
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa
File: OjjUnWh-nn2XOCGdOB4wVha1Hro.roa (raw, json)
Hash identifier: wb97gGrcj/gx+ZYXp6fGtkX4x54ZcCeAwg0UmilbHZY=
Subject key identifier: 3A:38:D4:9D:68:7E:9E:7D:97:38:21:9D:38:1E:30:56:16:B5:1E:BA
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 37
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa
Signing time: Sat 01 Mar 2025 01:29:23 +0000
ROA not before: Sat 01 Mar 2025 01:29:23 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 23783
IP address blocks: 218.185.128.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Mar 1 01:29:23 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=3A38D49D687E9E7D9738219D381E305616B51EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:c0:62:0f:40:8b:4f:60:d1:e7:9c:a4:a8:
92:25:7d:1b:0a:85:f8:3c:16:0d:72:8e:ef:05:ef:
ff:43:34:b2:82:18:d6:50:56:a9:c0:9c:e6:d5:e8:
2a:45:3f:3f:2a:2d:52:e1:d2:56:88:59:e3:85:e8:
d1:cf:e9:19:59:c5:04:8a:1e:cf:71:3d:1d:00:3f:
42:ea:86:81:27:0b:d9:59:cd:ff:c3:5b:d3:90:d0:
b5:1d:ab:ee:af:46:41:b8:bc:64:29:6d:99:bd:48:
cd:2c:4a:a8:2f:30:92:18:67:d8:ca:b6:b8:80:1e:
f6:de:6a:f3:32:c2:70:2d:bf:a1:fe:95:08:c4:e1:
7c:f5:3e:2f:7e:c2:b7:8e:62:c8:55:d6:23:06:90:
92:25:80:5e:f9:93:cc:fc:3a:ba:bb:e1:28:f9:d1:
15:06:4b:4c:a0:03:54:c2:87:da:10:b6:f2:f4:b3:
2b:0e:97:10:12:38:45:fa:84:be:e2:74:86:a7:1d:
56:1f:1b:ea:d1:03:22:2c:d8:d5:fb:7f:4e:a9:0c:
6e:c8:f4:69:44:80:62:ac:0d:fc:70:fa:03:7a:ef:
14:a7:ac:75:c6:c9:84:4b:bc:0d:2e:28:ec:96:e7:
b8:cc:b0:5c:b8:fd:84:50:c4:75:e0:01:16:8f:f6:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:D4:9D:68:7E:9E:7D:97:38:21:9D:38:1E:30:56:16:B5:1E:BA
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/OjjUnWh-nn2XOCGdOB4wVha1Hro.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.185.128.0/19
Signature Algorithm: sha256WithRSAEncryption
11:e2:ea:ef:07:6f:8f:71:fc:30:a8:16:5d:6e:74:d5:52:ba:
13:ea:01:9d:2d:da:22:93:10:00:33:6a:b4:6d:c8:4a:3b:ad:
78:ff:a5:2d:04:43:56:fe:0c:cd:b9:08:9c:aa:5d:6c:f7:60:
2a:d3:4d:4f:14:8b:a6:0d:49:65:4d:a2:5b:01:dd:97:6c:a2:
7f:cf:95:0b:07:d9:71:eb:a3:b2:0c:f9:e3:ab:71:3a:c4:d6:
f0:4f:b6:58:a2:0b:62:a6:c5:4d:d0:ab:06:a4:71:66:4a:87:
9f:31:d0:17:1a:f6:cf:06:ae:e1:ad:f5:64:d5:e0:63:77:8a:
3a:9c:f4:ca:03:7b:05:ba:3a:b7:a5:87:29:df:4f:47:ae:4e:
2d:4d:32:81:7f:1f:48:3c:bb:f0:17:34:43:ef:1f:d0:85:ac:
28:ef:a4:79:20:bf:fd:c8:79:25:b5:a0:23:c6:d1:fb:93:c9:
ab:5b:ea:07:d3:8c:fb:ca:1b:34:69:c9:4f:69:94:ec:4a:35:
81:b0:46:ec:8f:6a:e3:83:23:5d:17:6b:0d:7a:b5:eb:03:d9:
f6:64:2a:7f:3f:1e:ff:58:3b:a4:ac:48:7c:15:02:d8:19:ff:
60:92:45:b0:a7:8e:e1:2b:bb:52:f1:08:ac:b4:80:80:de:c8:
f3:27:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:52:48 2025 by rpki-client