
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa
File: 8XBaJm9qjhBGrVj6drYiKlLMECw.roa (raw, json)
Hash identifier: jAjhTO0rcco8IYll2iMo0HPaAl0ygyiwu+HRV29ZZcw=
Subject key identifier: F1:70:5A:26:6F:6A:8E:10:46:AD:58:FA:76:B6:22:2A:52:CC:10:2C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C4A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa
Signing time: Tue 01 Apr 2025 01:57:20 +0000
ROA not before: Tue 01 Apr 2025 01:57:20 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.73.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:57:20 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F1705A266F6A8E1046AD58FA76B6222A52CC102C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:6c:12:33:23:88:30:4b:b9:fe:95:1e:d1:
22:64:96:a4:ca:9b:b8:b5:55:70:9d:d0:6d:60:5e:
13:96:fd:8b:d9:2d:29:98:1f:80:b8:5b:b6:94:c4:
bf:80:45:44:c3:44:b4:f6:f9:c8:6b:80:4e:6e:05:
32:25:35:a7:aa:b0:0d:10:2f:3c:a2:aa:5e:89:5a:
53:46:53:b8:99:35:3a:12:cb:8d:12:8f:ec:ad:06:
85:1c:ac:38:16:d7:3e:80:e0:c7:a5:d3:f8:29:f0:
52:52:ce:4e:25:55:fa:b7:8a:46:fe:5d:6c:82:8e:
f4:bb:8b:68:d0:e5:73:ef:97:96:df:7e:85:b4:7a:
84:df:9c:f5:2a:86:76:c4:ff:20:9a:46:63:87:d4:
81:19:68:4d:63:ec:63:52:2a:1d:bd:93:40:53:a2:
1b:3b:e9:9d:0a:fc:3c:e5:57:e9:3f:37:d1:10:b0:
e0:78:5d:e3:d5:7f:d3:d3:8d:75:d3:2d:9e:58:d9:
5a:e0:9f:4e:c0:03:a1:ee:43:54:9c:54:2a:4c:74:
a4:ec:95:18:d1:f4:48:c2:9b:da:b1:2b:fd:f1:98:
c0:f4:fa:d9:78:b2:fe:16:a3:3b:dc:cc:30:90:3f:
4b:05:49:b1:bc:15:3e:dd:ca:68:fc:67:73:1e:6a:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:5A:26:6F:6A:8E:10:46:AD:58:FA:76:B6:22:2A:52:CC:10:2C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.73.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:0c:bb:39:8d:da:21:49:be:2b:23:a1:d4:19:6f:21:33:66:
9a:ce:2a:9d:d1:46:49:20:a6:94:02:9a:23:fb:68:f9:14:78:
be:ae:a2:0d:c8:7e:5a:0c:2d:d0:1c:0a:96:a0:04:c3:48:55:
4a:d3:49:2d:03:56:e1:b4:a1:ab:ba:12:7f:36:7f:cd:55:37:
ba:d3:50:84:90:24:0f:42:99:63:94:e2:03:bf:22:f8:f0:35:
1e:53:78:4d:80:67:3f:d2:88:9d:98:9f:b6:79:1a:cb:ee:f8:
d1:95:9b:be:2e:80:64:f9:41:72:f6:c4:5b:a9:e1:28:96:fd:
95:a2:74:c6:4d:65:b0:3c:3b:fd:d0:3d:27:e6:c3:1d:41:86:
c9:86:80:5a:03:d9:82:42:18:80:a8:e4:10:72:da:f4:e2:4d:
a2:1f:30:e2:f9:36:3b:da:fb:a3:81:b5:45:8b:18:86:4a:2b:
0e:9f:7d:c7:ff:82:34:58:de:7c:b7:28:fd:91:e8:d1:fb:36:
f2:c4:6c:09:95:44:73:b1:bd:ab:2c:69:8e:ff:7e:24:76:eb:
0b:6b:a1:32:ea:55:41:55:53:22:34:b2:2c:0b:7a:13:22:05:
94:60:83:a5:51:7d:ee:ce:db:1b:e4:af:2d:36:fa:c5:91:b0:
23:cd:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:52:47 2025 by rpki-client