
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
File: ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa (raw, json)
Hash identifier: hVGTg+OmLKO+0GYTlNSpq8jXb9vUgjgHPlvila2/JxQ=
Subject key identifier: AE:2F:15:85:B6:E7:C5:A5:E3:AA:13:9D:0F:86:63:76:05:0E:F6:C6
Certificate issuer: /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial: 25
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
Signing time: Wed 01 Oct 2025 01:32:03 +0000
ROA not before: Wed 01 Oct 2025 01:32:03 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 23783
IP address blocks: 193.116.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Validity
Not Before: Oct 1 01:32:03 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=AE2F1585B6E7C5A5E3AA139D0F866376050EF6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:d7:1e:8b:33:77:75:56:6e:dd:27:72:fe:
5c:df:25:3c:c9:82:0a:05:46:ef:7e:62:85:99:3a:
3a:d2:00:36:37:86:c7:58:20:ef:44:1f:d8:a3:f6:
7f:38:d1:cc:af:22:c3:e4:95:97:e8:d4:ef:82:e6:
e0:9a:a9:c5:8c:1d:1d:dd:a9:ea:89:11:79:13:c1:
59:13:e9:d0:e3:ca:e3:81:ec:b4:b7:1a:8a:28:e2:
b1:04:c4:5e:f4:12:93:2a:cc:d6:03:38:03:6d:fb:
cf:12:67:a6:dc:61:36:2a:25:7b:2f:63:2c:27:64:
5a:d3:e3:2a:50:40:5a:a5:bd:8e:2b:94:07:52:f3:
c5:c7:c2:62:5b:94:f5:7f:a7:fa:5e:ac:ed:00:16:
51:fc:bd:cc:9c:fd:47:30:d8:c5:3a:4b:ff:82:d2:
8b:44:92:be:0d:95:f7:8f:7f:5c:89:68:44:39:f4:
07:e2:33:79:80:04:03:22:93:57:00:74:61:ea:ea:
12:8a:a9:df:6b:fd:1a:d3:10:9d:87:67:14:9c:ac:
46:29:9a:98:f9:05:68:98:ee:7c:8d:b4:46:ba:d1:
1e:67:bf:50:69:87:d2:c6:a6:04:8e:33:9e:9f:71:
34:ca:f1:01:c9:47:9d:40:80:e2:c3:9c:85:3e:25:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:15:85:B6:E7:C5:A5:E3:AA:13:9D:0F:86:63:76:05:0E:F6:C6
X509v3 Authority Key Identifier:
keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.116.32.0/19
Signature Algorithm: sha256WithRSAEncryption
10:27:dc:87:80:cb:a8:87:fe:92:c3:18:3a:07:dc:8d:f1:30:
44:2d:62:ea:c6:25:f7:e9:90:43:32:5a:0d:e2:50:c0:9e:67:
6d:82:64:58:4d:54:a2:1f:06:84:cd:c6:70:17:47:c3:29:1b:
7b:4a:2b:d7:ae:76:10:71:6e:35:3b:13:3f:96:95:cd:db:80:
6a:30:aa:10:7f:4e:c1:70:3d:88:c7:6b:9b:5f:6b:7f:08:5c:
96:dc:84:7b:d5:70:96:22:1b:0d:3f:b5:68:5f:37:f3:f5:6d:
04:0e:06:48:88:b9:c8:d4:bf:df:ae:88:db:89:10:f9:5b:ab:
e5:f2:36:4d:5e:4d:e3:1d:f1:1b:50:cc:76:b9:aa:14:60:9d:
d3:73:f3:a7:0a:26:53:29:d8:67:03:6a:b5:c3:e2:31:f9:e8:
67:df:6b:b1:27:8e:da:30:23:7f:82:5d:b7:4c:f4:21:ce:d2:
20:9f:a7:41:76:e3:4d:f9:0d:5d:85:a6:e2:b1:75:79:05:46:
b0:13:10:a5:5a:f6:b0:68:bf:99:4d:2c:59:88:28:71:f0:88:
5c:4d:f3:00:b2:c3:b9:1f:32:dd:4e:34:3e:fa:27:85:53:42:
46:cb:fe:54:38:4b:f7:5c:67:f7:de:cd:77:8f:2f:02:c8:70:
09:45:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:09:34 2025 by rpki-client