
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
File: -R1pp-DwL7hv1DnKmrsbAMlJz44.roa (raw, json)
Hash identifier: 9+4rdRyOpoKwjNYj4EzPqD1RZP0mBU4vfETzgLUn1Mg=
Subject key identifier: F9:1D:69:A7:E0:F0:2F:B8:6F:D4:39:CA:9A:BB:1B:00:C9:49:CF:8E
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 1E
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
Signing time: Mon 01 Sep 2025 01:31:51 +0000
ROA not before: Mon 01 Sep 2025 01:31:51 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 9354
IP address blocks: 211.1.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Sep 1 01:31:51 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=F91D69A7E0F02FB86FD439CA9ABB1B00C949CF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:09:3b:e0:54:b6:fb:44:af:fa:e2:78:15:
43:c4:d4:9b:a1:9c:81:c5:a7:76:27:3c:a7:b3:14:
3d:16:55:44:d8:2c:84:51:e5:cc:d8:bb:07:f4:ab:
2c:2e:34:a5:2d:7d:23:22:83:20:23:90:98:06:6b:
46:a3:52:22:b3:39:15:8d:5e:ea:9f:6d:09:7b:16:
f1:5b:a2:48:44:b7:93:fe:21:d2:86:6e:f4:1d:1d:
8a:6e:69:37:c5:99:b6:06:83:59:d5:c1:71:c3:9e:
c4:a8:84:ce:62:55:75:b4:2a:5d:17:2b:58:95:e1:
7d:8e:a9:4a:2a:91:36:b7:0f:2d:2f:27:54:23:e4:
40:93:1d:2d:f2:79:96:84:21:c1:a8:d9:b1:c9:23:
69:34:b1:d7:6f:45:e5:f6:34:bb:ad:0a:50:46:3f:
66:74:ab:50:27:6a:ab:13:d6:9d:37:0c:8f:1b:83:
a8:fe:43:81:f5:6c:c1:0b:f6:8d:d5:63:59:36:7e:
db:55:69:81:dc:1c:d8:50:cb:2d:b7:40:fb:38:1c:
8e:4f:7d:d9:34:62:54:89:85:de:f3:34:03:2d:f5:
57:74:a9:47:8a:a4:e3:dd:df:11:fd:bb:c7:03:c0:
9b:31:7f:ae:fc:c7:b4:20:de:98:75:c6:d3:62:7d:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:69:A7:E0:F0:2F:B8:6F:D4:39:CA:9A:BB:1B:00:C9:49:CF:8E
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.192.0/19
Signature Algorithm: sha256WithRSAEncryption
76:73:ad:5d:85:69:ab:fe:2c:93:b1:6f:1f:d1:b5:7d:11:c4:
d4:48:45:84:b7:1f:1c:71:2f:47:e7:dc:d9:32:7c:96:04:19:
8d:28:34:17:37:a2:ad:41:6a:58:d9:cf:74:7e:94:c8:04:7a:
34:ea:55:b2:c0:34:d0:73:38:b0:e9:42:43:6c:5d:f5:a9:9b:
0b:d6:25:97:e6:a0:78:73:b8:f2:a2:3c:db:83:bf:d1:39:d5:
52:53:9b:1a:df:94:ae:1b:b4:61:32:66:30:df:d0:9a:2d:e0:
7c:69:21:43:e9:93:56:df:66:e0:50:a6:bf:4e:d9:3f:c2:44:
9e:d8:f9:4b:0b:ff:a2:55:b8:96:40:0a:16:cf:5c:46:32:17:
f9:85:95:ba:df:e6:e7:ff:2b:19:79:c8:79:19:1f:6d:6a:f7:
a2:68:de:08:fc:5b:9b:13:b4:39:55:af:62:02:01:17:18:f7:
bb:22:09:4e:12:29:8d:bd:22:66:f2:f1:a2:cb:53:ec:5e:db:
10:7a:83:46:bc:0a:dc:8e:1d:ad:d9:64:27:52:bc:23:43:9f:
76:90:96:68:5b:d7:98:82:87:96:8e:19:61:a0:1f:d0:e7:bf:
2a:fb:b0:d9:b0:d0:f8:59:b2:cd:e7:c7:87:6f:7a:b0:23:3b:
42:58:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:37:13 2025 by rpki-client