
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa
File: -N_nWwvSvdYWDU7ng3zdV9TblTo.roa (raw, json)
Hash identifier: lBnK6WkjNjTrgpAG9zjmZaWlVsMhaNpgGcpylmvdjmo=
Subject key identifier: F8:DF:E7:5B:0B:D2:BD:D6:16:0D:4E:E7:83:7C:DD:57:D4:DB:95:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C09
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa
Signing time: Tue 01 Apr 2025 01:51:33 +0000
ROA not before: Tue 01 Apr 2025 01:51:33 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.96.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:51:33 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F8DFE75B0BD2BDD6160D4EE7837CDD57D4DB953A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:91:35:8e:0c:01:04:ae:40:8b:47:18:c9:
8e:df:b8:8c:e5:8d:90:b3:22:c7:77:8b:1b:b7:26:
54:42:7b:c9:aa:10:be:2a:7c:31:9a:7d:8d:e0:79:
cc:0c:9d:84:ab:0d:1c:9c:0d:23:80:aa:5f:32:d8:
aa:3d:ec:bd:ab:04:2b:f2:b7:77:60:7d:96:2e:d8:
11:51:f9:03:db:6e:42:52:4b:1b:cd:2d:76:a0:fb:
4c:5e:8d:8c:42:a5:15:59:f3:7d:7d:03:2f:67:bf:
83:d2:ed:0d:43:91:4e:32:db:bd:7b:11:e4:09:d9:
47:d9:a5:e1:ab:f6:33:c3:64:a0:87:95:ae:3b:2c:
38:ce:19:58:ab:00:59:a3:51:9c:aa:ad:3c:28:52:
60:2a:92:42:93:81:06:ef:e2:e1:9e:e5:fe:e6:3c:
32:eb:db:c5:65:4a:52:a7:62:67:d6:2f:af:66:8c:
fc:28:05:ea:24:0d:e9:e2:25:88:fa:4b:cf:9b:7d:
b0:91:19:42:a4:45:0b:0f:a8:3d:dc:9c:c5:0b:70:
ad:48:49:9e:cf:c1:f3:02:6b:37:7f:b7:52:6e:1f:
70:13:9b:54:d9:ec:96:4a:60:85:53:70:88:67:67:
b5:ec:19:b1:a4:1d:60:a3:9a:78:f5:56:ab:ff:f4:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:E7:5B:0B:D2:BD:D6:16:0D:4E:E7:83:7C:DD:57:D4:DB:95:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.8.0/23
Signature Algorithm: sha256WithRSAEncryption
12:15:e2:fa:7a:2d:34:1e:e8:39:0d:5a:8b:af:80:fa:01:d3:
63:e2:6e:f6:56:3c:07:0c:d6:d4:11:4b:2a:b0:1a:ae:50:86:
bf:1c:09:ca:ae:33:c2:a9:66:b7:39:ef:18:22:b0:3a:05:a3:
b0:07:7e:01:c2:08:f0:3a:39:3c:27:66:22:47:46:cb:2c:96:
fd:02:38:78:51:ec:88:13:28:7b:0d:66:13:1d:eb:10:d2:60:
de:91:88:7d:f3:3e:a3:05:3b:1d:23:ef:93:5e:0c:b1:c8:63:
e8:f5:f0:76:85:8b:1a:c2:9a:0e:5f:98:df:12:16:7d:6a:79:
8e:9d:10:c3:5c:99:23:85:c4:6f:b3:9a:4b:08:0c:bf:46:b0:
4c:3f:0f:e2:6c:7d:f2:77:e5:93:66:41:86:4c:c6:a0:47:fc:
6c:a7:51:c2:5a:c6:0d:6b:35:27:5f:e6:0a:a2:53:75:6c:17:
a4:bc:b1:18:97:95:81:0a:02:10:0c:ec:5d:93:52:35:77:13:
45:3b:1a:71:43:d2:1f:8a:ba:91:62:83:a5:f9:13:93:5c:3f:
ff:42:10:bd:ca:6d:f3:86:5a:4b:2e:13:b0:6c:d4:ab:50:36:
fa:93:5e:1c:dc:1e:d0:9b:c6:eb:c1:4f:72:69:48:43:40:1b:
c2:e7:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:11:11 2025 by rpki-client