
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa
File: siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa (raw, json)
Hash identifier: I/HLwZx1eHJ2fcZ+q6+xuy8+xN5IJo/6HuW+9RT2lug=
Subject key identifier: B2:26:20:6F:D4:90:FA:B9:0A:99:B5:F5:60:5F:88:B4:9A:F4:25:5F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0BEF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa
Signing time: Tue 01 Apr 2025 01:47:46 +0000
ROA not before: Tue 01 Apr 2025 01:47:46 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.104.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:47:46 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B226206FD490FAB90A99B5F5605F88B49AF4255F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:e5:9f:d8:34:71:64:4b:82:95:05:b8:da:
6f:d1:3f:7e:74:76:a0:c5:1d:30:25:9e:bf:f9:a2:
89:ce:70:29:5b:48:d7:e8:ce:c9:4c:c1:a0:d3:d5:
db:11:60:3f:ac:5a:5d:22:45:66:6f:09:8a:ae:46:
cf:41:96:9e:5a:ab:30:f8:a6:a8:3d:d6:4c:ae:55:
41:98:ea:a6:d7:43:8f:42:13:f0:f1:dd:57:a2:dc:
6d:c8:65:a7:4c:fc:6f:00:57:07:8a:6d:f7:e6:3e:
6a:ca:b0:5c:8b:67:b0:72:74:b8:60:84:53:e6:36:
7a:ee:92:0d:75:d8:02:d1:b2:b5:de:db:42:18:3f:
45:2f:00:e8:6f:b8:8b:c2:17:a4:a1:d5:96:fa:fd:
9f:15:e6:6d:51:92:36:58:59:19:06:9a:01:61:d0:
ac:2a:da:70:9e:e4:30:dd:93:c4:d0:ca:ce:c0:9a:
51:51:3a:57:8c:9c:83:e6:a0:73:cb:1f:52:0c:6b:
20:c2:ee:ec:92:a3:b6:8f:c4:13:4a:e0:ac:04:dd:
6a:6f:42:bb:1d:ab:44:08:4a:c8:20:c2:3e:2d:e9:
0a:8c:cc:c7:3b:e2:1b:e2:3f:2a:f9:64:20:6a:e3:
67:3f:c9:2d:5f:3e:8b:51:39:cd:61:d9:df:69:6b:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:20:6F:D4:90:FA:B9:0A:99:B5:F5:60:5F:88:B4:9A:F4:25:5F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:77:35:ea:a3:d4:58:aa:49:19:29:ed:21:0a:e6:ad:59:48:
08:7c:7b:96:4f:7c:9d:db:15:12:a9:b8:45:36:d8:43:7b:f8:
43:80:4f:db:b1:2d:d4:0e:61:dc:16:5a:cd:5a:24:8e:a1:03:
43:da:10:a2:c8:4a:47:0a:3d:97:3a:20:1d:87:72:f5:b5:14:
12:a9:b9:ad:ba:77:68:ec:7c:54:7b:6e:96:13:0e:c6:1c:c4:
9b:9d:b5:8f:a3:fc:9f:8b:c7:fd:58:30:a0:cb:5d:28:c4:b9:
d3:d0:d9:2c:e8:e9:73:e9:bd:6a:1d:53:06:76:d0:72:bb:24:
64:f7:ad:ae:20:cf:12:90:8b:c4:c2:93:47:2d:34:b1:0b:8e:
62:17:60:ef:d8:f3:05:79:ff:0e:4b:3f:62:ab:93:9c:45:06:
e3:69:37:c4:98:6c:64:b2:5b:75:1e:1f:c7:d9:61:f3:ea:49:
4a:65:b9:97:a6:0e:88:fc:38:46:db:2e:4a:9d:3b:9d:fc:36:
a8:07:e1:b3:51:78:d7:44:41:82:c8:f6:f4:68:1a:4e:7c:ec:
a3:1a:dd:1b:f2:94:9d:d0:a7:db:af:96:2e:bd:b6:72:a0:51:
b6:33:87:ae:53:31:96:32:fc:4f:8d:02:1b:6a:06:b8:2c:25:
25:83:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:50 2025 by rpki-client