
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
File: z8HoENtJisPgFrkEFMc_W9yuIfQ.roa (raw, json)
Hash identifier: Bt3a6ql9jLOPV+pplQBFQRjTHUtTOZxbLXb2suMD0bY=
Subject key identifier: CF:C1:E8:10:DB:49:8A:C3:E0:16:B9:04:14:C7:3F:5B:DC:AE:21:F4
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 4C
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
Signing time: Wed 01 Oct 2025 01:32:10 +0000
ROA not before: Wed 01 Oct 2025 01:32:10 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 23783
IP address blocks: 203.179.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Oct 1 01:32:10 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=CFC1E810DB498AC3E016B90414C73F5BDCAE21F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:f0:d4:14:94:70:27:ea:22:2b:cc:cb:53:
32:47:04:68:9e:99:62:19:00:70:0a:94:4d:29:bd:
70:cb:8a:aa:a1:6a:ee:13:d7:2b:8b:61:96:63:2e:
27:38:cd:d6:8b:6d:53:f8:29:ac:23:e6:7e:a9:8f:
f1:b1:5b:a7:ab:70:08:be:7b:96:4b:6a:64:51:b5:
9c:f6:32:37:6d:25:65:4a:e8:3a:38:79:60:a9:19:
ed:b3:d2:06:e6:fd:5f:43:79:21:62:31:72:98:69:
f5:fb:85:5e:ea:77:fc:7e:65:57:80:d5:dd:0a:25:
2d:f6:79:54:bf:1d:18:71:87:bd:3d:c2:5b:94:5c:
93:41:d1:6d:d4:f8:da:13:d6:31:cc:99:fa:75:70:
ad:ff:08:cd:6e:8b:80:6f:56:15:1f:cb:8c:c5:f5:
52:1a:3d:00:c3:a1:8e:75:5f:86:68:d6:01:7d:f8:
91:03:5e:11:c6:c5:f6:9d:a7:3b:5e:11:ea:56:30:
2b:47:c0:18:b6:a5:03:ee:70:b5:da:a2:bd:f6:89:
16:de:b1:8e:3a:1b:65:46:e1:76:40:1f:86:8b:db:
db:9c:56:47:d1:3b:1b:02:a6:80:15:21:e3:a5:f7:
08:43:60:19:85:67:6e:2b:5c:3f:8d:41:ef:47:a1:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:E8:10:DB:49:8A:C3:E0:16:B9:04:14:C7:3F:5B:DC:AE:21:F4
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.179.252.0/22
Signature Algorithm: sha256WithRSAEncryption
88:fa:5b:1e:9b:4f:50:c8:f5:5c:0d:f1:f1:1d:e4:a1:81:6e:
53:39:fc:60:15:9a:01:75:ee:7e:b0:45:9f:79:81:2d:e2:40:
6a:85:8d:e8:98:55:c3:55:e4:b6:49:97:1c:55:6e:6c:c8:51:
46:1b:b1:80:01:b5:6f:b5:84:92:6c:dd:51:c7:e2:c3:96:f3:
d6:7f:e2:6a:13:5a:51:cf:01:fa:fe:9d:da:80:fd:d7:19:5c:
11:82:85:88:d1:af:72:b9:4d:b9:ce:32:eb:21:a6:d9:e2:4d:
62:1d:01:b8:da:01:78:64:e3:69:65:f7:43:0b:cc:52:c9:01:
fd:96:28:1a:fb:44:9e:cf:1e:b2:a0:8e:9e:03:54:b7:31:f1:
f5:2b:e7:01:50:ce:68:fa:7f:62:86:5e:b0:1d:77:bb:64:ee:
0e:69:f5:2a:fd:cf:3d:a2:41:cb:ee:9a:a9:f9:a3:93:b1:7d:
b0:0e:4f:74:c5:14:08:4a:55:eb:d7:e9:97:ee:16:00:8b:48:
dd:42:ac:73:9a:cd:5d:89:a1:3f:f8:9e:e1:2e:3b:37:52:77:
82:70:6c:b6:b4:96:b8:42:a1:73:54:14:ea:7c:a4:8b:e5:29:
85:19:f3:e7:e2:81:b3:22:a9:ae:09:6c:86:60:a6:8b:f1:94:
22:be:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:53:02 2025 by rpki-client