
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
File: vPo1bFB-EcCQ9X8h73-hQAPDae0.roa (raw, json)
Hash identifier: dpjuYaQ0urbRFgR36LubQAxLH2OWldkUGykwMaXlb+4=
Subject key identifier: BC:FA:35:6C:50:7E:11:C0:90:F5:7F:21:EF:7F:A1:40:03:C3:69:ED
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0FE0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
Signing time: Sat 01 Nov 2025 01:31:48 +0000
ROA not before: Sat 01 Nov 2025 01:31:48 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4064 (0xfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Nov 1 01:31:48 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=BCFA356C507E11C090F57F21EF7FA14003C369ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:50:5e:fc:8e:69:87:08:5f:ca:a1:4f:80:
1c:e2:a4:e0:ce:bd:40:ac:88:4d:d0:1b:1b:8d:ef:
45:9f:63:b0:f6:d7:ac:ef:87:7f:ff:27:98:1d:84:
17:1a:4d:63:4e:62:cf:c3:19:68:78:63:2d:35:1b:
86:4c:1f:03:cf:36:f5:c6:15:d9:49:42:91:ea:6d:
e5:8b:08:fd:ac:7a:b7:f1:a1:83:14:4d:79:04:05:
ad:80:bc:94:09:e9:f7:ac:92:fd:25:17:ad:21:32:
54:40:1b:18:09:d1:b5:4e:40:fe:f5:8a:84:9a:8f:
df:64:78:ab:be:db:7e:fe:96:7c:0f:05:ac:4f:05:
ec:a2:04:51:0e:a6:0a:00:6f:28:64:43:39:cf:bc:
4d:4e:ad:26:d0:25:33:c3:2c:de:8f:f3:bd:84:b6:
0f:d9:eb:4f:da:6c:43:79:3d:0e:c4:62:c0:fc:8a:
8b:4a:fe:95:6e:de:d7:45:f8:a9:3d:df:40:15:4a:
f8:c9:60:80:ae:e4:90:7c:bd:3d:98:66:87:f6:8e:
77:3b:8e:26:b1:ce:67:98:b6:e7:e2:ef:4c:32:79:
e6:8e:80:cb:de:f1:16:65:49:f0:16:43:98:f3:bf:
5f:24:e3:07:62:b9:fd:e8:13:f8:61:56:66:05:3d:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:35:6C:50:7E:11:C0:90:F5:7F:21:EF:7F:A1:40:03:C3:69:ED
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:07:44:27:55:7d:d8:b9:1a:36:39:5a:34:ea:c0:fa:38:9b:
3e:73:5a:94:b5:d7:2e:c8:c0:f6:f6:b0:3f:9b:98:1f:62:7a:
4d:ca:0c:d3:85:88:ae:09:ea:dc:f0:66:bd:9d:0a:83:f6:81:
53:82:62:9d:ac:b9:2d:9b:30:3a:2a:a3:2c:75:73:7c:6f:70:
78:71:18:49:b4:a6:1b:9c:5f:6c:5d:95:3b:7f:2b:05:f3:97:
97:ef:1f:c8:a6:32:ee:31:0f:fb:06:cb:02:46:fa:79:c5:52:
5f:69:1b:05:52:c4:4f:83:2f:c1:1b:14:84:ff:7b:70:1b:2a:
2b:99:ac:45:e2:1f:0c:f8:4c:c0:da:7a:d4:a8:5e:06:02:1d:
c6:14:ce:91:4f:a2:ea:2e:76:cc:97:bf:07:8a:91:a4:42:f5:
90:ef:99:0d:eb:16:ad:4d:3d:a2:25:45:ac:41:5f:b4:62:23:
d2:ca:ca:dc:31:6d:0b:16:a7:fd:c2:11:0b:80:f9:85:b6:49:
70:cb:b5:36:0b:ed:d2:0a:ca:cf:f7:1b:4a:33:6f:88:8d:af:
67:1a:b1:3e:7d:ce:54:53:10:06:dc:16:95:80:8f:f0:88:a6:
c6:8c:21:06:f5:47:c1:3f:31:6a:cd:b6:9c:40:06:ec:af:61:
13:42:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:38:54 2025 by rpki-client