
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
File: d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa (raw, json)
Hash identifier: pQmrG7iNdgNBluwAzClNwVytjPwAhj7xtZyLZRo5wx4=
Subject key identifier: 77:88:D6:88:E9:DC:4D:24:AF:4A:4D:0C:F0:64:3D:46:83:6A:5A:5E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C0C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
Signing time: Tue 01 Apr 2025 01:51:35 +0000
ROA not before: Tue 01 Apr 2025 01:51:35 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.78.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:51:35 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=7788D688E9DC4D24AF4A4D0CF0643D46836A5A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:18:44:a5:f6:41:71:26:b4:6a:51:bc:3d:
11:8c:7c:d3:c2:e4:16:25:e7:f5:a4:83:ab:57:be:
6b:c1:8d:24:63:2e:68:2d:51:05:32:c5:ab:fb:79:
60:bb:34:87:4b:42:13:b2:da:8f:52:dd:e1:2d:db:
f0:2d:d8:1e:8e:e8:fe:00:14:7e:5a:29:15:e5:6e:
1a:d1:c0:25:a7:e5:6f:6b:8a:3c:1c:1e:af:5c:cc:
aa:2b:3c:ad:1b:73:8f:ec:f4:21:b4:5d:af:14:61:
ee:ff:58:eb:26:70:e0:da:11:4a:b6:a0:49:14:cf:
a4:07:c4:61:57:e1:93:99:b0:32:ee:06:22:09:0b:
d3:50:6e:c1:42:5c:13:7d:6c:63:06:2b:0b:c9:36:
4d:27:d9:3c:74:10:33:f7:88:c0:ce:08:e1:f7:b4:
d1:84:ed:32:ce:3a:41:c7:c3:45:4d:63:e2:03:52:
b3:91:a3:c4:84:40:db:e8:2d:40:27:57:3d:85:ec:
7c:0f:24:91:ef:18:77:d8:49:ea:a1:a7:ac:43:70:
93:91:24:1a:70:9c:86:5b:5f:05:72:86:dd:e0:d9:
3a:76:0a:4d:ee:37:aa:98:61:9b:2b:59:e8:8f:8a:
52:5d:fe:f0:42:cd:e7:9a:85:7a:82:87:6c:cc:e0:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:88:D6:88:E9:DC:4D:24:AF:4A:4D:0C:F0:64:3D:46:83:6A:5A:5E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:2f:b7:18:8f:cf:90:f5:3b:d3:37:58:4d:36:4b:81:c4:9b:
49:d6:49:db:0b:4b:72:62:4c:26:69:8e:7a:a8:59:b4:1d:53:
81:ac:b0:9a:d0:54:53:b6:eb:d5:8e:17:14:5b:2d:51:ac:b9:
21:dc:ea:4b:06:61:75:1e:56:86:2e:69:4e:bf:8d:7b:31:22:
dd:64:6a:49:73:37:89:bb:39:7e:2d:f5:91:b2:2e:9b:e4:d9:
13:c5:ba:4b:ce:ca:6c:b5:fb:5c:81:16:f7:d2:37:e7:d3:cc:
74:6b:7e:6d:c4:aa:44:df:36:bb:f6:84:db:42:ac:69:ab:27:
79:9e:3f:b3:2e:e4:84:ea:b0:69:01:59:00:05:9d:4a:57:ee:
94:25:f8:80:27:34:b8:f9:45:d4:55:01:7b:6f:48:0c:3f:55:
fc:e7:21:a9:96:5e:45:e6:72:2a:89:d9:95:16:12:a0:c7:67:
d9:7c:11:28:94:e6:7e:ff:21:16:30:2d:23:df:c4:d9:85:9a:
38:5b:b8:75:12:9f:5c:de:32:c2:08:1a:56:fe:86:26:f6:9d:
af:8f:33:c8:f5:94:0b:7f:14:18:b7:bf:a9:05:c6:92:07:e4:
97:d9:f9:1d:c9:fd:e5:01:fd:5e:bb:66:4d:7f:78:2c:cd:e6:
81:f8:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:54:10 2025 by rpki-client