
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa
File: Wy0JteGj0X1JvY3XDBTBdtQZazo.roa (raw, json)
Hash identifier: vgT/skj0kmIlfOoNfdSRk67t8qahMkB+8NINgI6yZlM=
Subject key identifier: 5B:2D:09:B5:E1:A3:D1:7D:49:BD:8D:D7:0C:14:C1:76:D4:19:6B:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B45
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa
Signing time: Thu 06 Mar 2025 07:12:36 +0000
ROA not before: Thu 06 Mar 2025 07:12:36 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 6 07:12:36 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=5B2D09B5E1A3D17D49BD8DD70C14C176D4196B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:48:83:ca:83:f8:a2:0d:c8:2f:9d:fd:f4:
99:e1:e2:ee:bb:c9:c8:10:f9:15:04:fb:e6:be:f5:
75:05:b3:d0:58:2e:f1:6f:3b:b0:43:f0:8a:c7:3e:
0d:ae:66:4c:1f:47:08:66:c6:31:ae:23:f9:4e:62:
51:fb:c6:e4:5c:d4:a5:8d:81:41:f9:12:76:14:e8:
02:68:ed:7a:0a:38:f0:c5:77:1d:e5:67:f3:17:7c:
b5:b6:3a:38:43:2e:69:bb:4f:a9:8f:44:5e:f3:17:
25:13:62:9c:47:6f:f1:de:c3:55:a7:9b:be:19:03:
5a:f6:45:ae:69:0a:13:1a:40:13:35:56:7d:86:30:
8e:21:eb:3d:d5:0a:11:8a:79:e0:b6:41:38:5e:7c:
da:4e:e9:ae:d7:a3:d4:06:ae:64:c2:27:39:1e:c4:
dc:24:13:61:40:be:7a:1b:ce:43:69:59:96:b0:0d:
c5:28:2d:6d:8c:ed:7c:f4:cc:68:8f:9f:80:eb:ec:
f8:81:e7:88:d0:5e:0c:db:c7:0d:4f:ac:5a:86:d7:
9f:69:f0:8d:ae:44:f9:6c:79:26:19:7e:a3:c2:8b:
f3:03:b1:33:9d:fa:5a:c0:6f:aa:a0:95:de:32:17:
90:f0:43:81:62:f5:f8:c2:ed:13:3d:bb:26:aa:08:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:09:B5:E1:A3:D1:7D:49:BD:8D:D7:0C:14:C1:76:D4:19:6B:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0d:39:73:c2:74:ce:eb:aa:a8:08:9e:8c:b2:86:23:eb:5d:
35:df:3e:f0:6f:da:9b:be:bf:14:11:3e:e6:12:cd:c3:b6:c6:
05:31:de:9b:65:46:f2:56:12:d3:af:bd:a6:d4:2e:d8:b4:47:
23:4d:b1:ef:4f:24:de:35:08:39:ab:9d:39:51:fe:74:18:b2:
11:2f:8c:08:64:1f:cd:58:5b:d3:a8:42:0c:70:b3:f1:19:65:
37:69:c4:79:c5:2a:ff:d5:ad:02:2b:2a:b3:4a:3f:b9:28:58:
09:2e:e6:a2:93:fb:7e:05:2b:b7:36:0b:58:77:8c:ee:80:2a:
ba:a4:19:c3:a5:b2:43:e5:22:18:ac:40:54:77:54:8f:a9:95:
32:a8:01:21:eb:7b:5c:3a:f7:ee:56:97:c9:a3:1e:f1:ad:ca:
fc:2b:47:60:15:61:7c:15:bb:15:05:b3:e3:56:f6:bf:b3:83:
ce:9a:51:7d:84:eb:e2:9b:dc:e7:a4:ae:9b:82:17:9b:61:8d:
1c:54:84:85:eb:71:12:89:c6:90:62:68:b4:38:7f:2f:0f:7a:
47:70:84:83:8a:8b:ce:16:03:2c:23:30:ce:4f:3e:c6:06:45:
8a:9d:fd:ea:65:31:41:d4:00:6a:1f:ea:b9:cc:2a:74:3b:51:
14:ff:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:24:50 2025 by rpki-client