
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
File: 6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa (raw, json)
Hash identifier: S3Mr3js7TyDFx5NJZvVo1dFuY9wDpYX50KXI2XQqDQQ=
Subject key identifier: E9:92:0F:EC:B9:76:91:49:98:BD:D1:16:8F:1D:0F:DF:6D:B7:3E:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C68
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
Signing time: Tue 01 Apr 2025 02:00:30 +0000
ROA not before: Tue 01 Apr 2025 02:00:30 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.98.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:00:30 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=E9920FECB976914998BDD1168F1D0FDF6DB73E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:df:de:9a:0c:09:27:78:8c:a7:10:49:5b:
3f:90:7b:94:28:fd:f0:11:48:a5:0f:12:9b:94:0c:
cd:8c:ae:9e:d6:08:cc:86:25:cb:db:e0:8f:ae:d2:
9d:49:ea:b3:ef:47:4b:2e:07:13:0d:00:a1:b3:f4:
f8:33:6c:7a:de:e9:97:ec:16:c3:c5:6a:59:ed:5b:
57:45:d7:27:79:20:e4:3c:6b:3e:38:c8:3f:33:4a:
92:47:18:3d:e8:e3:ce:dd:19:e2:6c:d6:7a:da:54:
ab:28:d8:a9:2a:d5:5d:e8:62:b2:61:53:b9:b9:46:
ba:47:ef:27:12:0a:4a:94:94:8c:7a:46:2b:8a:87:
15:a7:70:2d:f7:91:27:3c:de:5e:af:7d:f1:12:1b:
2b:cd:ae:af:88:6f:cd:8b:78:96:09:ab:55:28:4f:
a2:5a:78:78:14:4b:d2:1c:7c:b8:b8:a7:2e:bd:6b:
0b:5f:0e:df:55:a7:ea:ce:f6:41:63:72:0b:45:2e:
8f:7a:14:48:a6:18:49:af:6a:40:eb:30:f3:cd:00:
10:e6:50:f8:f6:5a:8c:9d:51:c7:96:64:18:22:36:
ec:96:82:db:a5:6c:a2:f2:00:7b:dd:4f:de:96:0d:
4d:20:a3:cb:54:16:a8:fa:e7:49:f9:0e:ec:7f:da:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:0F:EC:B9:76:91:49:98:BD:D1:16:8F:1D:0F:DF:6D:B7:3E:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.144.0/22
Signature Algorithm: sha256WithRSAEncryption
51:1d:c7:06:3f:19:5f:b9:58:21:92:50:30:b8:14:d2:d6:0f:
52:d2:06:15:83:99:cd:ce:b6:4a:e2:1a:33:6b:56:e5:54:af:
81:f8:28:44:9f:75:fd:fb:e8:41:14:2f:13:b1:27:18:97:6d:
6d:93:f2:87:07:a8:1a:c3:ae:fe:6c:68:ee:ba:12:d4:37:d7:
07:a1:93:13:8c:a5:68:94:5b:d1:64:f3:64:18:03:d3:1f:1e:
32:1e:66:0c:af:2a:1d:b6:59:0e:5b:c7:bb:28:18:48:d0:6f:
d2:25:0f:aa:42:35:fc:dd:46:6b:e6:65:00:41:b8:29:25:c8:
4f:ba:fb:b2:97:36:e0:a5:65:7a:ac:9e:ed:c7:bd:fa:6b:20:
a4:d1:4e:f7:29:a6:4b:8f:0f:a3:d2:f9:89:ad:a4:ca:03:ee:
c6:90:98:b9:38:b6:07:71:6a:c4:d3:cf:01:71:0c:1c:bb:f8:
42:e6:38:cf:94:db:1e:7d:22:39:a7:2d:fc:ec:16:9e:9e:e0:
4e:c1:d5:93:2b:63:49:7e:97:8d:10:96:dd:ec:89:ec:5f:21:
0c:91:42:38:8c:d9:af:67:dc:c1:7d:7e:81:28:a7:d5:8e:6b:
e8:4e:10:1e:bf:e4:7a:65:9a:51:15:e4:32:81:42:58:3d:83:
39:0b:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:47 2025 by rpki-client