
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
File: pIAfocLFnDiAxFuTZmiTWOCt9HM.roa (raw, json)
Hash identifier: flw2IZgGXKyRSsOKjKFrsH7IEDubFtDfvZFd1z1gkdY=
Subject key identifier: A4:80:1F:A1:C2:C5:9C:38:80:C4:5B:93:66:68:93:58:E0:AD:F4:73
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F5E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
Signing time: Tue 10 Jun 2025 11:28:34 +0000
ROA not before: Tue 10 Jun 2025 11:28:34 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 110.160.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:28:34 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=A4801FA1C2C59C3880C45B9366689358E0ADF473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:05:0d:3a:d4:60:55:31:a0:86:48:12:5f:
79:15:ef:81:84:ed:32:80:02:c3:cf:c6:ac:dd:2a:
34:cb:39:bd:4f:48:a7:fc:52:d0:05:2f:d9:a4:c0:
c5:52:34:5f:b0:8c:de:c5:00:50:b7:27:ed:9b:ea:
73:01:ae:c6:0e:ee:16:cb:31:51:47:13:fa:db:27:
c1:dc:82:f1:b8:45:7b:85:b2:c6:b5:04:17:df:2c:
82:51:6e:85:84:da:f8:ae:58:92:56:63:47:6b:c9:
f2:79:d8:4b:a6:ef:c3:e9:cb:c6:5c:7a:9c:de:d9:
24:40:2d:ac:b6:70:95:9a:49:8c:f0:84:ca:4a:84:
63:75:20:43:37:c6:54:c1:60:16:b0:eb:7c:8e:7c:
c3:3d:42:cb:8e:67:cd:84:da:8e:e7:e7:1b:7c:f9:
3a:3f:c9:56:ab:1d:f6:2c:be:8b:b7:57:95:de:9d:
5a:67:a5:25:93:4e:de:70:5e:f0:81:15:bb:f6:3f:
fa:63:7b:31:e3:52:43:9b:07:7d:e9:c9:e0:27:43:
2b:a3:05:91:4c:83:b4:75:1e:86:3e:81:93:5b:d4:
00:e0:43:82:0c:da:92:cc:bb:66:97:17:29:94:35:
bf:16:33:a3:52:89:3b:e6:bf:c2:c5:a0:e7:8a:3c:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:1F:A1:C2:C5:9C:38:80:C4:5B:93:66:68:93:58:E0:AD:F4:73
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.160.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:07:37:8a:19:1d:a0:c4:05:93:ec:5d:f9:ef:31:02:72:ea:
8e:e3:95:5a:ff:50:37:2b:22:c2:f6:ad:f1:f6:cf:20:0a:5f:
31:2e:58:23:db:eb:da:b3:99:37:83:59:88:e7:15:2b:f1:e4:
71:10:fd:6f:a4:d9:ea:c5:28:57:d3:88:95:f5:7a:7f:c5:65:
6d:80:9f:45:a4:04:32:50:71:d8:23:67:74:ad:6a:97:9e:dc:
b4:bc:75:20:12:5d:5e:74:fd:4f:50:3e:7e:e5:b0:41:e2:91:
92:d2:95:93:95:fd:78:89:c7:02:ba:41:46:cc:1b:8b:f5:08:
dc:e6:fb:39:62:3f:65:76:47:5d:fe:55:52:46:74:60:6f:46:
60:20:7c:4c:41:40:d2:71:40:67:21:11:2b:a7:32:1d:d8:26:
69:7f:e2:9e:14:50:2d:37:60:08:54:76:32:ef:2f:68:77:3c:
49:12:e2:09:14:dd:4a:4f:a5:86:a2:d7:19:e5:57:06:17:62:
85:5c:2e:65:49:e3:9f:bb:0a:fa:27:16:04:80:28:c0:48:c0:
15:18:8b:b9:09:27:7d:3a:06:e0:28:a7:cc:85:1d:12:63:73:
2f:bb:8e:a3:be:f2:77:73:4b:c5:01:f2:50:80:dc:11:52:dd:
c6:5d:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:46 2025 by rpki-client