
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa
File: GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa (raw, json)
Hash identifier: /WBr5TGUSSwlo3MIp1tIp3NN5OAU7wqjKRJpcZgxnYc=
Subject key identifier: 18:E1:C1:87:02:82:79:13:FD:2D:2B:BA:03:71:60:DC:15:79:4B:0F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C94
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa
Signing time: Tue 01 Apr 2025 02:03:23 +0000
ROA not before: Tue 01 Apr 2025 02:03:23 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.98.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3220 (0xc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:03:23 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=18E1C18702827913FD2D2BBA037160DC15794B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:db:4a:d0:0c:a8:08:91:f9:14:25:98:14:
52:7c:e9:ed:4f:22:03:bf:da:82:07:b8:fa:b0:3d:
df:12:14:2d:94:c0:11:cd:c7:5d:74:d6:28:a1:ce:
c2:dd:ef:76:43:e0:52:20:70:51:93:eb:5d:3e:0e:
04:bf:c1:8e:e7:3d:dd:36:33:8d:b7:f8:61:9e:fb:
d9:a2:12:04:c5:8c:fa:56:44:0e:3f:14:c6:bc:1f:
0e:e8:33:62:25:67:8f:09:ff:1c:11:08:11:2d:2a:
32:87:c7:c1:3c:19:1d:a8:c1:47:b9:15:44:6b:ae:
7c:89:d0:cc:e0:9e:b8:c8:0f:2a:ab:21:16:de:33:
99:58:04:99:32:21:80:62:f0:5b:9c:e9:57:13:d2:
0a:7a:ee:92:ad:94:e1:1c:c9:c2:3e:8a:07:66:26:
c6:56:64:4b:54:d6:cb:f4:2e:01:a6:05:66:29:c8:
32:4b:ba:6d:b2:ba:58:f6:2b:10:e8:77:68:77:5e:
d4:e3:1c:b4:3f:3d:07:7e:d1:f1:f8:19:77:3f:5a:
c4:79:48:86:7a:7c:71:07:e6:24:8e:8e:9c:f1:1a:
d5:ce:cd:17:a3:51:ea:7d:7c:c5:72:07:e2:26:1b:
72:3c:db:5e:88:f2:40:27:1a:59:47:9f:4e:97:8a:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:C1:87:02:82:79:13:FD:2D:2B:BA:03:71:60:DC:15:79:4B:0F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.92.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e4:21:fc:d9:76:39:d7:13:9f:90:5b:43:af:4c:96:69:cd:
28:58:69:fd:1b:8f:25:53:9f:61:86:63:47:00:18:84:22:9a:
a3:94:1a:e9:e1:25:d9:e8:0c:3b:49:a8:de:c9:77:2b:41:d3:
dc:a9:6b:4c:46:64:26:bc:3e:a2:d2:a2:d2:c7:48:04:f2:5c:
84:a9:30:52:4a:28:82:8a:8c:70:21:d4:77:c8:c7:a0:58:5b:
07:07:b1:dc:5c:5c:e4:f5:89:93:ae:86:b5:98:8f:04:ce:8f:
96:c5:ef:6f:96:09:3e:f5:49:7f:25:5e:98:3f:53:1f:96:23:
df:a1:7b:73:16:4f:d8:47:f7:3f:13:7b:a0:b2:49:76:9b:9a:
1c:9f:b1:de:7d:93:e9:b0:e7:7c:d7:20:69:97:ca:40:cb:c9:
1e:2e:ee:1a:73:9e:c4:75:50:85:9a:63:b3:5b:ea:d1:46:14:
b8:ec:5f:2f:5f:3a:8a:3b:23:03:dc:71:e6:7f:d8:1a:66:ae:
dc:62:76:c8:f2:e0:14:94:6c:3a:89:ae:56:b5:6b:9d:13:3b:
38:58:18:59:96:3e:4f:ba:32:b1:f4:af:ee:c6:16:d2:41:ae:
dc:ca:cf:09:c4:89:46:e0:7e:8f:64:24:9c:88:a5:15:2d:4b:
b6:1e:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:48 2025 by rpki-client