
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
File: BXP8zteD0GBY_ROYRBjrwyMyhUU.roa (raw, json)
Hash identifier: aXthhuIVRU4SEbAC0GgKLZn0sg1fU9cDyC74bXcYohg=
Subject key identifier: 05:73:FC:CE:D7:83:D0:60:58:FD:13:98:44:18:EB:C3:23:32:85:45
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0FDF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
Signing time: Sat 01 Nov 2025 01:31:47 +0000
ROA not before: Sat 01 Nov 2025 01:31:47 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4063 (0xfdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Nov 1 01:31:47 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=0573FCCED783D06058FD13984418EBC323328545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:ce:84:f9:2e:8d:7e:63:7d:07:26:6b:99:
5d:38:c5:50:13:6d:4a:d2:d0:97:92:c2:87:08:86:
ae:ec:73:70:5b:ef:d1:0f:85:fc:b3:97:44:e4:be:
7c:6c:85:c3:ba:45:87:38:19:a5:2a:61:42:5d:d1:
44:dc:d7:4e:10:b9:aa:7f:3d:42:35:36:d3:51:40:
00:36:b1:c2:ab:be:17:9f:6d:1d:26:74:8b:60:66:
04:e7:d3:6f:6a:99:d8:eb:b0:5b:62:8d:6a:9d:50:
94:77:62:25:09:af:7a:41:8e:ce:ac:d0:c7:63:e8:
c1:db:12:14:aa:f5:22:3c:19:aa:9d:0b:d8:69:aa:
da:57:15:84:80:af:86:3e:c3:b4:be:f9:f4:14:2c:
8d:73:ee:dc:b5:3b:74:f8:14:d5:0e:d4:b0:ac:32:
35:65:84:3a:7d:17:d3:b1:51:cc:b7:99:05:c2:82:
41:7a:d4:9f:33:46:6f:e5:a8:f6:1c:ba:20:26:ca:
1d:ed:fa:35:08:e8:8e:cd:11:56:7a:11:f8:5a:63:
63:bc:0f:41:10:b4:c8:2b:5a:d5:98:74:3a:b7:aa:
77:95:a0:1c:17:86:44:1f:e6:35:57:d4:6b:09:18:
b2:e7:a6:d9:fd:62:1d:af:ba:fb:81:cb:53:47:e7:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:FC:CE:D7:83:D0:60:58:FD:13:98:44:18:EB:C3:23:32:85:45
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.46.0/23
Signature Algorithm: sha256WithRSAEncryption
65:e7:84:ad:74:f0:95:c9:c5:25:87:c6:db:b2:d7:9d:72:2e:
aa:e4:49:d8:65:0e:1a:73:18:be:c2:1a:0d:99:b1:3e:cb:50:
5e:b8:39:df:6c:4a:1d:9f:62:9f:06:d6:11:52:81:ca:af:26:
cb:33:eb:59:65:f4:dc:99:6b:de:b0:c0:a8:6d:d4:b0:1b:fc:
03:ad:c3:19:98:04:e9:a9:bb:ca:36:6a:be:43:86:80:b3:ed:
1e:63:18:62:49:1a:ae:af:5f:0c:71:69:59:4f:cf:a4:25:c7:
a2:e5:1b:ac:23:56:2a:59:3d:0c:6d:f4:ad:d3:c7:7c:c2:42:
6b:fc:ed:c2:62:c0:38:ac:f7:fe:f1:d3:2f:ef:fd:0b:26:88:
0d:bf:a8:17:06:74:13:22:76:c5:f0:8b:ad:96:fa:15:1b:95:
8d:fc:a7:52:0e:46:f6:5e:b8:5f:09:83:4c:34:bf:c6:8c:cc:
f5:a2:7c:86:31:47:ca:eb:74:e0:b8:6a:f5:b3:b8:86:69:cf:
94:db:95:9a:48:e6:18:77:dd:5a:dc:84:3d:f2:46:3e:41:90:
7a:4a:57:c6:d4:11:26:ea:0c:a0:2b:f2:c7:01:f8:13:f3:26:
7a:23:fa:25:6a:f0:63:07:9e:28:88:29:d6:c4:0f:56:86:a7:
af:2b:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:08:47 2025 by rpki-client