
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
File: Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa (raw, json)
Hash identifier: aTlsM+FXDB7BRb4/IBs28eXQvyQY5gJlVAa+nY6sz6c=
Subject key identifier: 56:FE:58:DF:12:BD:30:84:4C:8D:FB:4A:C4:B4:57:EA:14:7B:9E:43
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 25
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
Signing time: Wed 01 Oct 2025 01:29:11 +0000
ROA not before: Wed 01 Oct 2025 01:29:11 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 9354
IP address blocks: 125.2.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 11:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Oct 1 01:29:11 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=56FE58DF12BD30844C8DFB4AC4B457EA147B9E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:d4:7c:5f:1c:a4:8e:53:57:71:aa:67:ce:
ca:42:8a:c4:57:d6:52:49:7e:39:62:b9:f2:aa:40:
7c:ad:2c:3a:dc:54:da:24:46:fe:15:6a:40:5a:a3:
2f:df:d0:ce:c4:21:d0:f0:24:7c:cc:14:c6:b6:9a:
d0:2c:77:7c:25:7f:6e:6d:f0:31:8c:a3:06:72:1c:
f9:ab:01:01:13:c0:f3:87:5e:29:a0:2e:63:67:02:
fd:b0:ab:f8:d8:15:cb:60:3a:ba:17:66:51:e4:58:
11:89:cc:18:9a:dd:40:c0:68:3f:40:86:73:7f:d4:
d8:1a:79:1f:8f:54:e5:65:38:d9:9d:92:3a:80:ee:
c3:1b:13:9d:e9:99:de:8e:52:11:5d:30:1c:42:7b:
94:78:ba:2e:7b:c1:c2:66:26:d3:d3:32:a7:e7:93:
b3:b3:aa:66:6f:d6:47:50:76:71:02:21:ea:98:f4:
68:85:29:97:9a:86:80:aa:a7:9f:00:a8:48:fd:21:
b9:a1:b2:c1:4d:3a:60:c2:07:fe:40:5c:1d:f1:68:
a8:d0:67:cf:4b:69:b7:0b:e0:27:19:c3:75:cc:da:
b9:77:79:f4:2d:f9:f6:41:e0:17:d8:b1:33:d9:37:
6f:8a:d2:1c:5c:91:79:dd:ac:9f:d2:02:db:f1:bb:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:58:DF:12:BD:30:84:4C:8D:FB:4A:C4:B4:57:EA:14:7B:9E:43
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.2.128.0/18
Signature Algorithm: sha256WithRSAEncryption
46:58:90:d5:61:f9:a0:b5:f9:4a:dd:f6:35:6b:29:82:9e:92:
04:f4:73:d3:ff:0e:e0:4b:a1:85:b5:ff:ce:b1:54:b0:1e:1a:
19:51:8f:b9:ce:9b:55:ed:91:9f:f4:2c:2f:39:d4:0b:a1:25:
af:d1:da:db:82:e5:cb:b5:08:ad:e1:0e:d1:45:00:c2:e6:ae:
c0:4f:e2:cb:34:2b:a2:ff:80:46:74:f1:0d:ad:d4:5f:8d:a9:
72:27:43:c3:37:4c:1c:ad:33:6c:e7:0b:56:15:59:5d:d3:2d:
a2:05:a0:9e:3d:8c:e1:c4:7a:2e:be:c5:32:32:ab:84:78:52:
ed:dc:3d:c9:90:24:75:b4:a4:cf:c4:66:80:c5:f1:95:3e:5c:
86:47:9f:79:ed:ea:62:d3:74:ae:ab:1d:cb:63:e5:b8:00:e0:
f1:75:49:44:21:85:8d:04:e8:1d:cf:72:f6:72:93:41:5d:de:
74:96:3e:46:32:78:73:4c:4e:d8:59:a7:d2:17:60:6e:e5:f4:
09:b6:9e:9f:dc:db:e5:53:15:bd:db:53:35:00:d6:33:7a:c3:
2c:c1:ec:9a:23:84:49:42:d7:2e:56:a6:87:c5:f5:fd:76:b9:
ed:b6:32:fa:46:91:98:1e:f7:d4:51:20:11:a1:b3:3f:04:3d:
f1:30:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:42:05 2025 by rpki-client