
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
File: IKMpfJ1buva90jHKeigYuGnsKFM.roa (raw, json)
Hash identifier: eU3H4B6blasU1u2HSbdO/asDsUM49opuKvXXVOLRI5c=
Subject key identifier: 20:A3:29:7C:9D:5B:BA:F6:BD:D2:31:CA:7A:28:18:B8:69:EC:28:53
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0464
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
Signing time: Mon 01 Sep 2025 01:38:25 +0000
ROA not before: Mon 01 Sep 2025 01:38:25 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 10013
IP address blocks: 61.44.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Sep 1 01:38:25 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=20A3297C9D5BBAF6BDD231CA7A2818B869EC2853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:26:97:91:10:1f:e5:a9:1f:6a:8e:25:a5:
b4:d9:2b:1b:0f:3c:6f:b9:65:d4:bc:5f:b2:af:51:
2b:7a:b4:e1:8b:e8:48:38:0f:12:29:39:f3:da:96:
93:05:9f:02:9a:e5:b3:c6:60:b7:c1:be:ab:d3:da:
9a:f5:4a:ee:19:bc:36:f2:4d:b7:f3:e4:ab:07:85:
42:8e:0c:2a:bb:29:8a:c3:55:a7:75:f4:2d:6b:94:
e1:64:2d:61:62:e3:1c:e4:b9:5e:c1:e8:a3:5a:2f:
8c:81:47:af:d9:f6:89:c0:78:ec:5c:ea:c4:89:69:
61:5e:93:0d:d1:ba:fd:41:8b:35:f8:40:80:68:a9:
76:e6:82:22:c6:59:d0:9d:87:80:26:6a:5b:1d:11:
ea:73:7c:25:34:85:e5:6c:53:d0:02:36:ef:4a:6c:
f1:7d:13:79:93:52:a3:0f:71:b2:17:33:ba:d0:59:
11:a6:ea:52:9e:c0:f9:6c:ed:4c:05:45:61:e7:5b:
36:1b:5d:e9:56:d6:7c:4d:0d:d7:fb:ec:48:e6:ba:
e6:ac:2b:35:53:3d:7f:63:e1:64:6b:7a:af:6c:24:
e0:81:d8:0e:3f:a8:ef:c1:cf:8e:b9:1d:26:a1:c6:
0d:58:de:e6:6d:c6:9e:31:10:48:d3:63:a2:6a:27:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:29:7C:9D:5B:BA:F6:BD:D2:31:CA:7A:28:18:B8:69:EC:28:53
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.44.80.0/20
Signature Algorithm: sha256WithRSAEncryption
02:62:38:b1:92:72:9b:cb:c5:7e:dd:ac:8a:11:68:08:35:42:
5a:4f:5c:fb:bf:60:ad:55:dd:ab:25:e3:06:e8:64:ad:13:54:
ac:f3:07:bc:9d:88:5f:eb:e3:6b:13:9c:5f:17:2a:ed:98:8a:
18:79:28:92:69:98:e1:a1:a0:75:f5:fa:cc:06:d1:ce:c4:9e:
53:24:25:c1:dc:22:c5:2d:15:24:4d:40:82:3e:63:67:4b:74:
b1:64:6b:ef:a1:3a:e8:48:4e:11:55:41:bb:4a:3c:eb:df:55:
1e:4f:fb:58:56:ea:53:76:98:36:ce:44:fb:3c:78:58:d1:35:
c7:63:e6:9d:f2:ef:19:fe:ba:83:f1:ea:41:d0:a5:8b:08:5c:
c9:db:d2:59:4b:04:15:3d:1e:e0:76:b3:65:a4:1f:fc:70:61:
59:41:6c:6a:96:31:ad:94:d8:1f:0e:50:30:f6:e9:b5:9f:7d:
00:90:76:c4:1a:71:cb:83:8e:1b:56:d6:d9:1b:c4:48:db:df:
a6:30:56:97:e7:8e:d1:65:9e:50:ab:6e:10:22:2f:c9:32:26:
55:f7:33:bf:a9:3c:d8:c2:89:8b:ad:ef:c8:b2:be:97:46:6a:
a0:a3:04:c8:7c:31:4a:51:47:ac:e0:a4:33:f2:77:50:3c:79:
d3:fb:44:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw
MTM4MjVaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwQTMyOTdDOUQ1QkJB
RjZCREQyMzFDQTdBMjgxOEI4NjlFQzI4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+PiaXkRAf5akfao4lpbTZKxsPPG+5ZdS8X7KvUSt6tOGL6Eg4
DxIpOfPalpMFnwKa5bPGYLfBvqvT2pr1Su4ZvDbyTbfz5KsHhUKODCq7KYrDVad1
9C1rlOFkLWFi4xzkuV7B6KNaL4yBR6/Z9onAeOxc6sSJaWFekw3Ruv1BizX4QIBo
qXbmgiLGWdCdh4AmalsdEepzfCU0heVsU9ACNu9KbPF9E3mTUqMPcbIXM7rQWRGm
6lKewPls7UwFRWHnWzYbXelW1nxNDdf77EjmuuasKzVTPX9j4WRreq9sJOCB2A4/
qO/Bz465HSahxg1Y3uZtxp4xEEjTY6JqJwgzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIKMpfJ1buva90jHKeigYuGnsKFMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0lLTXBmSjFidXZhOTBqSEtlaWdZdUduc0tGTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9LFAwDQYJKoZIhvcNAQELBQADggEBAAJiOLGScpvLxX7drIoRaAg1QlpP
XPu/YK1V3asl4wboZK0TVKzzB7ydiF/r42sTnF8XKu2Yihh5KJJpmOGhoHX1+swG
0c7EnlMkJcHcIsUtFSRNQII+Y2dLdLFka++hOuhIThFVQbtKPOvfVR5P+1hW6lN2
mDbORPs8eFjRNcdj5p3y7xn+uoPx6kHQpYsIXMnb0llLBBU9HuB2s2WkH/xwYVlB
bGqWMa2U2B8OUDD26bWffQCQdsQaccuDjhtW1tkbxEjb36YwVpfnjtFlnlCrbhAi
L8kyJlX3M7+pPNjCiYut78iyvpdGaqCjBMh8MUpRR6zgpDPyd1A8edP7RD8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:31:49 2025 by rpki-client