
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
File: ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa (raw, json)
Hash identifier: f/UGkkbEOp2+P9afl6TmCAYFMPCCg3eMKVyXoAEFF2o=
Subject key identifier: 65:0F:E3:1E:FB:ED:5D:38:41:FF:C9:9E:4A:8C:FB:CC:D5:68:97:86
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 03C9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
Signing time: Thu 01 May 2025 01:42:39 +0000
ROA not before: Thu 01 May 2025 01:42:39 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 10013
IP address blocks: 61.120.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 1 01:42:39 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=650FE31EFBED5D3841FFC99E4A8CFBCCD5689786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:9f:ee:68:12:3e:4c:7f:ff:bd:51:04:3d:
f1:2d:12:98:ce:7b:5d:03:c6:95:5e:f4:e7:4e:a5:
4e:53:b6:c7:21:88:b5:80:bd:d0:68:0d:6b:15:4a:
4d:e6:16:92:9f:7d:7e:40:2f:a1:67:05:d6:5a:95:
32:2b:92:20:94:e2:d8:e3:6c:e6:2c:48:84:81:12:
f1:5e:04:9b:e9:ff:df:1b:65:7f:c1:12:51:c1:25:
b7:43:6a:6c:62:63:43:89:b0:13:b0:29:a5:56:58:
52:38:30:76:f2:00:66:d4:3e:44:a2:90:a2:7b:44:
9d:9c:c2:6a:34:7e:40:fd:4b:62:84:dc:20:ba:a5:
69:32:a0:a7:de:2a:67:c5:8a:0f:30:44:27:7d:db:
f5:50:3d:31:d4:1a:c9:10:02:7a:c0:91:fd:b7:ed:
9e:1f:5b:a2:6e:ea:81:20:c6:c0:be:c3:f2:1b:ee:
f4:68:25:58:15:d1:8f:bc:34:eb:f5:df:81:a8:97:
c6:f7:9c:61:e5:5a:e0:79:af:e7:57:9f:0b:e8:c8:
1a:88:8f:f4:16:a8:5f:52:68:04:d6:2c:54:18:1f:
03:da:13:e6:14:ff:26:00:5f:74:ba:80:38:a0:a6:
d1:94:68:eb:20:77:31:70:db:47:32:fb:91:8a:1b:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:E3:1E:FB:ED:5D:38:41:FF:C9:9E:4A:8C:FB:CC:D5:68:97:86
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.212.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:1d:d6:72:17:d4:5f:18:80:45:94:9f:73:e7:a9:cb:b1:44:
8b:b9:5f:a3:00:89:0f:50:e1:33:83:19:80:71:a5:d9:0a:c5:
67:19:6c:05:a1:07:a7:4b:3c:fd:3f:2d:e4:f4:29:e9:8b:d8:
26:a8:51:6e:73:e5:fa:ef:4a:56:c3:ba:b4:5a:55:a0:43:fd:
7c:96:1c:04:bb:70:15:52:bb:cc:88:21:bb:5b:79:76:a4:4c:
ad:ce:aa:d4:4f:52:a6:73:3f:56:df:72:05:c8:6d:3d:aa:a2:
e1:16:83:7b:8b:d1:16:8f:8e:42:c5:30:b8:31:01:10:d5:0e:
ab:cd:a8:48:45:a6:92:41:bf:fc:e5:2c:3a:e4:be:e7:62:a7:
0a:13:ad:bf:b2:d6:c9:c1:12:d2:c4:4a:2a:6c:f5:e9:5d:c0:
03:48:78:fc:18:3f:dd:b6:fa:10:b4:ba:f9:0d:42:01:0a:03:
fa:bb:ce:65:f3:3b:ce:f2:3c:83:bd:64:f8:80:e0:e6:fc:4c:
fe:42:d6:62:f6:c5:06:80:d8:7f:e6:c3:20:5c:45:67:64:62:
ca:a8:61:4c:bc:9d:ba:ed:a0:6c:bb:cd:cc:f2:0d:65:d5:3b:
6c:8c:9c:6c:ab:71:67:ed:8b:04:7b:e4:0d:14:38:8f:a0:e4:
e1:eb:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:42 2025 by rpki-client