
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
File: JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa (raw, json)
Hash identifier: lpTfZddhLj2nHj09O/wdPVPApI1pDiYQkWhQJfmZF2Y=
Subject key identifier: 27:13:BE:1D:78:FB:D9:DF:B8:2C:3F:B6:9B:19:86:67:EF:9A:43:43
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0378
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
Signing time: Thu 01 May 2025 01:33:31 +0000
ROA not before: Thu 01 May 2025 01:33:31 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 10013
IP address blocks: 119.150.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 1 01:33:31 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=2713BE1D78FBD9DFB82C3FB69B198667EF9A4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:20:f8:09:0a:bd:4c:19:c1:fa:ac:87:5c:
58:0f:6e:ae:fa:93:f7:5d:54:bd:5b:71:f0:82:6c:
16:21:30:35:23:6b:0d:e2:d7:69:b4:79:57:da:21:
a2:82:af:49:81:21:40:e0:91:04:28:a9:06:a3:14:
e3:64:06:5e:06:da:07:cb:fb:17:b6:8e:93:7f:70:
af:ad:24:01:24:2c:44:2a:5b:1d:4d:61:ef:9f:35:
ea:7b:b9:de:3e:d2:ea:4c:45:9d:e6:70:dd:21:9d:
7e:89:99:62:cb:5c:db:6f:2e:03:24:35:c3:6d:c4:
68:cc:4d:d2:ff:00:80:8a:8d:8c:18:8d:c5:38:d3:
e7:d4:eb:7c:7d:ef:57:91:97:75:16:5e:c1:e5:68:
0c:f3:e8:8e:93:4a:bc:61:96:f5:50:86:8f:0f:48:
67:74:7a:05:72:ae:df:ab:6c:4a:c6:ba:d9:15:eb:
ff:6e:ca:de:45:08:11:80:de:2f:f1:e8:6a:c4:73:
8f:16:32:0f:26:86:08:ac:fd:32:b2:c2:fa:68:09:
ad:b8:9c:b6:90:66:74:1f:07:81:52:be:40:14:e4:
f2:35:0c:33:7f:ad:46:1c:18:f0:11:6b:b7:3d:c1:
ed:40:5c:78:1d:3c:71:53:c0:1f:2d:a9:c1:c8:07:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:BE:1D:78:FB:D9:DF:B8:2C:3F:B6:9B:19:86:67:EF:9A:43:43
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2e:0f:9c:5b:e7:2f:7c:53:a8:8b:13:34:76:ad:22:e1:26:
8b:44:84:2d:68:0b:a2:60:72:8c:cd:42:98:b5:05:bc:3f:e2:
92:1d:58:b6:25:58:f2:2f:11:32:45:2c:e2:a3:7a:e7:22:89:
af:bf:1f:4b:56:bd:0f:70:60:2f:96:3c:6e:94:28:cb:cc:93:
4b:a2:ab:29:9a:80:b5:1a:25:48:d5:ca:d1:27:38:6e:f4:c3:
6d:c6:e9:2f:d3:96:c3:7b:5b:08:c8:29:23:4f:2d:7d:1c:d3:
06:da:ce:dd:0c:0b:37:2f:ad:15:07:12:54:a2:f2:c1:bb:55:
e6:40:2b:49:02:43:da:0d:02:24:b4:2b:bb:c4:08:ec:97:7c:
80:4b:0d:b9:61:0f:72:fa:03:02:cc:f2:19:11:a0:65:3c:55:
b6:09:e6:c4:7f:d0:7d:f9:dd:12:ed:1b:1b:fe:3f:47:11:b9:
8f:db:c0:c9:11:5f:49:26:65:ff:82:3c:2b:1a:30:41:32:d7:
d1:ab:c8:47:1b:e2:ad:33:79:ee:32:e2:e8:52:94:8a:e9:42:
2f:de:27:c7:75:ab:9c:0b:12:05:c1:70:a7:34:dd:01:30:c4:
fb:f6:3c:d2:34:3a:09:44:f3:9b:62:de:bc:8d:40:1a:1b:0b:
c0:95:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:46 2025 by rpki-client