
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa
File: bjVZFTDcikP6ymqegol0IxZR-3U.roa (raw, json)
Hash identifier: 1PWjFgQLLgxtvMnwNWACxj/mFmfLG7Wn59mu4dvtro4=
Subject key identifier: 6E:35:59:15:30:DC:8A:43:FA:CA:6A:9E:82:89:74:23:16:51:FB:75
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B9D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa
Signing time: Tue 01 Apr 2025 01:39:51 +0000
ROA not before: Tue 01 Apr 2025 01:39:51 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 110.163.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:39:51 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=6E35591530DC8A43FACA6A9E828974231651FB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:08:d9:1c:f3:42:e6:b7:d5:94:8e:0e:94:
bc:60:b7:50:44:04:de:c9:2b:63:30:68:29:ed:2d:
9b:d2:d1:f6:5d:ad:37:53:f2:ee:2b:eb:5b:b8:47:
6f:9e:0b:a8:0d:68:d7:05:a9:11:62:d1:2d:fb:55:
cd:0a:ad:35:23:dc:49:d2:47:1a:08:bd:cd:42:04:
de:e3:99:eb:f4:30:ec:b1:66:77:3a:2c:31:fb:c2:
3e:2e:5c:81:7c:8b:94:96:84:75:dd:b8:13:61:02:
d0:ad:4d:94:4f:7b:13:57:b7:d0:bf:52:fb:c9:4c:
0b:38:21:11:0e:2e:66:26:c3:59:41:fc:e6:c8:2f:
48:bb:1f:2d:e3:7d:02:0a:ea:61:13:a5:6c:c9:09:
49:bb:4f:7c:ef:d3:ce:5d:7f:ea:a5:a5:97:c4:d5:
a1:61:68:27:2d:9c:37:e4:ff:0f:1a:50:16:7d:3c:
c2:27:af:aa:8c:20:14:26:71:92:54:e4:ce:40:73:
22:b2:dd:1a:dd:11:93:9e:74:09:11:c8:78:a4:25:
34:22:25:53:f9:59:f9:c7:33:92:cc:df:26:40:1f:
9c:81:bd:51:4f:b8:a6:ff:67:b5:6a:b1:df:7f:6a:
4a:0f:29:63:13:d4:e2:94:92:ec:bd:a6:9d:95:6e:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:59:15:30:DC:8A:43:FA:CA:6A:9E:82:89:74:23:16:51:FB:75
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.18.0/23
Signature Algorithm: sha256WithRSAEncryption
10:ed:02:ee:35:85:b0:44:22:73:2a:b5:45:b6:db:07:a7:1e:
a1:59:78:3c:4b:75:c9:8e:38:6c:0e:c4:ce:55:53:1f:50:1c:
3d:0e:14:fd:66:38:0c:00:42:36:22:5d:13:79:6a:74:a2:50:
09:57:d2:48:5a:e6:42:68:8a:b6:08:07:df:3c:25:00:fe:e6:
07:b5:b2:7a:9a:39:7c:3f:62:58:6f:1c:cb:ac:46:43:3d:15:
11:85:9e:81:b5:9b:c3:60:de:50:bb:9a:7d:89:d9:21:c0:c3:
22:bc:98:dd:6d:36:53:b9:54:6c:7d:58:77:41:60:2d:76:e1:
c1:18:02:a8:8b:68:7a:1a:91:ee:48:9b:00:4c:88:1b:71:57:
a1:43:9c:db:b4:56:8a:fd:72:92:81:7e:0c:1a:24:d8:dd:41:
2f:3a:13:7d:d9:f5:bd:4f:18:c9:b7:d3:c7:4a:b8:37:e9:0c:
94:8d:7a:7f:77:03:89:88:03:1f:e2:01:ea:5d:c5:eb:82:80:
ae:78:0a:f3:31:f3:52:f1:aa:38:71:68:e0:ad:d4:6e:ef:06:
22:2b:d7:a6:5a:d7:2f:bb:57:c2:bd:8b:43:0d:3e:c5:cd:f2:
7a:9e:35:d8:da:38:15:ee:6e:81:ba:51:d1:92:48:58:fd:aa:
43:f9:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:32 2025 by rpki-client