
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
File: SIGWK4IA39r3GYIQY7cSCSyuA1c.roa (raw, json)
Hash identifier: gxRjZYY5OivndrQq6R9iEJ+E6UlzyUGQZgU2ERbqXKs=
Subject key identifier: 48:81:96:2B:82:00:DF:DA:F7:19:82:10:63:B7:12:09:2C:AE:03:57
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0D8E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
Signing time: Tue 01 Apr 2025 02:21:33 +0000
ROA not before: Tue 01 Apr 2025 02:21:33 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.98.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3470 (0xd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:21:33 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=4881962B8200DFDAF719821063B712092CAE0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:6f:72:6c:49:2c:e2:d2:a6:e1:20:11:b9:
1b:a4:c3:47:26:71:f6:8f:c8:fc:c0:5c:45:68:21:
e9:c0:48:02:25:3e:47:c0:a1:8b:10:e5:31:7f:ac:
93:1c:b3:26:aa:b1:95:92:61:d8:db:3e:3c:c8:12:
36:e8:a8:3c:32:a2:22:13:35:7c:66:67:52:1f:b4:
8d:2b:44:f7:29:66:21:ed:a2:71:b5:2f:5b:60:69:
dd:e5:0f:9d:3a:f4:0d:2a:80:98:35:80:bb:c4:d0:
d1:87:5b:d3:2a:3f:8b:1a:e2:61:a2:23:90:67:83:
53:93:ff:8b:17:f3:3d:84:95:d6:cb:4b:af:29:39:
ff:c4:b3:4b:ba:f3:69:82:34:d7:90:8f:b5:92:a9:
47:35:ec:81:46:96:ad:1e:3e:52:de:81:ae:94:f4:
57:26:6a:59:8b:37:b9:ba:0f:d6:92:27:cd:00:ba:
82:8b:55:27:f1:88:dd:9d:1b:40:0c:48:14:4a:a3:
38:81:fe:19:ba:19:dc:3d:2d:84:1a:6f:ab:76:ee:
17:f2:bc:c1:30:d3:50:bf:1d:56:cd:b8:e3:b1:80:
78:d2:a3:fe:aa:c8:78:ea:ae:1b:11:a4:22:f5:ed:
b2:5c:90:28:4f:24:22:d9:19:d9:f6:33:f1:4a:c3:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:96:2B:82:00:DF:DA:F7:19:82:10:63:B7:12:09:2C:AE:03:57
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f9:ae:05:b8:37:97:4c:b4:77:a1:af:2d:48:63:a4:a9:5d:
71:81:60:0d:d8:bc:60:7f:0f:ba:3e:3a:c1:6f:eb:3c:dd:02:
6b:6e:c4:6b:8c:45:60:c1:73:4f:6d:5b:31:27:d3:68:2f:41:
a9:e1:c9:13:a2:91:6d:91:dd:15:15:32:ce:3d:aa:28:16:b7:
ab:a5:3d:b4:b2:e3:ad:c3:03:59:b1:a5:ed:4c:a1:20:62:f8:
0d:7f:ba:dd:9f:44:f0:55:77:39:24:b0:08:bf:33:9f:1e:3e:
f7:29:6c:3a:8b:b7:2e:9e:b7:63:6b:da:e7:81:00:e0:5a:1a:
63:5d:16:62:09:f6:3a:f5:31:0a:82:32:3b:72:14:d7:e8:bd:
04:73:a8:07:79:36:d0:0f:27:92:a6:06:77:e6:98:14:2c:56:
6e:03:cd:70:e9:f6:09:07:fa:0b:fa:75:b8:01:e9:98:22:b4:
89:7f:e6:42:9c:00:ff:a1:90:3d:61:8b:ea:0d:0f:f0:a9:f7:
85:90:66:c2:ba:64:78:bc:56:e2:12:3b:85:ee:03:80:f4:66:
15:1b:8e:0c:d3:2d:38:f0:90:ea:28:86:93:19:df:27:66:0f:
54:e2:64:ee:b4:e0:84:bd:6d:d0:e2:25:d3:bd:db:3c:55:7d:
7d:fd:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:16:00 2025 by rpki-client