
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa
File: 9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa (raw, json)
Hash identifier: z//EgDeJrfhQZ50iUo7LxsIGoIMXlet351baENpzn0I=
Subject key identifier: F7:1A:0D:70:63:AE:8D:80:68:15:BB:7E:DC:DF:82:BE:EF:E8:46:91
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 52
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa
Signing time: Wed 01 Oct 2025 01:32:15 +0000
ROA not before: Wed 01 Oct 2025 01:32:15 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 23783
IP address blocks: 219.124.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Oct 1 01:32:15 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=F71A0D7063AE8D806815BB7EDCDF82BEEFE84691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:6e:6e:7f:a6:d6:c1:72:16:b0:d8:ff:c5:
98:22:71:cf:9f:7c:4c:6b:56:00:be:7c:cc:a0:80:
11:11:56:47:cd:af:93:ae:1d:82:9b:59:73:30:03:
68:35:10:58:d2:1f:b5:e3:68:c0:17:0a:b5:5e:aa:
51:4d:28:68:ca:ad:b6:96:a4:5a:89:ef:82:f9:26:
05:f0:57:aa:85:a6:0a:51:dd:c3:56:4b:b7:36:52:
3b:2f:21:f4:7b:b8:3a:ea:ec:b5:15:20:3f:09:30:
9d:7c:26:3a:ca:03:c8:d5:42:40:e5:c1:1a:7d:fb:
6e:e3:4d:5a:3d:76:47:bb:af:e6:00:a9:03:d1:c0:
5d:76:ca:aa:ac:1a:84:f0:bc:4a:21:3b:42:7e:e0:
2c:c5:5e:99:97:41:a2:40:2c:8c:df:cf:74:96:02:
9e:70:df:73:6e:87:4b:2d:c4:65:a0:31:ac:f2:d2:
e8:b3:d0:1e:29:3e:40:63:aa:a1:08:e7:bc:8f:be:
fa:1f:87:25:89:4f:8d:27:79:22:98:ac:d2:5d:2a:
3e:27:66:3e:b1:e8:a4:15:78:28:54:ab:4f:43:96:
a6:23:7d:51:0e:67:8a:b5:5a:57:2b:b6:1a:2c:65:
14:d2:25:23:72:d0:c8:49:fd:9e:a7:79:00:ae:e1:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:0D:70:63:AE:8D:80:68:15:BB:7E:DC:DF:82:BE:EF:E8:46:91
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.124.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:39:92:59:ab:f8:61:86:8e:bc:5d:ac:bf:37:95:53:de:56:
36:2e:05:75:db:93:b0:c6:27:1d:cf:64:e2:38:56:07:ca:31:
1b:9b:c5:9e:e1:cd:0b:08:19:b9:25:d9:f9:60:e9:5e:ee:2b:
a0:7d:ba:f1:b8:4f:fe:17:cf:44:96:1d:fb:3a:2c:4a:b4:64:
7a:e2:6f:69:4b:b6:18:be:2e:dd:71:94:49:ae:c2:6d:09:ac:
93:77:da:63:b1:cf:b1:d9:b5:01:dd:a7:98:dd:64:ca:da:af:
e8:7c:fe:3d:eb:88:ab:cc:ab:cd:35:2d:43:35:19:eb:58:3b:
6b:63:38:a6:c3:04:fc:3c:5a:1e:27:65:34:84:30:70:7f:0d:
e0:c0:0d:06:27:dc:01:bd:61:23:76:d1:e7:1c:0f:6e:dd:fc:
0d:25:81:49:38:a9:5c:4b:af:86:14:fc:ec:8f:da:62:ed:18:
db:5b:35:12:b6:46:0a:bb:6a:e5:4d:9a:2c:76:dc:3f:e7:e1:
39:dc:1d:89:94:93:c6:ad:e4:80:9c:a7:1f:18:23:0c:76:0d:
df:0b:c8:b7:21:7a:3c:a3:52:40:6a:fd:ca:75:74:a3:8c:e3:
6a:44:d0:e6:29:ec:fa:f0:a7:74:38:ab:47:bf:80:4d:e3:f3:
3e:14:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:52:58 2025 by rpki-client