
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
File: fHqFi4p3A-Trlndm1vNjhzCbw_U.roa (raw, json)
Hash identifier: aDw4awlid2qra1U/oUrsvUCZ+DYkvR+rbqoEPvVY+Ww=
Subject key identifier: 7C:7A:85:8B:8A:77:03:E4:EB:96:77:66:D6:F3:63:87:30:9B:C3:F5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E68
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
Signing time: Tue 10 Jun 2025 10:53:25 +0000
ROA not before: Tue 10 Jun 2025 10:53:25 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 49.102.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 10:53:25 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=7C7A858B8A7703E4EB967766D6F36387309BC3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:af:11:cc:20:79:0c:5f:42:6b:a9:31:91:
c3:21:3c:3a:07:2f:9d:56:b5:f0:67:8f:e0:bb:3d:
ea:0a:b3:fc:43:40:22:e9:7f:7e:3b:d6:cf:93:d4:
d6:fd:1d:19:e2:a6:6a:f9:1f:aa:36:10:66:14:e5:
18:97:ea:8a:c1:b6:b2:de:42:7d:12:10:4d:37:48:
52:17:ac:66:95:4e:48:b8:23:45:9b:dc:77:64:93:
53:f1:c2:13:78:33:ab:ba:49:86:0f:28:2d:db:65:
b3:39:73:6b:6c:b8:9f:f9:7e:a2:98:80:67:bb:6a:
5d:ef:1a:30:66:38:d5:a1:17:cd:28:06:34:21:fd:
c1:dc:f0:6b:8e:a6:17:31:03:d7:bb:8d:52:c6:57:
dc:f9:cc:2d:83:88:13:a2:58:ab:ed:7c:82:f9:45:
02:25:f2:95:c5:30:6f:5f:a2:e1:a9:81:f6:d8:0c:
5c:26:ff:52:71:4e:5d:5e:38:35:e8:d0:78:1d:4d:
cb:9d:89:a1:9a:a4:63:aa:4a:52:8c:7d:5c:91:11:
98:ed:57:94:b4:ef:b6:c3:51:b2:d4:61:b5:53:40:
17:8b:a0:f2:62:f2:f7:97:ff:04:0e:10:19:26:51:
49:96:6d:85:1d:d9:80:db:11:41:1d:db:7f:31:14:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:85:8B:8A:77:03:E4:EB:96:77:66:D6:F3:63:87:30:9B:C3:F5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:04:e1:a5:de:05:6c:03:d2:de:59:e2:f8:73:90:33:aa:9d:
b0:4b:1a:e4:55:60:33:03:f7:cf:b4:c1:1d:23:fe:09:cc:df:
9e:37:60:a5:21:61:df:4b:6c:8c:c3:47:80:d2:a2:65:e1:ad:
a0:0f:1d:5e:b3:a6:02:ae:3b:89:8c:dc:f5:4a:e6:da:97:b6:
4c:97:41:f2:d9:70:c3:a8:bf:90:c3:b9:30:e0:e1:a3:13:24:
1c:ac:dd:b9:ad:32:b2:18:e2:5c:b2:e8:da:f1:6c:66:95:a5:
19:d1:d2:94:7a:d4:50:39:c3:f4:6e:58:c5:00:f1:99:32:16:
52:ce:6d:91:96:a0:f2:2f:bd:89:0d:66:1f:e3:5c:23:e8:45:
b4:1f:c7:af:d3:5e:22:a9:66:0f:e1:90:46:f3:51:12:91:e1:
0f:ba:d0:41:48:a0:33:36:8d:c3:b8:d6:a4:a4:62:4d:9a:af:
9b:17:47:d2:9d:1e:d8:1f:0c:b4:f4:97:07:7a:6b:b9:20:36:
a9:f4:20:f6:c9:f1:fc:79:f4:8b:64:34:3b:2b:29:43:ee:15:
d5:e0:b2:e7:df:c4:e1:b6:c4:39:9e:f5:63:b4:10:0c:ae:bc:
9f:2c:83:74:aa:1f:73:38:5b:26:ef:b0:2a:5a:14:56:78:28:
f2:10:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:58:17 2025 by rpki-client