
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZdU8QcW1QYRqaa8d00JUK-EYek.roa
File: FZdU8QcW1QYRqaa8d00JUK-EYek.roa (raw, json)
Hash identifier: t/5atW+FJNVMO5rc/Bfvt2ihsWwUmVfBhTBJUWtP3tM=
Subject key identifier: 15:97:54:F1:07:16:D5:06:11:A9:A6:BC:77:4D:09:50:AF:84:61:E9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E26
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZdU8QcW1QYRqaa8d00JUK-EYek.roa
Signing time: Tue 01 Apr 2025 02:33:29 +0000
ROA not before: Tue 01 Apr 2025 02:33:29 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.104.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:33:29 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=159754F10716D50611A9A6BC774D0950AF8461E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:5b:71:2c:e7:d6:b9:0a:46:7d:3b:88:3d:
7c:95:a8:b0:c6:c0:eb:b1:3e:36:33:4b:4c:78:ab:
0d:fc:e3:57:40:b1:a7:38:0d:f6:b7:d9:6d:01:34:
ba:ad:03:7d:5f:df:2c:01:a8:7e:33:09:08:9a:e5:
6a:83:a4:a2:76:76:53:79:ed:f9:8b:de:27:57:b6:
db:98:73:ff:92:d3:df:50:0c:ce:54:50:bd:b4:40:
16:8e:4f:a7:ee:4f:7a:f2:21:b5:0b:1b:39:da:c7:
c3:de:ad:cf:b8:a7:c1:18:2a:12:f6:95:d9:92:aa:
b3:67:6d:28:71:34:8b:0a:01:c0:5e:bd:5b:f3:a9:
47:29:3d:5c:38:08:c6:33:f4:01:29:56:cb:16:00:
74:0b:5a:84:84:67:31:c1:7c:4b:d6:5c:fc:bc:0a:
45:87:b1:db:63:61:4c:69:8e:c5:30:f3:66:60:82:
0c:8e:d8:78:6e:7f:b0:4f:2a:ee:86:62:e1:8d:d7:
f9:5c:4d:a9:98:eb:d2:2f:de:c9:c6:46:0b:34:e4:
e2:be:aa:66:71:90:15:ab:66:58:f6:12:fb:51:a8:
51:1a:37:5b:68:7d:e7:b6:1f:93:47:41:47:88:68:
04:40:5e:92:4b:b3:5f:4c:01:31:18:46:9f:ab:97:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:54:F1:07:16:D5:06:11:A9:A6:BC:77:4D:09:50:AF:84:61:E9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZdU8QcW1QYRqaa8d00JUK-EYek.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:19:fc:fc:d7:51:fb:72:1e:26:4d:bc:44:1a:74:74:7c:86:
0a:68:27:f0:cd:63:bb:80:f2:21:fb:36:9e:c3:f2:61:67:78:
d6:91:b6:98:d2:87:24:1f:e1:3b:ed:f0:b8:e3:96:21:9a:b1:
e9:45:9e:82:f3:3a:8c:2e:02:5c:6f:13:cd:b5:4e:36:0f:0b:
ae:21:be:75:58:b0:32:70:8a:46:9e:ca:a4:01:ab:ef:10:47:
f5:8b:1f:1f:f3:15:b6:40:cc:4e:2d:47:e0:49:21:b7:8e:1d:
aa:88:5c:0d:2f:52:48:af:f4:43:18:25:0e:36:c6:55:09:89:
e5:96:33:97:6b:1a:bf:1e:57:88:4d:38:a5:0b:7e:51:90:0d:
d9:2e:ad:a9:ff:26:23:2c:03:7f:a9:71:08:c5:6f:66:7f:2b:
61:37:9d:02:62:0f:d8:fb:52:7c:d5:ca:df:2e:bb:44:3d:d8:
47:de:29:77:88:95:24:56:28:c3:dd:7a:d0:6e:97:d0:bb:39:
b0:6f:07:d2:7f:74:82:c2:4f:03:4a:73:1b:1b:35:bd:a7:cf:
26:c7:2e:c2:6f:e4:c2:4e:bf:cf:79:4c:64:6b:10:f5:44:5f:
d1:0b:1f:96:56:96:aa:af:94:69:8c:cb:ca:45:ae:cf:47:2f:
d7:c6:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:27 2025 by rpki-client