
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa
File: gglfj8CZDUluSCSSvZ9WChKUbrQ.roa (raw, json)
Hash identifier: o5ru58UFdSxQuEX74gB53Nl2KowgSk3lUfTY8wrLZnk=
Subject key identifier: 82:09:5F:8F:C0:99:0D:49:6E:48:24:92:BD:9F:56:0A:12:94:6E:B4
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 033E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa
Signing time: Thu 23 Jan 2025 01:10:37 +0000
ROA not before: Thu 23 Jan 2025 01:10:37 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10013
IP address blocks: 180.131.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 23 01:10:37 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=82095F8FC0990D496E482492BD9F560A12946EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:ac:6a:b8:f5:70:7e:75:58:9a:ff:f5:31:
05:b3:19:d1:7c:ac:eb:9a:bf:57:9b:2c:b2:10:f1:
31:22:15:7e:25:3d:b0:dc:58:d7:3c:bc:90:89:89:
57:be:0b:9c:4a:34:54:44:d0:80:06:21:6d:c8:8c:
fb:5a:7d:c7:07:ca:ff:ff:80:c7:5c:6f:3f:be:78:
60:ad:64:28:36:dd:16:9d:7a:26:83:dc:0e:0c:c6:
64:34:31:07:54:fd:d8:22:07:a7:0e:e0:b3:f5:36:
b3:fb:96:b7:7d:03:af:df:e0:e5:56:16:a5:da:49:
7b:d4:0d:1d:f6:60:cc:d9:55:9e:80:ab:1b:74:63:
ac:98:72:87:c8:a9:1f:5c:92:47:10:31:20:cc:62:
5c:f3:4e:b3:e8:01:3b:ba:b0:d9:15:82:c1:80:77:
5f:9f:80:17:2e:fd:7a:69:78:c3:d6:34:80:51:70:
ec:88:3a:c2:7f:84:e5:5f:68:84:35:13:28:43:4b:
d5:07:3b:24:6e:27:8f:4d:7e:e4:42:f2:b9:1f:93:
40:14:24:71:64:15:4f:b7:e8:e0:ce:c8:6f:34:3c:
b0:94:5b:7c:37:ce:ce:b9:80:57:bb:e8:77:07:29:
91:cf:64:f8:a2:22:c5:60:35:b4:ac:a8:18:c1:8a:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:5F:8F:C0:99:0D:49:6E:48:24:92:BD:9F:56:0A:12:94:6E:B4
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gglfj8CZDUluSCSSvZ9WChKUbrQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.96.0/21
Signature Algorithm: sha256WithRSAEncryption
92:4f:e3:f1:89:dc:04:29:97:7e:27:74:00:77:7e:ff:de:27:
0e:f9:26:e9:e4:be:38:ec:aa:80:58:97:c8:ff:a5:38:38:db:
c7:63:56:f9:65:da:84:d4:0b:86:c1:f6:3e:4f:2b:b8:6e:cb:
8e:d4:d0:b0:7b:08:01:f0:39:7e:02:6b:84:f5:44:cc:0f:fb:
31:1a:f8:15:41:d3:ff:b7:1e:4b:9f:e8:6a:52:34:36:0a:1a:
e3:8c:96:26:77:51:5c:41:7a:d7:3e:1f:7a:f5:37:c2:4c:6b:
a6:5b:fd:06:73:5f:ab:b7:aa:c0:80:eb:05:b4:36:c9:45:da:
3a:cc:42:46:9b:48:f1:80:34:81:11:ef:4d:81:8a:95:04:d9:
88:fc:10:2c:60:3d:5d:cf:34:2c:16:6e:5b:f2:61:62:8c:c9:
5f:fd:50:42:9d:49:7f:79:76:45:3d:c8:ed:67:fd:1d:84:fc:
3c:a8:14:0b:32:b4:a5:22:cd:cb:9d:7f:62:31:3b:cb:62:26:
1d:6f:da:f6:19:6c:ec:d3:0a:4c:bd:90:18:0c:e4:c2:a8:7b:
d6:93:c1:38:a7:a7:cc:92:50:d6:aa:fb:51:33:2d:e1:4c:c5:
fe:e0:bc:c6:b9:c4:d7:29:d8:6c:f5:c8:29:45:f5:49:38:bd:
4c:06:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:48 2025 by rpki-client