
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
File: 96mAvWKIlGIPhZ2hxNoSzao404o.roa (raw, json)
Hash identifier: Awm0M75aLmDnsA3AEHCmDTGLs6MUQpJAUVQWeXwLPHM=
Subject key identifier: F7:A9:80:BD:62:88:94:62:0F:85:9D:A1:C4:DA:12:CD:AA:38:D3:8A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E0A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
Signing time: Tue 01 Apr 2025 02:31:26 +0000
ROA not before: Tue 01 Apr 2025 02:31:26 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 110.158.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3594 (0xe0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:31:26 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F7A980BD628894620F859DA1C4DA12CDAA38D38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:7d:5e:13:1b:86:ff:1f:c7:c4:0d:a1:a7:
16:9b:11:4e:32:a6:be:39:bb:da:86:af:a3:1f:52:
8f:bd:09:8a:bb:a0:f5:fc:49:b6:ee:2a:54:29:dd:
89:74:57:81:fc:d1:3e:21:7c:88:3a:01:05:5a:6e:
1a:f0:a5:e9:2c:7e:8e:71:4e:32:ca:93:c8:6f:3d:
a1:48:c1:ce:d5:6d:e4:ac:80:b1:3e:c4:41:d8:a3:
25:94:02:c8:40:1a:63:f8:60:a7:12:a6:ab:db:45:
13:a0:cb:0b:05:eb:55:e6:97:2e:3e:f2:a5:a9:6c:
f5:97:45:94:08:5c:63:ef:d9:2b:41:70:2d:50:97:
c4:06:2a:3c:0a:10:c1:bb:4e:7e:9e:a4:e5:30:80:
a8:35:f5:33:bb:d2:b7:85:37:ae:18:2a:03:7d:d8:
ea:76:01:c9:5d:37:c7:3f:6b:50:bc:4e:0d:9f:6d:
a0:91:ab:6b:95:87:03:71:7f:e5:ea:c5:5f:86:13:
7a:dd:d1:d7:8e:9c:92:fb:4a:a9:02:e6:da:4d:d7:
05:c9:f8:f2:10:9f:c4:23:a5:1d:87:24:a3:5e:86:
de:7b:f9:80:8e:30:f9:86:69:10:d6:22:cb:2b:ce:
d7:b1:96:50:63:d7:a5:e9:20:1d:30:62:63:a1:19:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:80:BD:62:88:94:62:0F:85:9D:A1:C4:DA:12:CD:AA:38:D3:8A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.136.0/21
Signature Algorithm: sha256WithRSAEncryption
22:03:45:66:99:a3:3b:17:90:be:3e:1b:4c:ec:13:82:a7:94:
53:5b:54:61:a0:d6:db:42:df:86:65:03:5e:6f:d9:6c:3d:de:
05:23:9a:5f:9c:a0:ae:4e:0d:81:ff:43:16:c1:50:85:0d:82:
f1:cb:cf:10:5f:57:4e:10:28:04:a9:a0:0f:8d:bc:e9:6c:69:
e9:c6:f6:8e:93:48:6c:93:00:af:24:2b:ff:fe:f7:b1:74:51:
7f:2c:d2:5f:22:9f:cf:eb:22:7a:93:82:87:b3:f2:57:4a:c6:
24:50:a8:54:26:d6:54:16:c8:02:c5:a6:c0:46:19:83:9e:6c:
79:f4:25:62:1d:e7:bc:7f:69:6c:bf:58:58:bc:11:ab:14:54:
ee:3e:4a:1f:f8:b8:94:c1:5f:39:40:0d:ad:c0:d1:36:fe:78:
95:a3:18:4d:a4:70:12:f7:f3:73:f7:46:cb:54:6a:7b:8e:6d:
e4:cc:35:f6:b4:22:8e:4c:45:e6:89:8d:f0:11:a7:80:c8:51:
68:94:40:45:f0:b3:41:19:2c:86:72:8e:16:5a:a5:6c:fd:81:
13:55:37:27:2c:5b:2f:da:49:c4:cd:47:db:1b:64:07:a8:ee:
5a:45:8a:a9:bc:16:ce:ce:3a:56:5c:87:5c:1a:eb:09:40:f4:
60:e9:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:12:18 2025 by rpki-client