
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/849noGw0vn-fQcKSZt_e69cp4x4.roa
File: 849noGw0vn-fQcKSZt_e69cp4x4.roa (raw, json)
Hash identifier: q9DIfTwkfd+FHnowJju+26Zz5/40XNPc1ZCI9HBCi3s=
Subject key identifier: F3:8F:67:A0:6C:34:BE:7F:9F:41:C2:92:66:DF:DE:EB:D7:29:E3:1E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C9D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/849noGw0vn-fQcKSZt_e69cp4x4.roa
Signing time: Tue 01 Apr 2025 02:03:27 +0000
ROA not before: Tue 01 Apr 2025 02:03:27 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:03:27 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F38F67A06C34BE7F9F41C29266DFDEEBD729E31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:ae:c0:34:c5:48:ed:26:39:56:f4:e5:94:
34:22:63:4a:22:77:21:d9:e6:b6:80:c4:db:ed:69:
bd:d7:6c:ec:18:63:20:98:77:eb:ee:a8:ec:1f:1a:
2b:ed:ac:3d:1a:9c:50:ed:2e:0e:3d:4e:dc:a8:0d:
98:56:b9:8a:0f:ca:ca:19:45:b7:30:49:de:55:2f:
02:dd:45:9d:97:43:f8:d5:82:89:4c:95:a0:9c:d2:
b3:36:4f:a3:7e:d7:9e:eb:44:e4:15:df:ea:ca:e9:
c1:53:ea:86:46:83:e8:38:72:d2:0a:12:cd:b0:c3:
27:bf:f1:c6:75:10:c5:a7:75:e5:f3:95:ff:39:39:
68:f8:5f:e3:6b:cb:27:15:a4:b8:d3:3e:09:e2:1d:
43:d2:bc:4b:68:9d:c4:bd:cc:55:ec:9f:18:70:af:
c6:6f:3a:ef:7c:bf:a8:2e:05:2f:99:7d:23:48:e5:
c2:38:ef:14:06:64:77:32:19:30:58:21:00:c0:77:
68:46:ad:ad:bd:b0:04:bd:08:1e:9f:43:8b:76:91:
73:d6:81:0f:64:79:7b:07:d1:14:e0:46:15:3b:6e:
90:ac:88:b8:68:5b:d8:39:fb:98:69:b3:79:3c:4b:
6c:fc:a7:7a:ce:41:8b:28:89:d6:ab:6c:31:0c:f4:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:67:A0:6C:34:BE:7F:9F:41:C2:92:66:DF:DE:EB:D7:29:E3:1E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/849noGw0vn-fQcKSZt_e69cp4x4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.10.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:78:ae:73:b2:42:f9:8b:fc:b6:0d:c2:33:e3:55:75:3f:
a2:88:f2:62:e2:4c:fb:ab:bd:9c:fb:6d:ee:95:c6:f7:6e:cb:
ce:5b:ce:1f:68:91:04:33:8d:18:59:35:29:9d:c3:db:85:1d:
77:0c:4b:cc:bf:92:6f:6e:94:75:3a:6b:df:6b:0c:ea:83:ad:
af:83:44:82:14:f8:3b:d4:7b:ab:9d:f4:e4:36:21:02:70:62:
35:00:56:b7:33:89:29:7e:44:da:a3:05:a7:54:2a:70:16:28:
5f:88:29:58:67:75:49:c4:d6:8a:9b:b1:ef:47:54:76:c1:80:
56:59:33:3d:35:2a:a9:94:dd:ec:8e:eb:16:5e:11:89:cb:6e:
29:42:b5:14:02:1c:fa:8a:72:36:5d:04:70:99:f6:b9:26:52:
59:02:a7:3b:21:61:83:4d:6c:20:a0:b0:76:08:28:79:29:c3:
16:5e:1d:f1:84:dc:a1:d3:c9:ac:38:d7:76:13:2e:e4:a2:a0:
d7:f0:68:4c:03:45:d8:1a:53:74:70:14:a6:50:19:c4:d3:80:
be:b3:26:26:1e:a8:a4:47:99:d2:ac:b4:83:02:c2:8f:62:bc:
b3:de:13:16:e6:93:fa:92:cb:78:07:35:95:e3:fb:0b:77:d4:
1b:a9:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:11:13 2025 by rpki-client