
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
File: PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa (raw, json)
Hash identifier: U9vorvQJZb6X6wDBGwSmbU5j//M9Xg3kHj/xDpuNJGw=
Subject key identifier: 3D:E0:F8:C9:0E:02:A1:D5:D9:AA:23:5E:10:6E:23:DD:EC:FB:1A:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0DA4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
Signing time: Tue 01 Apr 2025 02:24:38 +0000
ROA not before: Tue 01 Apr 2025 02:24:38 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:24:38 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=3DE0F8C90E02A1D5D9AA235E106E23DDECFB1AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:89:2b:2f:37:25:18:2a:30:41:ee:65:14:
f3:09:05:20:de:67:6a:f6:97:12:a6:ac:80:22:54:
b7:7d:c0:61:b6:65:09:2b:25:46:cf:f7:9a:3b:2b:
82:95:4b:97:dc:72:37:3f:fa:0e:a0:fd:db:cc:a6:
e9:b3:b1:a9:c0:fb:1c:ba:19:5e:49:3e:49:b1:d1:
f8:55:d0:d3:5e:31:f9:9f:da:d2:6b:f1:bf:b7:ee:
e7:4e:a1:26:09:88:3b:67:44:86:2e:ed:17:2c:ab:
f8:61:cf:fc:af:ad:97:93:cc:a6:16:f1:4b:fa:34:
f0:e0:28:a9:99:28:44:ab:0c:5c:d0:dc:23:21:3e:
f9:ff:c9:fe:7e:71:85:ed:8f:17:ca:44:e2:e7:49:
7c:23:da:47:bf:73:db:23:40:e1:01:2e:e7:22:46:
9f:6e:5e:3e:ef:bc:dc:6e:04:aa:9b:57:87:34:10:
3e:29:00:a0:f9:8f:c0:17:f6:da:46:4c:09:f2:89:
b5:4e:d6:c7:13:47:76:21:d7:99:e4:4f:ca:90:42:
e7:95:2f:25:c8:79:52:d0:1a:ea:00:76:9d:85:80:
09:6c:05:7d:9f:4e:6d:f7:37:55:49:3e:63:48:1d:
60:2a:7c:4b:c2:ee:a7:14:9d:19:9f:de:04:c1:58:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:F8:C9:0E:02:A1:D5:D9:AA:23:5E:10:6E:23:DD:EC:FB:1A:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
80:af:92:0b:4c:96:11:2f:b8:d0:b2:a1:c7:be:d3:f8:04:8a:
d3:2f:c5:be:bb:e5:0f:3b:76:23:ea:eb:6d:8e:5c:0a:77:08:
98:b8:d4:fb:f5:57:f0:5f:e9:4d:44:75:fc:d5:67:1b:b2:65:
58:77:43:3f:8e:3e:ed:31:6c:cd:fb:f9:5f:5f:8c:41:32:a5:
fb:09:5a:12:33:e0:b9:47:50:dc:62:a7:59:d0:ab:ac:d9:1b:
a8:52:73:96:b1:07:b1:5b:de:11:d0:96:bb:8f:f4:01:7a:8b:
c6:aa:83:16:e2:83:01:52:a4:f4:e0:a5:42:9b:b8:45:d9:88:
d2:ba:10:d6:a1:56:f0:d8:63:82:a6:a6:5d:93:bb:fd:d0:c6:
d2:52:d7:d6:67:af:dc:f5:99:e1:8d:16:6f:93:97:e9:e0:15:
ac:8c:41:fc:34:e0:25:2e:a6:64:56:c8:61:10:6e:2b:03:f9:
fb:35:35:71:2a:fb:63:b3:42:20:dc:26:93:25:fb:52:71:18:
7f:6f:4b:fe:ee:1d:8a:4b:a7:f4:6e:60:f3:e8:b3:f2:db:73:
00:7d:1b:1c:29:f8:84:86:e6:e3:dc:fb:b2:fe:d8:b2:1f:4f:
f4:54:8b:27:b6:de:6b:f1:11:15:8f:35:a7:e7:f4:26:10:4f:
8c:21:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:06 2025 by rpki-client