
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3QvGQt627ON0DMWTuRXY2gwA9k.roa
File: w3QvGQt627ON0DMWTuRXY2gwA9k.roa (raw, json)
Hash identifier: ItCTEI+qXfzz6W6VkeN38uUeyK5pP61SWI0SMnnhAEU=
Subject key identifier: C3:74:2F:19:0B:7A:DB:B3:8D:D0:33:16:4E:E4:57:63:68:30:03:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0DE9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3QvGQt627ON0DMWTuRXY2gwA9k.roa
Signing time: Tue 01 Apr 2025 02:29:03 +0000
ROA not before: Tue 01 Apr 2025 02:29:03 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3561 (0xde9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:29:03 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=C3742F190B7ADBB38DD033164EE45763683003D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:4a:0a:52:b2:70:89:a4:ad:d5:43:64:69:
ff:6c:ce:a9:f4:d9:bf:43:d5:c8:64:48:6b:05:79:
59:a7:df:b2:0f:87:4e:eb:bd:4b:bd:68:bf:dd:1e:
07:3e:04:dc:bf:d7:d2:ce:76:3e:13:30:71:0c:39:
12:65:eb:e7:14:43:98:f3:12:f7:24:fc:f8:47:67:
8f:85:69:9c:4e:e9:3a:cc:63:c4:55:f3:f4:24:8b:
41:fc:15:05:40:d6:5c:1a:ba:5f:94:ae:e6:6c:98:
4b:0c:7f:01:7a:25:ff:fb:21:c5:b6:d0:97:b1:92:
ba:59:5b:68:4e:69:9c:b9:e5:81:02:a7:c2:a3:31:
fb:c0:d8:e7:ce:b4:60:82:fc:32:be:99:6b:5f:7b:
9f:89:d2:d4:59:a5:5b:c4:c9:87:70:d4:e6:8e:60:
82:db:c3:ac:3e:d3:85:a9:6b:80:94:3d:dd:41:75:
86:0d:50:a0:1f:20:a7:9b:95:db:b7:04:c6:55:a8:
1c:67:cd:47:74:d2:a2:f1:fb:8c:1f:24:1b:8c:25:
dc:35:6f:7e:74:3d:fb:55:64:71:03:11:3e:c2:1d:
99:85:40:13:5f:e9:29:c0:b2:3b:26:ff:2a:04:29:
c1:a4:59:5d:58:b2:fe:39:07:78:cc:06:bb:61:3b:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:2F:19:0B:7A:DB:B3:8D:D0:33:16:4E:E4:57:63:68:30:03:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3QvGQt627ON0DMWTuRXY2gwA9k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.40.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:83:c5:a9:eb:f9:fc:4b:c5:a6:38:9a:3e:22:ae:59:a9:e4:
ae:2e:65:8e:33:6d:97:c6:2f:f1:a2:e5:43:12:d9:46:3d:87:
89:6d:2c:b3:a3:57:7c:7f:f8:fe:3a:e3:b4:93:ad:cc:a4:b0:
7c:11:9e:88:8e:6a:99:4a:6c:77:d2:ee:b9:e3:02:9d:f6:3e:
94:91:d3:4d:cf:c9:c2:0d:b9:b4:11:af:ec:7a:12:71:af:ed:
93:2c:e6:a3:49:c7:9d:bb:88:a2:59:e9:dd:9a:d2:04:19:17:
c4:a6:a4:2b:0b:5a:01:6e:a0:ff:ca:7f:be:e0:53:c0:fd:4c:
df:0e:30:4e:80:ae:64:f6:2a:01:6c:25:d2:f9:fb:8c:d2:ed:
48:b2:38:e1:e0:34:75:cf:ee:d5:cc:31:d7:26:3f:f2:e2:ad:
4f:1b:72:37:90:00:ae:58:4c:81:20:ae:42:40:70:69:8a:42:
0d:fa:fb:be:2b:f3:e7:cc:9f:35:c8:60:c4:c2:46:2b:9e:51:
38:2f:e3:ad:7e:fd:e4:25:0a:41:9e:0d:16:b4:82:08:6c:5a:
d0:11:f7:39:55:d7:7c:e3:31:4e:b8:92:80:91:d0:ae:ac:ea:
01:0a:e7:a3:9f:4a:0c:b5:ab:08:c0:ab:7f:f9:dd:81:fb:3e:
05:74:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:50 2025 by rpki-client