
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
File: rj19jeBo8n9O90IjzcOmalKihPk.roa (raw, json)
Hash identifier: ko1BGH1PMM7c5ROsRp4Haf5LdmbgUNhat/3NHpvOm5k=
Subject key identifier: AE:3D:7D:8D:E0:68:F2:7F:4E:F7:42:23:CD:C3:A6:6A:52:A2:84:F9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E9C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
Signing time: Tue 10 Jun 2025 11:00:34 +0000
ROA not before: Tue 10 Jun 2025 11:00:34 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 211.14.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3740 (0xe9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:00:34 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=AE3D7D8DE068F27F4EF74223CDC3A66A52A284F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:68:d7:0a:f5:1d:70:37:99:28:0b:65:d0:
70:77:93:49:7f:f1:e1:3e:fc:0f:9b:69:68:f5:2f:
fb:5d:78:96:18:b5:66:3d:90:15:51:b5:6e:34:b1:
18:ac:da:a6:4c:ed:80:b4:25:d2:67:63:29:13:39:
a8:e3:58:2a:84:a8:19:94:95:53:16:14:9c:74:23:
cb:d2:19:20:02:e0:d3:5e:e8:b2:b8:39:2c:84:8c:
c7:a9:b8:fe:77:b5:ea:2c:10:b7:d5:ab:29:44:0d:
31:1c:55:41:0a:1c:7f:b4:29:65:4b:2c:21:60:ca:
2f:4e:2b:22:44:8e:3b:cd:1d:54:68:01:89:87:1e:
3a:d3:d8:69:27:3a:4d:92:80:35:ca:40:81:40:8c:
dd:90:ef:4b:1a:9c:6f:69:9c:7d:b8:0e:5c:ce:3e:
bd:98:42:0d:7b:6e:8a:24:cf:c0:3d:ec:4a:47:3c:
46:04:07:ca:4b:43:b5:e7:84:87:dc:02:c2:e8:1f:
dd:1c:be:a4:83:f9:3b:c4:9c:0a:db:35:34:30:3a:
d0:b5:3e:d8:f9:a0:4f:7c:8d:38:66:95:9d:df:c3:
b0:70:0f:f5:1b:11:98:20:1d:e3:f9:ab:5c:df:a2:
47:8f:a4:cb:d3:12:72:1b:da:53:df:26:7e:07:28:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:7D:8D:E0:68:F2:7F:4E:F7:42:23:CD:C3:A6:6A:52:A2:84:F9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.116.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c3:81:52:bc:56:f3:d1:62:fd:50:36:43:7b:1d:2e:9b:cf:
29:50:86:ef:58:89:e9:73:fd:96:c1:32:a2:04:92:79:57:da:
b9:ca:3a:80:ad:f1:b3:1f:8c:2d:37:ef:a9:22:e2:3a:f0:80:
b8:a0:5e:ed:45:83:f2:49:72:ec:ae:47:d6:1b:84:99:4d:6b:
63:7e:7d:76:90:da:b6:3d:83:ef:79:33:3f:6d:be:f9:64:0e:
46:92:cc:bc:cd:26:ce:ab:91:ec:8e:c9:f4:f3:5c:54:8f:f3:
07:45:4d:d7:80:1b:dd:95:c6:46:27:96:63:99:c7:9c:0e:a1:
61:09:b9:d7:2a:ce:e5:a5:66:9c:d5:5b:62:1e:da:03:de:61:
d4:fe:a8:93:8a:07:63:fa:be:01:b2:0d:66:8c:ce:fd:a9:27:
94:0b:9e:c4:ca:bb:5a:48:15:c9:00:d8:8b:da:be:c8:55:ea:
09:c8:e7:68:a6:0b:55:7d:4f:4a:0e:60:06:89:7b:58:b0:c6:
07:10:30:c4:80:e1:60:67:cd:4c:d5:09:6b:51:92:d1:75:2e:
49:42:f0:a8:b5:19:bc:4b:5c:bc:34:ec:3f:04:f4:1e:41:c1:
6f:0d:4d:4c:0d:f4:67:ce:b4:24:3a:e5:69:11:9d:8b:f2:ff:
06:cf:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:52 2025 by rpki-client