
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
File: XgzQhy0QBGyM-BV_UluoIRNDLis.roa (raw, json)
Hash identifier: uwBj9lu8rExXkvQgNIJVZbP/gVei6uQYn+c4fRyR738=
Subject key identifier: 5E:0C:D0:87:2D:10:04:6C:8C:F8:15:7F:52:5B:A8:21:13:43:2E:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F2C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
Signing time: Tue 10 Jun 2025 11:24:29 +0000
ROA not before: Tue 10 Jun 2025 11:24:29 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 1.79.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:24:29 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=5E0CD0872D10046C8CF8157F525BA82113432E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:db:d1:61:47:fd:87:22:d1:68:83:df:c7:
4d:d2:5b:82:57:55:cf:ab:48:e8:a9:3a:d3:15:01:
70:58:c4:a1:2e:e3:84:f1:86:2d:20:4c:0b:62:45:
54:60:c4:94:a5:24:42:55:d3:ad:d7:ce:81:cb:37:
15:3d:c4:f2:da:7d:43:37:5f:57:4c:1c:22:03:9c:
01:7a:76:67:b1:8d:88:e0:ae:b3:08:b7:3e:98:61:
a7:75:8c:dd:a8:96:90:ec:01:a1:6e:4e:ac:6e:8f:
86:c0:f3:33:08:ac:9a:86:0c:e4:fd:d5:cc:9b:29:
66:2f:73:11:25:7e:aa:0a:a9:ee:b0:a2:7e:57:9f:
1f:17:8e:c3:f6:e1:a3:32:dc:a1:c8:98:c0:d2:0a:
33:69:6b:de:75:4b:a6:8f:0c:ca:71:0c:5a:77:8b:
b7:5b:28:21:4f:51:76:17:ea:df:f5:40:35:54:d2:
5b:86:82:e1:4c:53:5d:c7:fa:31:40:31:e2:c7:91:
3d:a9:1a:1c:26:d0:07:ec:a6:d9:ab:b3:18:2c:48:
86:ae:94:ac:7b:d2:36:4b:69:0d:db:8e:6e:d4:a8:
53:5f:87:bb:8d:c2:e4:93:64:0a:8a:d0:d6:cd:71:
bb:ee:30:a0:54:23:7f:71:aa:69:81:50:92:f9:18:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0C:D0:87:2D:10:04:6C:8C:F8:15:7F:52:5B:A8:21:13:43:2E:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.168.0/23
Signature Algorithm: sha256WithRSAEncryption
27:53:32:75:0a:9c:6b:45:d5:76:7b:9c:4c:b0:78:e1:78:d9:
e5:17:87:92:e6:f2:3a:fe:7b:1c:45:e6:b6:c0:4b:31:21:57:
15:3c:3c:f8:09:f7:11:95:54:cb:f6:53:a6:41:91:01:5c:bf:
fe:c4:4d:4d:69:f6:27:ca:b2:2f:d0:0e:fe:a7:60:e6:69:ab:
49:6f:af:5c:6d:9e:79:9f:4d:f4:a3:fc:4b:36:07:63:a8:9e:
8a:35:b3:6f:40:5e:f0:0c:da:38:1c:36:92:8b:02:e8:1c:3c:
97:83:7b:f7:6d:b7:5f:0b:9e:e1:ff:c2:c8:f0:bf:d8:dd:a5:
3c:de:52:94:4e:4c:d0:1b:d9:10:52:e6:03:66:b5:88:66:af:
6c:c6:04:13:a4:60:e2:7d:8b:42:55:1d:bb:89:d4:e2:b1:da:
6c:e4:c7:63:eb:96:36:eb:96:b5:d1:09:1f:d3:70:4a:41:dc:
af:b8:2f:ee:1e:03:08:1e:fd:7d:fe:17:03:97:41:af:43:5e:
7e:f1:9f:a0:a8:bb:bf:62:41:21:71:81:78:c7:88:53:ff:b2:
68:a0:18:5a:6f:9e:9f:1f:92:3b:ab:63:eb:85:0e:91:9c:57:
90:60:31:12:6d:75:e9:b8:14:3d:d0:8c:43:94:7f:01:f2:b2:
de:a6:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:54:01 2025 by rpki-client