
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
File: t_i_lWIBFKNiLn6euTu5JlQ196U.roa (raw, json)
Hash identifier: 3AkxVXAOQpYeh8m0Y/wf4JrygdtmdKHEyO+8cZaANqY=
Subject key identifier: B7:F8:BF:95:62:01:14:A3:62:2E:7E:9E:B9:3B:B9:26:54:35:F7:A5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C67
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
Signing time: Tue 01 Apr 2025 02:00:29 +0000
ROA not before: Tue 01 Apr 2025 02:00:29 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:00:29 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B7F8BF95620114A3622E7E9EB93BB9265435F7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:40:df:fc:81:95:e0:d1:e6:cb:88:ff:63:
db:22:8b:ad:0e:cc:fc:81:1e:06:31:52:29:74:e8:
1d:29:7a:95:23:b3:40:39:61:bb:ac:cc:0f:d6:73:
af:af:54:90:7e:ab:9c:79:60:27:41:05:0a:20:59:
fb:90:ee:9b:8f:60:64:8c:cf:47:60:f5:32:03:70:
65:07:9c:07:57:b4:89:a6:c9:e3:91:08:c5:ec:cf:
b9:fa:4f:3b:2b:8f:73:f1:06:dc:a5:c4:e5:8f:73:
eb:de:9d:03:39:6f:7d:27:85:6d:1d:ce:a0:62:9a:
b0:d4:14:5b:24:4f:58:38:88:ed:2c:c7:37:2f:e7:
f1:90:9c:13:52:4d:c1:3d:a8:8d:e1:85:29:e2:89:
8e:2e:e9:18:4e:16:bf:f5:f6:11:64:7a:98:e5:46:
b3:9c:20:c9:47:ca:ce:a7:24:da:74:d9:2a:f2:86:
30:51:13:02:4a:2d:e4:db:74:e0:60:68:74:7d:03:
e3:02:9f:f2:05:b5:3d:b4:c3:2a:b1:7a:2e:60:b6:
7f:21:a5:fd:e3:57:ef:53:6b:32:26:4d:f1:16:6c:
8c:a3:7e:39:be:df:ab:fe:40:71:69:99:12:cf:9c:
75:29:e6:0e:bc:06:77:8e:dc:cf:ff:cc:1b:37:4b:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:BF:95:62:01:14:A3:62:2E:7E:9E:B9:3B:B9:26:54:35:F7:A5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2d:dc:f8:e0:9e:0b:da:6d:5a:00:4f:8f:ca:e5:e0:56:29:
b7:7d:44:58:55:f6:9e:19:12:ea:ee:30:7a:1f:e2:fe:01:07:
84:7a:72:53:ae:77:5a:cc:d2:63:82:86:21:bf:ed:55:ff:4e:
c9:f5:a6:ae:a6:b6:05:3e:f3:ba:bd:0e:37:7f:4b:b6:f4:a3:
36:3b:eb:66:a9:dc:96:06:91:85:e4:18:d7:f0:83:18:2f:ad:
e0:0b:04:d6:fe:6a:5a:ae:1d:c2:11:b6:99:7d:02:55:43:5b:
ec:20:fa:84:ca:11:14:05:7b:4e:e3:cf:6b:39:eb:bb:bc:b5:
de:e3:c1:38:a1:b3:57:66:f8:4a:5c:2e:ac:e0:db:60:f6:ab:
37:c2:8d:dc:a0:ae:05:b1:15:85:c1:c0:ea:b8:59:31:f8:6b:
6b:3d:4e:73:04:ff:fc:7b:65:f7:7c:d9:98:21:1f:38:06:3e:
1a:a0:59:b0:02:ad:6a:56:03:23:e0:6c:06:8b:ef:f6:da:22:
9f:e2:ae:52:ac:c2:b2:31:8f:d8:2d:3f:dc:1e:32:34:e4:28:
64:66:f2:e4:98:0d:f0:c7:37:86:a5:91:87:0a:52:6d:1d:ff:
51:20:40:1e:db:52:c3:ec:2c:cb:32:f4:f7:83:33:6e:b1:51:
3d:a7:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:46 2025 by rpki-client