
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
File: Fi_13lcJge16GftSrkAlKksAVEI.roa (raw, json)
Hash identifier: Jt0IjtCL/6M7HHnBeTiGKJIV1/fRUpHmxm/vnnvIs9I=
Subject key identifier: 16:2F:F5:DE:57:09:81:ED:7A:19:FB:52:AE:40:25:2A:4B:00:54:42
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 51
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
Signing time: Tue 10 Jun 2025 10:48:38 +0000
ROA not before: Tue 10 Jun 2025 10:48:38 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9615
IP address blocks: 219.101.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Jun 10 10:48:38 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=162FF5DE570981ED7A19FB52AE40252A4B005442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:ef:36:69:af:f9:bb:67:f4:61:5a:48:31:
0f:96:de:99:d4:92:71:31:56:e1:f8:95:38:8d:83:
84:f0:91:7e:ec:2c:87:c2:b8:79:1f:00:04:51:dd:
e4:41:6e:0f:03:3c:96:42:7f:48:fb:11:90:81:80:
63:e9:14:b4:eb:52:c0:a6:bc:70:e2:ab:19:4a:87:
3c:9a:6e:4b:16:7b:06:37:3d:12:d9:ad:25:a5:46:
5e:2a:b6:0d:ce:84:fa:1d:b8:40:c6:e0:19:18:86:
f5:25:28:5c:1a:94:de:8d:51:20:f2:91:32:15:69:
82:94:11:b4:c7:bd:f1:fa:37:d1:f1:23:f4:97:60:
04:49:0c:70:30:3a:33:44:4c:bb:09:e0:ef:90:33:
8a:de:c6:a4:a4:a3:a7:00:02:7f:d0:a4:9f:87:b6:
16:62:62:59:d6:27:45:22:ee:8d:6d:fe:37:9e:36:
ce:83:72:b5:69:ef:24:1d:1f:4a:6b:60:27:7d:c0:
ed:04:8c:71:41:6c:9a:02:ac:d4:c5:dd:4b:78:a6:
5b:25:98:5b:85:ed:cf:b7:b6:64:ac:40:36:59:38:
d2:bf:db:8e:ea:97:b5:4a:64:3a:35:dd:29:ff:40:
92:44:c4:20:c7:cf:8d:d0:9d:f4:9b:4b:03:59:d7:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:F5:DE:57:09:81:ED:7A:19:FB:52:AE:40:25:2A:4B:00:54:42
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/Fi_13lcJge16GftSrkAlKksAVEI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.101.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:3a:5a:e8:52:4d:29:d9:e6:b1:39:24:84:16:1c:f7:3c:ac:
8b:71:62:05:19:48:81:cc:aa:c1:ee:33:01:9b:18:ed:a6:e5:
e2:5b:36:7f:99:e7:78:6b:ca:ae:3d:5b:f3:5c:6b:bb:f0:ce:
29:0b:ae:56:df:e1:26:1c:e3:dd:4c:bd:4b:e9:a1:ee:6a:7c:
d4:93:06:63:bd:9a:e0:ae:ca:b7:6c:39:5b:09:e0:38:7b:f4:
7c:8b:a6:6d:98:6d:25:43:14:dc:b0:cf:d9:46:aa:24:88:78:
b8:27:c8:73:91:5e:92:ca:fa:ae:8d:b4:e2:db:49:32:47:76:
ac:b3:ed:d0:28:62:6f:35:28:e6:65:4b:b7:78:34:f3:af:9c:
1b:20:77:41:2b:68:15:c1:87:54:40:bd:f1:92:0c:d9:4e:07:
00:87:04:78:9e:e7:c4:68:d4:ee:8c:79:c7:84:bd:ec:b6:1a:
93:72:e1:06:80:10:46:23:db:4d:91:bf:c3:32:3b:8c:46:53:
b8:b4:f3:5c:4f:0c:79:d5:da:65:76:90:19:13:6f:b8:5f:c0:
e5:d4:e3:0b:2d:94:7a:73:d6:2c:bb:25:60:2c:c8:50:a0:c4:
f6:ba:ab:ae:50:2b:6a:09:1b:17:6f:0f:be:d2:98:2c:13:08:
df:f0:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:22:29 2025 by rpki-client