
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
File: JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa (raw, json)
Hash identifier: nLbNOJNWQ+vk+Lj7DDY4VcqW2h8sreZ0KTwkzvjd6H8=
Subject key identifier: 24:F2:75:74:DC:C9:E8:B3:33:25:F9:50:BC:AC:42:31:DF:D2:9B:E2
Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial: 17
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
Signing time: Tue 01 Apr 2025 01:31:17 +0000
ROA not before: Tue 01 Apr 2025 01:31:17 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 17955
IP address blocks: 120.88.16.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Validity
Not Before: Apr 1 01:31:17 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=24F27574DCC9E8B33325F950BCAC4231DFD29BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:4e:95:b8:29:71:d7:1b:d9:0a:6e:0f:f1:
71:08:bd:4e:4a:94:ab:bf:2a:fa:5c:b2:20:0b:44:
c7:56:f6:7e:82:54:27:72:73:ef:c1:ac:42:9b:71:
14:98:aa:db:13:3e:43:30:83:dc:98:a7:47:80:c7:
af:ec:7c:6e:1d:9f:e3:c8:ae:e1:26:a5:3d:1d:cc:
35:db:2d:2d:8f:d0:fe:cb:c3:a6:98:2b:a7:6f:5d:
03:19:91:e1:2d:1f:a1:4f:16:ec:bb:2c:fc:b4:50:
4b:30:6c:e0:2a:0a:ad:d8:dd:41:62:bd:1a:17:da:
09:85:99:4e:5d:35:33:ff:29:73:95:ce:e9:ee:3b:
39:56:ea:a2:81:e7:a4:61:65:5e:42:4c:18:04:52:
6e:00:7b:ee:01:e4:1c:c0:22:35:6d:c0:4e:84:57:
09:a5:2c:29:d1:88:1d:e1:14:df:42:1d:75:62:ba:
00:ff:b1:f7:12:7e:2b:ae:9b:45:56:dd:23:d0:19:
a9:51:76:90:38:0d:68:01:f2:67:33:ae:49:56:b8:
5e:04:a5:cb:18:58:90:25:a3:00:5f:82:41:5f:91:
cb:9b:da:bf:23:e6:53:1c:8c:40:32:e4:89:01:fd:
76:d6:6d:e3:2a:d4:9d:2c:80:88:a6:f9:06:16:04:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F2:75:74:DC:C9:E8:B3:33:25:F9:50:BC:AC:42:31:DF:D2:9B:E2
X509v3 Authority Key Identifier:
keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.88.16.0/20
Signature Algorithm: sha256WithRSAEncryption
18:89:b0:36:78:e8:ed:73:e1:8c:33:3b:02:5d:4d:16:ff:f1:
82:44:31:c0:77:8e:3d:11:0c:c3:6a:8e:f7:38:8a:f5:95:e4:
bc:35:ed:b4:56:c6:64:13:2b:32:c2:07:9e:a0:26:b0:7c:c9:
10:b8:3d:b7:2a:3d:b8:fc:0f:54:8e:21:7e:67:2d:7c:59:6c:
fb:57:13:ee:51:47:17:f3:30:24:da:c2:65:78:30:d1:5a:ea:
b0:21:d0:1f:a7:43:a3:d6:8f:d1:98:80:b2:4b:dc:ad:39:b3:
0a:d6:82:46:1d:6e:6a:9d:ce:56:c0:18:64:2d:c1:60:e8:1d:
4a:1a:0c:56:21:19:52:21:d9:80:3d:c6:d3:29:69:95:bf:23:
75:c4:96:b6:3b:8c:57:d4:06:88:39:4d:93:9d:97:99:12:da:
a4:ee:85:93:73:39:fe:54:97:d6:2a:a9:89:0d:49:a7:7b:5f:
6a:97:2a:ad:94:5b:65:f2:38:62:71:46:d8:43:ac:b7:6c:2d:
f7:46:4a:b6:97:23:6d:94:55:56:e9:ba:fa:fa:9a:04:ef:7d:
f4:0f:bf:9e:cf:a1:e8:01:9b:fa:a0:be:29:60:2d:c9:9a:26:
8f:e8:b0:46:e1:e7:12:6a:ca:39:e7:19:e3:61:ab:8a:71:99:
b7:4a:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:58:18 2025 by rpki-client