
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa
File: D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa (raw, json)
Hash identifier: f8TrPnLG7EXmY9Rle3lGtXWOT6g8W6WuSFTe0Pgan+g=
Subject key identifier: 0F:91:D0:F9:82:1F:62:C4:CC:90:20:87:96:95:DD:AF:93:26:3A:01
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0444
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa
Signing time: Wed 25 Jun 2025 01:25:55 +0000
ROA not before: Wed 25 Jun 2025 01:25:55 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 10013
IP address blocks: 36.55.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jun 25 01:25:55 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=0F91D0F9821F62C4CC9020879695DDAF93263A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:ac:aa:0c:ed:e4:1c:ee:a3:c1:6b:f7:e5:
00:fe:2c:8b:e0:11:92:2b:3b:9e:eb:58:24:36:4e:
14:01:86:4a:90:e9:3d:f6:4f:ae:c2:c5:af:df:1e:
06:ec:3c:ce:e2:c2:ba:93:74:24:af:75:4a:50:b6:
37:19:fb:10:1e:eb:00:7d:24:ea:c2:42:d8:51:04:
f2:2a:03:c7:b6:a1:aa:2c:f7:ec:ce:b6:81:9e:03:
9c:1c:69:9e:f0:31:4b:d8:c6:1d:11:80:06:7a:91:
eb:af:cf:b9:49:fc:1e:d8:df:f1:42:80:83:61:c1:
83:c1:90:95:0b:41:dd:e1:b2:65:5f:b9:aa:fa:54:
b3:c6:e1:b3:f1:c0:0f:27:5f:17:f7:f5:5e:51:3a:
41:25:0d:fe:2c:33:c8:18:02:1e:84:c9:af:58:43:
17:d0:80:77:c1:96:35:f7:80:ec:41:c5:2d:77:f2:
77:d9:00:53:5a:64:bc:d4:58:7e:23:90:b1:be:97:
22:54:31:11:c9:26:da:9b:35:e4:f9:12:41:4f:4d:
c8:01:5a:46:38:6c:32:e0:bb:85:9e:14:49:43:bb:
a3:76:bc:d0:44:c1:25:b9:24:17:bc:17:b2:ec:dc:
f5:19:90:6e:6c:ab:64:9e:ce:3f:4d:f1:98:fa:8a:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:D0:F9:82:1F:62:C4:CC:90:20:87:96:95:DD:AF:93:26:3A:01
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.55.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:63:67:06:a0:b2:20:65:fe:b8:0e:62:ac:5a:4e:80:df:ed:
e8:00:86:c9:24:d3:b5:a1:d1:9a:fa:78:88:76:44:02:2f:2f:
ac:a0:8e:f3:a4:ed:91:39:c7:b2:06:ff:34:c0:fc:3f:ca:de:
50:94:d6:7d:de:0b:57:41:5a:74:2e:8a:ad:82:31:6f:25:f9:
bb:b0:b1:77:5a:40:26:22:32:fc:60:98:5f:84:77:88:dd:ee:
88:79:d4:48:40:a3:fa:a3:17:96:fd:13:6c:39:3f:62:c3:d1:
eb:03:23:06:c2:9c:8e:3c:d2:21:29:88:f3:2e:63:07:80:f6:
7c:50:06:a2:50:e8:11:d8:be:60:98:a4:2f:7c:d8:3d:0b:63:
15:59:6e:8b:72:c4:99:01:e6:80:f3:2d:53:47:11:0a:02:43:
17:7d:e7:5b:f1:e8:85:1f:45:5d:d8:0f:18:61:65:fa:63:89:
12:35:d2:a6:25:9d:75:9d:61:45:6a:5e:e3:72:6f:51:46:99:
c0:08:13:84:2d:7e:13:61:2b:f3:36:1b:b8:70:2b:1c:0a:84:
06:14:e7:56:94:f9:43:27:2a:07:1b:7e:e3:50:99:50:fc:ee:
cb:6b:cd:f8:d2:b1:5b:1f:10:8e:e0:15:31:72:4e:b6:69:2f:
50:bc:94:70
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MjUw
MTI1NTVaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGOTFEMEY5ODIxRjYy
QzRDQzkwMjA4Nzk2OTVEREFGOTMyNjNBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrEqyqDO3kHO6jwWv35QD+LIvgEZIrO57rWCQ2ThQBhkqQ6T32
T67Cxa/fHgbsPM7iwrqTdCSvdUpQtjcZ+xAe6wB9JOrCQthRBPIqA8e2oaos9+zO
toGeA5wcaZ7wMUvYxh0RgAZ6keuvz7lJ/B7Y3/FCgINhwYPBkJULQd3hsmVfuar6
VLPG4bPxwA8nXxf39V5ROkElDf4sM8gYAh6Eya9YQxfQgHfBljX3gOxBxS138nfZ
AFNaZLzUWH4jkLG+lyJUMRHJJtqbNeT5EkFPTcgBWkY4bDLgu4WeFElDu6N2vNBE
wSW5JBe8F7Ls3PUZkG5sq2Sezj9N8Zj6ijwdAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUD5HQ+YIfYsTMkCCHlpXdr5MmOgEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0Q1SFEtWUlmWXNUTWtDQ0hscFhkcjVNbU9nRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAkNzANBgkqhkiG9w0BAQsFAAOCAQEACmNnBqCyIGX+uA5irFpOgN/t6ACG
ySTTtaHRmvp4iHZEAi8vrKCO86TtkTnHsgb/NMD8P8reUJTWfd4LV0FadC6KrYIx
byX5u7Cxd1pAJiIy/GCYX4R3iN3uiHnUSECj+qMXlv0TbDk/YsPR6wMjBsKcjjzS
ISmI8y5jB4D2fFAGolDoEdi+YJikL3zYPQtjFVlui3LEmQHmgPMtU0cRCgJDF33n
W/HohR9FXdgPGGFl+mOJEjXSpiWddZ1hRWpe43JvUUaZwAgThC1+E2Er8zYbuHAr
HAqEBhTnVpT5QycqBxt+41CZUPzuy2vN+NKxWx8QjuAVMXJOtmkvULyUcA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:41 2025 by rpki-client