:d2:45:a5:b1:c1:
d9:17:55:50:99:9e:2e:4a:5f:25:38:c4:61:b2:25:8f:3c:e3:
da:77:66:d1:dd:d5:b4:7f:c9:5c:64:02:6c:f2:23:42:51:b3:
cd:3d:f1:b6:a6:c7:02:64:ea:87:cb:2f:95:d8:ba:ef:02:29:
04:1a:28:e2:aa:28:15:f3:ff:73:37:97:c2:b7:fb:ce:98:d9:
e7:92:b9:ad:2d:b1:eb:84:18:f1:f5:32:f4:47:33:8b:9d:1e:
16:fb:30:58:72:3e:1a:37:53:ee:d4:28:29:56:76:e4:e7:77:
40:b7:fd:20:6f:25:64:44:c3:18:9f:bb:03:1c:d0:e7:63:26:
0b:70:84:ac:00:24:a1:16:bb:dc:74:54:fe:2f:49:9d:05:e6:
da:88:bb:52:ab:f7:9e:a5:ff:1f:ec:94:d6:34:32:69:c2:65:
cd:d0:a7:39:ad:c6:70:cf:32:85:85:bd:0c:de:43:29:bb:99:
22:46:cd:2b:67:75:0c:cf:1c:41:ba:64:b9:6b:0d:12:07:f9:
8e:9b:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:02 2025 by rpki-client