
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MUTj80PFLWtto5FamWJtXoVYISg.roa
File: MUTj80PFLWtto5FamWJtXoVYISg.roa (raw, json)
Hash identifier: lfLdu/sDP1TPF7PjfL6Caa1qWXUWmde3ze6m3sYw9/U=
Subject key identifier: 31:44:E3:F3:43:C5:2D:6B:6D:A3:91:5A:99:62:6D:5E:85:58:21:28
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 040A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MUTj80PFLWtto5FamWJtXoVYISg.roa
Signing time: Thu 01 May 2025 01:45:27 +0000
ROA not before: Thu 01 May 2025 01:45:27 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 10013
IP address blocks: 122.145.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 1 01:45:27 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=3144E3F343C52D6B6DA3915A99626D5E85582128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:c5:a5:73:42:70:f7:c6:9e:88:8a:f5:04:
59:1f:dc:29:24:12:9b:c6:df:30:44:e6:0b:e7:e9:
12:a1:0f:4f:f1:98:99:aa:94:17:b3:5e:c2:e7:45:
72:db:61:56:0f:bb:55:c3:db:e8:42:d6:87:62:5f:
09:5d:5e:d3:d5:76:dc:cc:ad:e4:21:90:16:49:32:
d2:f3:8d:f0:48:f4:ac:d3:be:fd:f4:30:dd:09:19:
2c:fc:5d:48:37:3f:df:cf:a0:32:e3:a6:81:a6:8e:
10:20:80:e2:db:fd:ad:09:05:fb:9f:a6:83:ac:45:
8e:49:16:3d:13:a5:07:9a:1b:58:ce:bf:2d:8c:b7:
bb:cd:30:a4:fe:a0:df:a5:56:06:3b:35:f2:99:3b:
10:31:d5:aa:62:92:20:4d:43:f8:22:ef:55:1c:41:
c8:9d:58:6c:67:7a:86:b6:5e:63:41:bc:b0:48:f8:
da:27:d2:9e:84:8e:a8:65:85:77:96:6c:04:c0:2d:
54:f2:34:5f:a2:ac:55:fc:b3:8d:18:61:f1:9c:63:
26:af:63:32:f2:fe:4e:a1:60:e3:cf:3d:cb:18:6e:
b8:c1:db:e2:bb:78:18:de:09:c8:05:02:6c:f8:11:
20:8c:b6:9d:04:ff:b9:fb:60:29:4f:3c:03:c5:4d:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:44:E3:F3:43:C5:2D:6B:6D:A3:91:5A:99:62:6D:5E:85:58:21:28
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MUTj80PFLWtto5FamWJtXoVYISg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.145.120.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:24:03:05:80:b3:e0:01:98:05:4a:cd:eb:b3:18:84:88:f0:
b7:83:d9:17:6f:ae:f5:89:e7:25:02:b8:a0:52:e6:56:57:28:
f0:93:8b:89:a0:8c:d2:77:94:a8:8e:64:bf:da:11:23:06:9a:
23:3c:7c:76:89:76:aa:ab:74:31:31:33:32:7c:83:e4:c7:fe:
8d:1c:ef:8d:a8:da:62:62:a0:c0:1c:8a:12:13:1c:f8:86:34:
7f:36:f6:21:64:fb:08:a6:6a:6f:ef:dc:f7:94:37:63:cf:a5:
01:52:58:0d:95:cb:4e:d1:01:43:0c:6e:3f:94:a6:8a:26:1d:
a7:61:b3:17:92:b5:4a:1a:7b:51:e5:59:3d:51:cf:a9:46:e4:
4b:8a:9c:21:10:25:f5:b1:d6:21:3b:c7:fd:df:ad:70:31:7b:
9f:12:01:d0:82:b4:08:37:17:b0:07:39:4f:13:d6:23:41:99:
e3:46:d3:bf:99:3a:b5:30:c3:08:5b:8d:4e:75:3c:4f:59:24:
07:c0:96:5b:92:0c:a4:e5:59:81:ae:75:83:62:fa:87:6e:ba:
ae:79:dc:23:80:80:93:08:0e:2f:8f:0e:df:a8:d5:48:c8:f8:
09:d0:2b:d1:52:69:81:1c:4e:6d:c8:8e:a8:64:d3:b9:4a:38:
4f:93:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:34 2025 by rpki-client