
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa
File: N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa (raw, json)
Hash identifier: Rlm0E2whZo0Rb4xof/qodyIr9r/h4OEF8i8BbOPqias=
Subject key identifier: 37:DA:15:D2:F3:4C:30:76:86:95:99:5F:53:5B:31:AC:25:FB:24:26
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F00
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa
Signing time: Tue 10 Jun 2025 11:16:46 +0000
ROA not before: Tue 10 Jun 2025 11:16:46 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 27.230.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:16:46 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=37DA15D2F34C30768695995F535B31AC25FB2426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:92:f5:83:ea:8b:a2:2f:31:a0:b1:de:e4:
eb:b7:0d:48:66:b8:84:1b:51:4f:d9:4c:34:88:09:
e8:c3:e8:6d:73:6b:a3:9e:02:b3:12:0b:d9:ab:4a:
e2:b0:64:d1:71:59:e5:31:9b:e9:60:82:4d:c9:d7:
7a:59:79:d1:2a:05:5b:14:75:4f:6b:a5:b5:e8:f1:
73:bc:a4:0a:2b:7b:cf:cd:67:ef:75:7d:7b:85:3f:
f8:37:48:03:8e:33:c5:5d:44:2b:59:7b:20:a8:db:
b3:ae:03:41:66:58:13:e9:30:29:3a:0d:69:47:e1:
9c:1a:8a:54:f7:ae:b7:9d:57:3b:fe:fd:dd:ea:db:
e4:39:f9:26:b1:24:f6:f6:f5:ad:06:1f:41:b9:47:
5e:0e:6f:c6:30:a5:78:4d:d9:ff:71:b9:17:3b:8e:
d5:0b:5c:b5:9a:f5:e2:6d:f2:09:b5:09:4e:9a:f0:
bd:d1:13:83:88:ae:9d:c6:dc:9b:f9:1e:7d:83:f9:
23:22:2f:7a:1a:00:bd:73:bf:1d:05:8f:2b:e1:f3:
5e:1b:2c:23:b7:4c:7d:91:75:76:d8:30:d0:c1:ac:
a6:63:62:56:79:e4:7d:91:49:d8:5d:a1:c4:5c:62:
2d:b8:5d:f8:c4:45:0f:15:a9:ae:ed:32:08:3f:68:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:15:D2:F3:4C:30:76:86:95:99:5F:53:5B:31:AC:25:FB:24:26
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.50.0/23
Signature Algorithm: sha256WithRSAEncryption
24:24:7e:b4:3a:e2:f3:04:1d:03:e4:b4:d5:c4:98:a1:00:4e:
51:bd:be:36:29:d4:a2:95:e4:c4:ad:64:dd:5e:d9:4f:db:e3:
1e:30:8e:76:11:8b:f0:4f:15:13:4b:25:29:a8:3f:5a:8f:eb:
d3:d6:41:ae:53:2d:03:56:bf:e5:af:03:6e:e0:5c:45:56:c7:
a7:4c:8f:8a:da:d7:0d:e6:4a:fa:58:8e:c6:25:73:86:4c:7c:
37:e6:e0:34:ee:34:c4:75:17:d5:09:0e:35:19:63:89:99:70:
47:f6:62:a9:2a:ea:e0:83:1b:cd:31:8e:06:04:5c:ca:07:8e:
aa:d2:8f:b0:e1:64:18:90:10:b1:9c:e9:f0:11:39:79:3a:58:
fe:5e:ef:09:82:5e:e8:a6:89:4b:8f:67:6b:3a:79:df:0a:c2:
52:40:30:dd:bd:b2:1f:dc:ed:c8:9d:04:8a:ff:7e:a6:89:59:
72:b5:97:28:f0:0a:5a:12:a3:b3:8b:27:87:f5:92:b0:a2:2b:
be:70:7f:3f:4e:36:9b:1c:f2:48:a9:da:5d:bd:8c:7d:fb:f1:
78:3e:19:aa:bb:ee:cf:65:84:9d:6d:68:30:31:49:83:6b:7e:
fe:13:15:cb:f7:ab:eb:2e:2d:12:09:f4:b3:2b:33:1c:2a:45:
4b:b5:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:05 2025 by rpki-client