
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
File: 6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa (raw, json)
Hash identifier: 7TQfPm5J36+4pUMT8aXkQvY78MNjgOtkLpG0C9h4sU4=
Subject key identifier: E8:C9:B3:08:88:66:AF:D0:B7:79:8A:5C:CB:11:DE:E3:A2:79:63:0E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0CF8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
Signing time: Tue 01 Apr 2025 02:11:33 +0000
ROA not before: Tue 01 Apr 2025 02:11:33 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:11:33 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=E8C9B3088866AFD0B7798A5CCB11DEE3A279630E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:e3:0c:a6:52:be:d4:c3:dc:bb:1b:3e:27:
35:cc:8e:c3:2c:e9:72:b7:c6:b2:62:23:fd:2c:13:
29:3a:32:a5:f8:f7:04:de:f3:18:8c:c4:a0:ac:e0:
06:55:80:b0:16:9f:2d:1b:39:3a:57:86:f8:be:77:
a9:ef:10:cd:38:50:05:8c:16:ff:b2:dc:4f:1b:9b:
d3:16:d4:63:65:d7:12:4e:ef:a5:8b:56:4c:aa:5c:
ae:e1:93:eb:5b:d2:a0:25:6f:f7:cd:5c:2e:e3:b5:
a2:4d:49:26:db:92:e7:35:d8:b7:25:a2:63:d4:7e:
45:62:71:3e:1b:b8:5d:c7:71:7a:a0:d8:64:68:7a:
08:dd:a2:e4:0f:cb:19:65:87:28:46:4a:38:72:a2:
b1:92:56:9c:15:c5:e3:22:e6:4e:2b:75:95:01:f0:
26:35:15:93:31:92:35:8e:71:9c:5d:9b:54:60:16:
63:8f:88:ea:23:a6:a5:ee:a1:d3:1f:8f:be:36:ab:
2a:1a:d1:b6:d5:9d:58:93:e5:12:7f:89:35:7b:77:
9c:d3:88:ed:7b:84:59:2e:36:2b:81:c2:99:e3:6d:
b7:16:01:a3:58:bf:be:8e:63:ff:51:0f:5b:ce:c8:
0f:3a:13:ee:13:9f:6c:30:53:35:b0:ea:bd:3d:60:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:B3:08:88:66:AF:D0:B7:79:8A:5C:CB:11:DE:E3:A2:79:63:0E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:54:d3:90:0e:b7:d3:88:96:c0:35:0b:f5:7f:98:39:61:ed:
fc:13:4a:24:11:b7:cb:47:5e:f2:eb:e2:5a:e8:0c:f1:06:bc:
1a:f8:4e:41:1b:96:45:16:ad:15:c9:53:43:1c:3b:31:dc:92:
17:39:98:d3:e1:82:ec:2f:28:1e:20:1a:9c:95:38:3b:e4:76:
fa:af:c4:92:24:d1:0f:b4:80:d8:67:ce:12:3e:b9:a9:cf:af:
f9:82:73:0d:7e:f6:cf:83:15:2e:1d:a3:9a:29:70:e6:31:ca:
5f:b9:31:17:c0:d4:e3:04:a0:83:d4:a7:21:62:3a:26:fa:17:
7d:6e:bf:5d:62:6f:98:eb:62:cb:a2:61:2c:d9:0d:ec:54:ab:
5c:16:7a:6e:e2:a3:a7:0a:8f:ed:db:9c:0d:73:97:0d:f7:3d:
a8:2a:ce:4c:ca:4b:5e:27:2c:ff:d9:0d:30:a1:2b:31:b0:36:
d9:fd:06:aa:fd:67:f2:75:a2:42:1b:60:15:5d:10:3c:87:00:
85:83:f6:cd:23:4a:f0:9c:00:f0:4e:76:05:f2:2f:0f:be:6b:
0a:2e:13:ea:98:7b:7c:f6:2d:8b:d6:45:bb:95:89:ac:7e:f4:
27:23:9b:27:79:71:2b:63:42:c4:f7:83:7f:01:39:d1:09:02:
8c:64:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:35 2025 by rpki-client