
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
File: gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa (raw, json)
Hash identifier: 0ptZ/B3AKK2qEATdAFvXC7g1DGDDgLWjenkwHyhqBmk=
Subject key identifier: 80:CA:6C:57:B1:41:30:0E:C5:75:46:0F:D1:F8:51:C9:61:08:FC:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F58
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
Signing time: Tue 10 Jun 2025 11:28:31 +0000
ROA not before: Tue 10 Jun 2025 11:28:31 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 1.78.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:28:31 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=80CA6C57B141300EC575460FD1F851C96108FCBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:78:44:21:c8:8e:78:8a:79:68:35:0a:38:
a6:54:c4:ce:e4:d4:44:93:a6:48:66:b5:71:0a:5d:
c8:53:af:09:a6:2a:0e:43:21:4f:2d:97:84:c8:ac:
5b:ae:a4:92:75:37:14:03:a7:5b:90:d4:de:fa:63:
5e:a6:e2:46:ca:28:78:c9:72:4d:14:12:16:d9:d7:
4c:8f:9d:95:57:ed:77:35:46:aa:af:9b:d5:cc:9d:
ce:60:33:ae:be:45:ba:cc:80:92:c2:c6:11:42:7e:
ed:88:ba:53:15:87:1a:1e:54:72:be:09:2c:da:c3:
e8:96:d9:47:3e:ef:90:24:b4:86:c6:f9:8d:d3:36:
80:6d:2b:01:e4:20:bb:c7:42:9f:1c:61:49:34:88:
6a:a9:22:0d:80:7f:60:96:a7:36:1f:49:d5:5e:98:
63:67:41:da:28:15:bd:85:36:5f:40:71:20:67:4d:
55:c0:91:47:5c:32:d1:91:89:a9:b0:f2:37:bd:64:
c8:37:34:11:02:0d:77:bb:90:c4:de:3e:41:f5:a1:
8c:75:01:cb:63:68:d7:04:1b:80:e5:87:9c:51:70:
43:ee:d8:72:e3:f7:e2:34:d7:62:41:7f:49:69:73:
38:bb:fe:9e:f8:3b:c3:3d:03:fd:38:67:5c:a3:be:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:6C:57:B1:41:30:0E:C5:75:46:0F:D1:F8:51:C9:61:08:FC:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.192.0/18
Signature Algorithm: sha256WithRSAEncryption
91:4b:34:e7:6d:da:96:42:16:33:da:6a:34:d0:82:10:8f:a8:
cd:cd:5f:67:3c:fa:3f:da:21:47:a2:ba:ec:25:42:45:cf:7e:
db:74:9a:7b:51:2d:ff:49:4c:7d:76:f1:20:34:f4:39:c5:fe:
ed:6d:82:82:bb:2c:d9:ae:0d:e0:fd:da:d6:53:65:1a:c6:f3:
8f:6e:68:a7:8c:80:98:a9:66:59:52:51:08:4c:27:4d:a2:e9:
da:c6:32:f6:cd:ee:bf:5c:03:e5:2c:a9:09:c3:5c:b3:3a:10:
cd:5b:fb:02:79:fa:da:23:01:c3:f7:f4:11:7c:0c:9b:22:67:
03:19:e5:db:14:f5:5e:86:80:0a:d2:66:f0:da:2b:6f:12:bd:
48:94:1f:d3:fb:a9:01:53:bc:0c:00:bd:cd:63:3f:0d:8c:b4:
95:15:bb:ba:d3:1d:f7:c6:94:4d:1e:10:6d:98:61:d9:de:5d:
04:69:81:18:b7:67:20:fa:db:b1:35:77:7e:ba:ce:b5:50:c1:
04:ac:90:59:bc:7b:72:21:af:4d:b0:c4:93:a4:ce:2b:94:8b:
57:1d:ac:a5:76:35:52:2e:06:a5:b6:ce:f4:e5:11:81:c7:4a:
5d:3e:f3:c0:ee:a8:bb:e3:0d:5b:84:1c:8e:1a:24:ba:39:c3:
54:fe:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:54:01 2025 by rpki-client