
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
File: 0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa (raw, json)
Hash identifier: DpDHOZVSdAogqJlwm8KndTiodyqD8/n9mfcfZha1lb8=
Subject key identifier: D2:5B:39:65:EB:B0:E2:4A:AD:47:A0:D3:07:C4:A3:68:8D:28:9A:D6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E08
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
Signing time: Tue 01 Apr 2025 02:31:24 +0000
ROA not before: Tue 01 Apr 2025 02:31:24 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:31:24 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=D25B3965EBB0E24AAD47A0D307C4A3688D289AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:50:35:47:da:82:d1:ca:84:d5:8a:81:dd:
e3:df:5d:8b:33:6c:59:b0:c8:c6:7f:64:cb:9f:b6:
52:16:3f:43:93:93:4a:cb:df:d8:44:da:94:f0:c5:
83:8d:48:19:4f:ec:60:95:7e:b2:b4:3e:7e:24:34:
27:23:f6:62:49:21:54:9c:ff:dc:b8:cc:e3:17:a1:
75:e9:80:bf:98:08:7f:72:8b:b3:4f:02:21:9f:a1:
0a:49:35:90:06:24:a6:68:9c:f2:31:66:01:ca:ca:
ad:16:8f:ce:fa:bf:e3:64:60:d1:0c:7b:94:f6:09:
ae:35:45:e9:ac:74:2e:39:15:7a:16:8e:05:d4:c2:
39:70:5d:ec:c2:ea:b3:09:e9:44:52:02:7d:50:92:
05:5d:f8:4f:cb:34:8f:ab:d0:c6:bf:f0:c1:26:10:
3d:55:e4:73:f2:9c:0d:f3:2b:b2:64:ad:ce:31:30:
e5:ea:7b:fc:d9:bd:26:7c:d4:4f:4e:1d:12:04:04:
a9:51:95:83:3c:b1:82:ad:74:a3:ad:96:68:b4:18:
27:7d:30:08:da:4b:a0:b2:6d:9e:f1:9f:c9:9e:0a:
0b:e3:93:f8:6b:42:82:d5:99:04:6a:19:0f:26:32:
9b:68:c1:88:b7:b8:e0:e8:97:9d:fe:7b:1f:54:3b:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:39:65:EB:B0:E2:4A:AD:47:A0:D3:07:C4:A3:68:8D:28:9A:D6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:c1:99:d3:a3:c4:75:05:b2:f8:06:98:7d:c6:74:3c:3d:0a:
8b:f1:c6:29:93:4d:9c:87:82:b5:53:fd:28:9b:49:1b:04:ce:
b7:35:c6:f2:ff:c6:05:a9:55:da:68:b0:34:7e:02:fc:7c:76:
13:6e:d3:33:c4:27:70:0b:0b:d3:a4:77:05:71:7d:10:74:06:
8d:e7:5b:46:bb:44:f4:3c:04:19:5d:39:a9:01:90:20:bd:11:
22:6a:f1:b7:f3:de:7f:96:d6:99:a4:bc:cd:d2:b3:55:b1:2b:
85:df:de:97:60:ac:a2:b9:4c:4c:fe:92:a6:08:be:4e:b9:07:
92:ec:a3:ac:02:45:a8:b4:6d:57:09:ec:96:97:29:64:ee:f2:
d5:48:1c:ec:fb:ef:4b:5d:f6:b0:53:d3:c2:79:c5:83:cc:e3:
0b:82:f5:89:84:1e:e6:9d:99:f8:cc:ff:1c:ee:a5:39:11:0f:
28:93:0f:5f:c9:58:d5:26:76:84:1f:57:1c:cf:d5:f6:16:7e:
3f:85:37:7e:8d:2c:6f:58:e5:f0:1f:75:2a:e2:f6:46:e8:4e:
e8:69:63:92:89:1d:a7:ac:f3:24:1c:c7:ca:1b:c5:61:af:e0:
7a:7e:d6:5a:fd:a6:c5:be:59:f5:97:0e:8c:04:3a:72:46:8d:
58:5d:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:42 2025 by rpki-client