
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
File: nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa (raw, json)
Hash identifier: 44V+ScIRujlPqRa5pwfCxlF6gMgpDuWrdLOu9pZNH4E=
Subject key identifier: 9C:F7:41:B8:9C:73:2E:A9:13:72:92:53:61:45:05:76:64:E3:F0:BF
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0496
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
Signing time: Wed 01 Oct 2025 01:43:36 +0000
ROA not before: Wed 01 Oct 2025 01:43:36 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 10013
IP address blocks: 220.150.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174 (0x496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 1 01:43:36 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=9CF741B89C732EA9137292536145057664E3F0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:d9:b6:5b:62:d3:bf:37:7e:a4:5e:88:4e:
3e:21:dd:ff:12:0f:5c:9c:36:db:fc:9d:6c:99:d1:
af:31:16:f2:d6:ff:8b:20:0e:7f:f0:0f:00:1b:67:
e3:3f:b1:4a:26:94:57:ce:cb:ce:16:11:51:34:73:
f5:cc:1a:cc:9c:56:2f:f7:be:82:35:10:0a:7a:19:
b3:a4:59:88:e6:eb:0f:cb:48:9e:6a:87:df:6f:5f:
34:5a:38:37:a0:5d:59:13:88:69:ab:30:61:5c:99:
cd:90:28:4c:c1:93:11:84:2c:07:40:9d:31:da:ac:
8e:75:e3:16:e4:f6:71:91:92:d2:ed:1c:67:5b:23:
2c:7c:84:71:e8:d3:17:61:36:ef:5b:8e:99:59:6b:
fa:fe:fd:9d:d7:bb:23:a0:83:b5:45:8b:0a:1e:f9:
de:e8:7f:43:29:eb:8a:4c:13:fb:89:1a:cb:3a:c8:
cf:6e:22:cf:63:54:19:46:f0:74:ff:95:53:92:7b:
19:ef:a2:f4:d9:c8:a2:e2:36:a0:c7:f4:2b:cf:63:
56:a4:eb:24:8a:0d:13:1e:00:df:d4:cf:4e:74:f0:
6b:3c:7e:26:38:98:ef:fe:c7:ed:e9:dd:12:41:f1:
0c:91:fb:13:46:06:69:3f:3e:8f:71:8c:d1:c9:bc:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:41:B8:9C:73:2E:A9:13:72:92:53:61:45:05:76:64:E3:F0:BF
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.150.216.0/23
Signature Algorithm: sha256WithRSAEncryption
42:c4:d7:52:44:d7:ba:1d:73:b3:32:84:e8:78:d4:9e:f1:90:
9b:11:3b:c1:f1:0d:55:6f:a1:f1:9d:f8:fd:24:1c:e4:2c:99:
e5:0e:ee:d3:8f:d5:2b:90:0e:18:04:99:a7:72:7a:82:89:a4:
e5:90:2a:41:a4:ab:b7:b2:0f:f4:3a:b3:fe:ec:f9:a6:88:18:
2b:0f:15:b1:6b:ea:c0:25:0a:07:10:18:cd:3e:11:8b:ae:f1:
35:4b:5e:77:c0:03:d7:8a:4e:3d:50:8e:2c:4f:44:3a:fd:96:
77:e8:23:7f:3c:9a:50:67:96:55:70:3e:a8:18:67:2a:3e:76:
da:95:db:81:c2:b5:20:cb:81:f7:90:54:c0:09:a5:f2:00:c4:
84:38:73:e3:e6:c8:4d:25:35:b1:46:be:5d:e1:a3:80:92:47:
a6:41:b2:9a:a0:ff:73:0d:74:2c:d4:53:ad:bb:69:1a:dd:83:
97:5a:64:06:c1:01:ad:82:07:f0:40:2b:75:ab:c7:90:a2:b4:
3d:fc:44:88:23:03:23:87:25:8c:47:f6:5b:70:e0:11:25:6f:
07:c7:8e:94:32:da:32:35:c5:5f:07:7a:34:fc:b0:4a:b5:ff:
d9:0d:6a:79:b5:2d:40:24:8e:9d:b1:5d:14:8e:0a:65:8b:44:
48:e3:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:22:05 2025 by rpki-client