
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxZ-dQ5hqCk1MjUV3DTMVCoIZDI.roa
File: CxZ-dQ5hqCk1MjUV3DTMVCoIZDI.roa (raw, json)
Hash identifier: R9TWKvbLo9jORFokyxLj6FHFu4cL0q1yePPmBs1TUgw=
Subject key identifier: 0B:16:7E:75:0E:61:A8:29:35:32:35:15:DC:34:CC:54:2A:08:64:32
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 046B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxZ-dQ5hqCk1MjUV3DTMVCoIZDI.roa
Signing time: Wed 01 Oct 2025 01:34:46 +0000
ROA not before: Wed 01 Oct 2025 01:34:46 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 10013
IP address blocks: 110.74.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 1 01:34:46 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=0B167E750E61A82935323515DC34CC542A086432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:b3:3d:a3:27:e3:2c:ba:01:c8:8a:e7:ab:
bf:21:68:ff:68:c5:26:20:8f:ac:dc:a1:2e:29:8b:
bc:45:80:f7:84:cf:27:e7:46:73:10:4e:ae:98:e0:
36:98:c1:29:79:e6:21:8a:3a:59:63:23:14:96:46:
db:30:d2:c3:07:41:54:09:67:e6:ec:12:c2:55:d4:
ce:a5:81:5c:ca:2f:a1:45:5d:8d:cd:2c:7b:57:d6:
b5:45:bb:cf:97:8c:1d:b1:e4:c3:00:81:1e:97:31:
d2:ae:1a:60:61:0f:85:de:9b:86:92:f9:56:a7:58:
da:e0:17:19:ee:9e:fd:ae:7b:bf:3e:0b:72:b0:76:
a3:63:7c:60:c4:79:f8:20:a4:7c:07:57:8b:58:79:
11:9e:d5:63:60:e4:01:00:9d:1d:46:29:8e:a9:09:
e3:13:82:d5:33:ee:e0:5a:21:d4:48:b4:01:06:0f:
37:02:94:e8:dd:23:82:4d:73:a9:e1:aa:76:d5:cd:
47:61:5e:bc:4a:d5:fa:2e:a9:cb:70:ac:d4:dd:2b:
e3:95:7b:23:bb:58:14:35:0d:af:7a:3a:9d:5d:e3:
ab:c4:48:43:53:53:2a:91:70:26:17:eb:ca:6d:27:
da:5d:f8:23:1d:7a:ae:ad:4e:da:dd:7b:b4:5e:dd:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:7E:75:0E:61:A8:29:35:32:35:15:DC:34:CC:54:2A:08:64:32
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CxZ-dQ5hqCk1MjUV3DTMVCoIZDI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.74.121.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0f:81:72:08:8e:62:cd:19:18:d2:1c:b8:c2:3b:87:5e:e2:
42:9c:c5:8f:44:f9:91:a3:f5:d4:ef:4d:8a:70:aa:64:c0:21:
69:2d:e1:7f:20:99:5f:f6:9c:4b:c6:e9:5b:bf:65:7c:3c:51:
c1:10:bb:62:99:c1:03:a6:f8:d8:58:97:4b:87:a0:89:ad:af:
c9:1d:68:33:6e:fe:46:37:5f:e6:09:be:56:7f:87:29:fb:d7:
25:ba:da:7d:af:4c:a8:73:25:d4:87:56:7f:cf:26:88:4f:b9:
77:56:80:13:07:71:2c:e4:32:d5:73:68:11:c0:95:73:a7:26:
98:9a:92:a7:8b:88:38:04:67:ae:c7:53:17:2e:e3:cf:0e:60:
30:c3:b5:24:42:6f:36:65:0a:ff:15:11:01:b0:a5:85:4a:2b:
20:25:15:35:35:16:46:c6:6a:b1:a8:22:66:01:36:d5:45:34:
3e:cc:3c:b9:48:ef:f9:32:26:b2:0e:44:6b:ca:80:b1:4b:23:
44:eb:88:96:b5:ba:b7:96:15:74:bb:b4:c1:e7:05:4d:9a:e3:
e9:7d:76:4f:28:44:83:5c:35:99:cf:6f:5c:f3:d0:01:cc:1b:
5f:53:c7:32:7f:4a:57:e1:9b:23:f9:3b:c9:87:2f:df:ce:28:
ad:d2:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:09:14 2025 by rpki-client