
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
File: Xn68JiU_aUPAqq8b_VpqHSPO50o.roa (raw, json)
Hash identifier: X/FR2fTFIihlcoKpYNJCSaBuiwPbe2PFPt3Z4mUEiTU=
Subject key identifier: 5E:7E:BC:26:25:3F:69:43:C0:AA:AF:1B:FD:5A:6A:1D:23:CE:E7:4A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0FB7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
Signing time: Tue 10 Jun 2025 11:44:13 +0000
ROA not before: Tue 10 Jun 2025 11:44:13 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 110.162.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4023 (0xfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:44:13 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=5E7EBC26253F6943C0AAAF1BFD5A6A1D23CEE74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b6:14:45:a7:95:22:e8:8b:7f:81:e8:7c:79:
17:cb:e3:ba:01:14:d1:6b:a1:78:ed:3e:1a:e1:54:
16:f9:4a:c7:b0:d2:4b:24:36:81:ef:a6:87:81:7d:
41:2f:02:56:d5:cc:51:fe:30:6e:2b:9f:a1:52:13:
a0:3a:8d:07:8c:fa:27:0f:dd:5f:01:be:d0:8b:ed:
c5:83:0e:bf:ad:a5:dd:3f:d0:47:65:0e:7a:9c:d7:
0c:64:36:df:fa:05:af:61:63:e5:28:81:64:0a:f7:
26:45:1b:62:b2:63:71:a1:e7:67:d5:f8:05:4f:9f:
ae:2e:25:92:67:80:9e:05:3c:54:db:52:31:74:17:
29:c0:72:9c:2a:b1:c2:4a:5c:71:42:ff:01:28:8f:
5b:1b:75:60:da:d0:e2:44:14:eb:a8:07:46:33:8c:
97:10:96:69:7a:61:dd:d5:97:94:3c:d3:06:00:1c:
e6:d6:43:53:dc:ec:c3:f4:1b:3e:32:b4:28:66:64:
80:6d:2a:d8:09:16:94:b5:fe:bc:23:5c:ee:53:85:
0b:63:3c:9f:96:ba:81:34:9c:fe:79:09:5b:a5:fe:
ec:89:dc:3f:5c:03:80:4a:bf:4f:12:8f:6b:9f:bb:
b7:b0:93:81:bf:23:c5:04:49:d2:bb:71:ab:17:f0:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:BC:26:25:3F:69:43:C0:AA:AF:1B:FD:5A:6A:1D:23:CE:E7:4A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.162.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:68:ce:9d:c4:47:7f:f4:bb:88:00:9d:a9:d0:43:19:9c:c4:
67:cb:5b:07:35:fa:3f:47:aa:91:67:40:ef:81:64:ba:f3:95:
e3:f8:6a:bc:46:b3:fb:cf:9a:d8:20:88:72:6b:24:84:8e:f7:
3a:50:dd:ec:a7:b5:25:5d:3b:ff:58:ce:08:a4:5f:55:68:a4:
70:d7:7b:95:99:c8:73:fb:88:50:d4:98:e1:c3:ad:40:4f:b6:
c9:9d:5d:71:0c:ac:56:0d:10:4a:16:d8:37:0c:f6:9e:7e:fe:
ff:69:bc:a4:1f:9a:9a:f8:d7:cc:7f:60:7b:eb:d2:f0:3e:30:
75:b9:c2:82:12:a5:97:cc:9a:b8:d4:5a:de:dd:e4:ec:90:38:
19:bc:d5:94:24:39:6b:73:04:be:3d:a1:24:d8:ef:68:42:e7:
9f:1b:83:e0:6e:a3:ea:d1:57:d2:5d:c0:ae:0b:27:4a:7e:cc:
9e:84:1d:81:44:97:86:4c:cf:5b:94:7f:0a:72:55:7d:08:52:
7c:bc:4b:8b:30:c4:b4:f7:86:e8:12:2a:69:0e:de:8b:7c:8d:
db:a2:83:cf:58:7e:6c:f0:17:7c:30:4b:e0:9b:2d:71:96:6a:
84:d0:66:34:58:2d:89:9a:6e:1b:c6:43:bf:38:fd:4a:3e:58:
87:24:08:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTQ0MTNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVFN0VCQzI2MjUzRjY5
NDNDMEFBQUYxQkZENUE2QTFEMjNDRUU3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuthRFp5Ui6It/geh8eRfL47oBFNFroXjtPhrhVBb5Ssew0ksk
NoHvpoeBfUEvAlbVzFH+MG4rn6FSE6A6jQeM+icP3V8BvtCL7cWDDr+tpd0/0Edl
Dnqc1wxkNt/6Ba9hY+UogWQK9yZFG2KyY3Gh52fV+AVPn64uJZJngJ4FPFTbUjF0
FynAcpwqscJKXHFC/wEoj1sbdWDa0OJEFOuoB0YzjJcQlml6Yd3Vl5Q80wYAHObW
Q1Pc7MP0Gz4ytChmZIBtKtgJFpS1/rwjXO5ThQtjPJ+WuoE0nP55CVul/uyJ3D9c
A4BKv08Sj2ufu7ewk4G/I8UESdK7casX8GJ7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXn68JiU/aUPAqq8b/VpqHSPO50owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1huNjhKaVVfYVVQQXFxOGJfVnBxSFNQTzUwby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZuosAwDQYJKoZIhvcNAQELBQADggEBAGpozp3ER3/0u4gAnanQQxmcxGfL
Wwc1+j9HqpFnQO+BZLrzleP4arxGs/vPmtggiHJrJISO9zpQ3eyntSVdO/9Yzgik
X1VopHDXe5WZyHP7iFDUmOHDrUBPtsmdXXEMrFYNEEoW2DcM9p5+/v9pvKQfmpr4
18x/YHvr0vA+MHW5woISpZfMmrjUWt7d5OyQOBm81ZQkOWtzBL49oSTY72hC558b
g+Buo+rRV9JdwK4LJ0p+zJ6EHYFEl4ZMz1uUfwpyVX0IUny8S4swxLT3hugSKmkO
3ot8jduig89YfmzwF3wwS+CbLXGWaoTQZjRYLYmabhvGQ784/Uo+WIckCHE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:13 2025 by rpki-client