
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa
File: ssfJci6c1eYMJgoHACrD4nohkcU.roa (raw, json)
Hash identifier: RByctTqQK9r0dSf+iMZX/9cdkdV8MMc9AaCuVzeCvW4=
Subject key identifier: B2:C7:C9:72:2E:9C:D5:E6:0C:26:0A:07:00:2A:C3:E2:7A:21:91:C5
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 032F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa
Signing time: Wed 15 Jan 2025 01:07:41 +0000
ROA not before: Wed 15 Jan 2025 01:07:41 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 10013
IP address blocks: 61.192.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 15 01:07:41 2025 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=B2C7C9722E9CD5E60C260A07002AC3E27A2191C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:20:71:ee:84:3d:6a:6a:32:4b:e4:27:c9:
3e:b3:0e:a1:f1:2c:6d:4a:0f:2a:d7:64:82:c8:8f:
c6:12:c3:65:3d:73:af:85:bd:9c:37:60:ec:83:ea:
ee:12:66:00:15:d3:6c:80:c3:d8:72:6b:15:fe:ca:
8e:5d:1d:01:e4:24:72:99:f4:2f:61:91:ba:8b:0e:
91:1e:af:bd:0c:09:35:b9:91:8e:5b:59:d7:95:86:
17:d2:5f:d6:28:e8:0a:6f:19:f7:7d:27:99:73:62:
b1:cd:cb:fe:a5:c3:d8:7d:03:be:4f:f2:83:0c:6d:
4e:0c:56:8d:ce:75:f4:93:1d:9a:df:f2:ce:ef:f1:
89:9f:d7:83:b5:44:af:a2:c9:02:33:ec:c9:d1:d5:
90:b0:b7:83:56:e9:d7:b8:a5:24:72:38:6f:31:7d:
3b:6e:11:4a:14:0a:fa:af:8d:1b:29:84:0c:e7:af:
24:2b:9b:9a:31:f7:e6:a8:f2:c9:62:83:78:2d:29:
01:4e:99:73:78:38:99:6d:69:38:2f:37:9f:63:02:
14:7f:7c:a0:89:93:6c:26:75:16:63:19:fe:7e:ad:
a0:0e:14:6a:c5:8d:c6:2c:e7:62:9f:0e:e3:4f:07:
fc:72:30:26:ca:bc:21:72:31:49:e1:6f:ee:e1:e0:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C7:C9:72:2E:9C:D5:E6:0C:26:0A:07:00:2A:C3:E2:7A:21:91:C5
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ssfJci6c1eYMJgoHACrD4nohkcU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.192.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:41:0a:59:bb:fd:fc:ac:9f:66:58:27:16:8c:cd:34:ff:
c3:73:4e:47:09:82:e2:aa:c3:0c:b9:04:dc:3f:00:62:58:84:
6f:1f:56:c1:1c:fd:4a:f2:e0:e1:8c:40:9a:10:15:92:1b:18:
95:51:51:39:4d:e5:1d:54:78:68:08:74:2c:6a:15:1c:a0:1f:
ce:be:ac:e1:24:0a:db:5f:8b:60:18:d1:dc:a3:36:44:07:fd:
d4:94:84:16:7d:45:e4:51:f4:a7:95:74:23:ab:3f:df:a9:80:
18:1a:90:84:6c:c5:2b:f9:32:81:57:5d:ff:db:1f:df:0f:a3:
47:86:af:50:f4:ac:a6:0f:cf:43:fe:34:f4:0f:c9:4e:98:fe:
0b:3f:55:46:cb:7b:12:09:ac:69:8d:eb:b4:87:93:8c:15:6a:
22:d4:d5:47:56:cb:38:26:d4:46:53:44:72:de:99:8c:26:54:
af:49:ba:e3:3b:da:66:0e:77:07:c3:0d:21:30:81:33:d8:24:
3d:11:e7:6c:d6:60:e8:cb:de:31:a2:1c:5e:1a:92:9a:6b:4c:
36:49:c3:d0:0a:9a:ca:a8:bb:1b:b9:82:d5:8c:ab:0a:57:db:
82:06:f7:7d:61:c2:28:f9:92:81:85:e0:85:ae:93:55:ff:80:
11:6b:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:16 2025 by rpki-client