
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
File: x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa (raw, json)
Hash identifier: UYpsor/oQZoMGP7R8QDi3Int/Nyo6cjMTeSo7tPwVk0=
Subject key identifier: C7:F0:93:E4:31:5B:F0:27:B7:65:85:AE:7B:E5:A0:1A:FB:72:3B:9F
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 23
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
Signing time: Mon 01 Sep 2025 01:31:53 +0000
ROA not before: Mon 01 Sep 2025 01:31:53 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 9354
IP address blocks: 221.118.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Sep 1 01:31:53 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=C7F093E4315BF027B76585AE7BE5A01AFB723B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:38:b1:d1:9b:e0:4a:8e:24:f1:36:90:b3:
f6:8e:28:df:9c:23:07:33:df:c5:2e:de:78:b4:a1:
ac:1d:a5:90:16:40:ae:c8:58:24:3d:3d:cc:53:32:
5c:c5:a3:d9:2e:02:44:ec:0b:ff:2c:c4:64:90:04:
03:da:3d:ff:9d:cd:37:d9:8e:d0:f4:38:10:c0:13:
ce:7d:b4:e7:23:bd:f6:02:cb:4b:a6:b2:43:33:bf:
42:50:f4:f2:3c:cc:c7:ec:dd:0a:97:a1:fa:ff:85:
f5:6e:90:71:1c:7d:b5:40:88:94:66:02:21:68:95:
7d:d0:8b:f4:cd:f0:ce:e6:4b:7a:04:4d:ca:f6:6a:
87:5d:3e:32:4c:2b:51:e2:86:eb:2b:49:f7:9b:af:
47:4a:88:cc:12:2c:d0:5d:cf:b8:5e:70:44:d0:88:
9f:ca:46:0e:ec:84:09:d8:66:24:36:98:df:dc:42:
df:6d:4b:43:1b:9c:79:17:ac:93:65:8e:b8:70:7d:
e8:3f:8a:08:a2:01:f0:4f:70:4a:a1:ef:41:57:80:
0e:12:3d:c9:99:af:2e:d8:79:d0:10:1e:0f:f4:48:
85:c3:9f:75:2a:77:0a:ca:87:b7:58:1e:44:03:31:
9c:d5:aa:6d:69:27:1c:de:74:cb:ac:b2:de:d7:0d:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:93:E4:31:5B:F0:27:B7:65:85:AE:7B:E5:A0:1A:FB:72:3B:9F
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
221.118.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:05:61:98:84:e1:b6:e7:71:06:0c:50:f7:f4:42:ee:2f:1d:
04:08:d2:6f:b6:43:63:b3:66:89:70:0e:2e:e7:17:b6:ff:f3:
cc:82:43:a7:04:f5:f6:af:a3:53:5a:3b:4e:69:43:9e:84:69:
48:16:8c:49:c3:c6:3f:bf:05:69:30:b9:cb:7e:5d:f5:c7:1f:
83:ed:81:d7:4f:c6:b8:47:58:d7:5f:f3:9f:55:74:fa:d0:8f:
29:bd:a4:34:5f:df:a3:b8:38:e3:69:68:2f:aa:c5:63:6e:ca:
0c:35:14:57:fd:c5:1d:9a:29:f6:e9:e3:b3:28:71:86:35:dc:
5a:13:72:53:a9:de:1b:58:61:6e:62:51:3b:cd:14:87:b7:f7:
81:29:0f:64:4f:7e:a1:e3:e1:8f:34:e5:16:ae:a2:94:bf:12:
ae:10:92:90:55:19:55:d6:9f:0e:e1:a6:b2:58:32:40:ab:81:
c7:d6:99:f7:55:c9:3f:68:3c:a5:f8:98:ca:e5:06:a4:90:26:
a5:13:95:b9:7e:66:1e:3c:bc:d2:73:dc:0f:03:10:6d:6f:b9:
a5:57:8f:4e:60:1a:2b:98:fb:26:dd:6f:43:60:d2:d5:4f:71:
42:40:9c:e7:2a:e6:74:45:59:fc:42:c0:87:24:00:5d:9a:21:
96:ab:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:01:40 2025 by rpki-client