
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa
File: Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa (raw, json)
Hash identifier: 01D4DcPRrtqBJDDA/8yug/GuFBlG18QDGuNrOt0/Tm0=
Subject key identifier: 63:48:31:45:83:B3:C3:09:4F:7C:49:57:7E:16:04:C1:5A:AF:67:B1
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 046F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa
Signing time: Wed 01 Oct 2025 01:34:48 +0000
ROA not before: Wed 01 Oct 2025 01:34:48 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 10013
IP address blocks: 111.234.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 1 01:34:48 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=6348314583B3C3094F7C49577E1604C15AAF67B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:08:f7:5b:1f:99:72:e2:4a:b1:f9:8b:b0:
e8:d7:96:bb:8a:e9:c4:64:d0:a4:11:e6:8f:77:20:
28:85:9d:7d:31:59:e7:17:38:0a:a0:d0:6a:f8:00:
51:1b:c3:09:21:e4:51:22:e9:53:0b:77:45:d4:c6:
4b:b4:b4:b6:58:9a:d6:3f:96:39:61:4f:c5:f1:96:
36:2a:ad:ae:fa:83:57:31:4a:9a:97:62:bc:ac:1d:
5b:a3:ac:5d:3b:d5:2a:e5:94:ab:aa:db:ff:8b:44:
b0:0f:58:1f:77:7b:c4:56:fa:dd:52:e9:f2:79:d9:
fb:ac:bd:4c:1c:8e:60:22:ea:dc:73:d2:35:1a:80:
5a:75:b6:22:8f:48:9e:b8:86:fd:a1:bc:53:25:66:
4d:cb:a4:84:d1:04:de:18:d2:88:f8:fb:f4:6f:83:
94:5f:51:c9:8e:71:ba:0b:43:34:24:a0:9f:4a:e4:
37:f3:ad:b7:7f:dd:66:ad:36:35:87:4a:dc:e2:c9:
c2:2c:50:36:a6:5d:af:99:4c:55:98:2e:43:49:4a:
e4:7d:79:98:d0:60:8e:b9:ca:e5:74:ca:1a:dc:4c:
49:dc:62:db:a3:19:f6:16:43:1b:f5:fa:ad:76:01:
62:dc:be:54:79:89:92:b8:47:38:50:5e:41:c5:d1:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:31:45:83:B3:C3:09:4F:7C:49:57:7E:16:04:C1:5A:AF:67:B1
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.234.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:56:86:33:59:3f:e2:46:3b:b8:ee:34:d5:4c:60:d3:94:4b:
67:9e:8f:11:46:ac:4c:b8:30:bc:ad:ce:76:87:65:40:52:b0:
87:cb:a2:88:67:32:9d:ff:84:01:a4:17:80:f2:35:d4:3e:df:
ca:d1:77:40:69:14:e7:30:19:2d:e0:e3:41:72:ad:f8:a4:73:
8e:5e:c6:79:1e:d9:b6:b5:47:b8:3f:dd:12:f4:88:c1:48:1d:
92:fd:16:d1:47:93:b3:32:97:4d:d9:d8:e2:48:c0:e4:ff:04:
58:f1:d0:bb:a8:09:bb:60:00:57:b8:5f:dc:2b:ab:86:ab:64:
1d:a6:a9:a3:f0:62:d0:0b:2e:96:82:67:8b:65:4f:fb:55:b9:
25:77:b2:01:92:24:af:a4:b1:08:ca:88:b9:f0:25:07:d0:33:
6a:79:89:22:56:a7:f4:3e:43:60:b6:ac:f3:09:e3:65:6d:d6:
5e:4a:70:66:b4:6a:d4:72:92:87:4c:b7:8e:78:fd:66:af:08:
78:34:62:86:fd:89:c1:7b:a2:d7:ff:80:a1:b6:97:2d:cc:79:
5a:fe:03:f7:8f:0d:a8:55:d5:f1:43:37:02:2b:17:85:e2:9d:
fb:ea:d6:4a:70:72:13:d2:8c:b0:e3:44:0c:bf:b9:9f:50:f6:
7e:ad:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:02 2025 by rpki-client