
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1WCzC_IxmmhkVx8vyYnJs334rHY.roa
File: 1WCzC_IxmmhkVx8vyYnJs334rHY.roa (raw, json)
Hash identifier: ENxnCNwrp32YGf+FKX/Fg19Owtw9O1yTMtRAzsxKJpU=
Subject key identifier: D5:60:B3:0B:F2:31:9A:68:64:57:1F:2F:C9:89:C9:B3:7D:F8:AC:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E1C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1WCzC_IxmmhkVx8vyYnJs334rHY.roa
Signing time: Tue 01 Apr 2025 02:31:34 +0000
ROA not before: Tue 01 Apr 2025 02:31:34 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.96.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3612 (0xe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:31:34 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=D560B30BF2319A6864571F2FC989C9B37DF8AC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:b3:77:d0:b7:e7:dd:a8:cd:85:a7:39:49:
4d:54:47:f3:cd:37:09:59:2d:6c:55:cc:13:e4:7c:
03:08:96:d2:43:3d:b7:69:bb:6d:fb:1a:5a:8c:03:
0f:3a:dc:4c:05:93:24:aa:66:55:ba:ca:57:df:5e:
56:ef:f2:b3:db:90:ca:66:50:cb:d0:66:df:30:37:
28:26:4b:ab:85:b1:1d:2f:1c:67:3e:01:23:70:c7:
5c:82:4d:b5:cd:9d:5a:2e:de:05:63:96:7d:d1:8c:
38:24:c5:3e:c0:87:f9:62:bd:88:22:a3:38:f3:c6:
24:f2:94:42:71:94:92:20:59:d6:71:7f:8c:55:24:
a7:95:59:9f:d6:ea:01:ba:25:f9:04:1e:33:ea:29:
fc:8d:ed:26:9e:ec:a3:cc:66:93:52:73:9f:e1:09:
70:78:10:14:af:71:49:49:25:cf:2d:59:bf:fc:ed:
3e:02:74:98:be:c4:7c:de:86:34:69:e1:e4:e7:39:
f3:b1:75:5a:84:e4:28:ed:bc:be:e5:1f:ba:2d:78:
e0:22:e8:f8:1f:5d:26:2c:e0:dd:e5:f0:61:17:57:
37:10:32:fb:3a:41:f0:30:33:ba:5c:86:15:14:24:
12:53:dc:86:63:ad:43:ae:3d:b9:94:27:2f:1f:98:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:B3:0B:F2:31:9A:68:64:57:1F:2F:C9:89:C9:B3:7D:F8:AC:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1WCzC_IxmmhkVx8vyYnJs334rHY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.242.0/23
Signature Algorithm: sha256WithRSAEncryption
74:56:58:ab:c6:00:18:c4:02:0c:8f:5e:3d:1d:d1:9d:be:a2:
7e:e7:ab:fc:07:68:0b:33:b8:a7:72:80:14:65:87:0a:72:a0:
1d:1d:bb:09:50:44:f0:38:fd:6c:6f:64:91:34:e0:71:fc:69:
e2:2d:79:ed:d6:a3:8b:12:20:f6:cc:36:ac:53:49:e2:04:06:
c9:a7:61:fc:26:4f:fb:5d:fc:72:11:7c:ef:ef:84:f8:91:5c:
42:96:01:c3:e6:60:7c:1d:68:31:eb:88:ea:3b:5e:6b:16:c8:
15:97:e6:c7:25:d0:69:79:8e:a8:bf:2b:2b:39:3f:ae:5f:d0:
ea:d5:25:8d:93:96:e1:38:1d:73:1d:99:05:75:e6:75:06:f3:
6a:86:41:9d:16:59:65:b6:46:5c:a0:46:82:aa:c9:c8:af:38:
36:e6:a3:76:cc:6c:33:02:8f:ab:9c:6e:7a:14:9f:4b:9a:42:
70:ef:c1:f2:e5:bb:8e:46:6d:6f:2f:b7:09:8c:74:b4:38:77:
6a:12:df:09:62:42:8f:5a:db:3d:7e:f1:7c:bc:78:b7:bb:c9:
ac:dd:f1:6e:16:2a:2c:a4:26:1e:a1:95:66:6e:6f:c3:5e:1f:
0c:ee:f4:99:2a:cb:d2:8b:0b:31:9a:7c:3c:dc:01:d2:ed:5c:
45:9d:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:16:21 2025 by rpki-client