
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
File: vO0hH2iV_cOkGJ08P_4sVA3g9us.roa (raw, json)
Hash identifier: pzNb5A7a4k5eqDlYAN6SchgUhYiPMuo0SmnnFXr7X7I=
Subject key identifier: BC:ED:21:1F:68:95:FD:C3:A4:18:9D:3C:3F:FE:2C:54:0D:E0:F6:EB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0498
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
Signing time: Wed 01 Oct 2025 01:43:37 +0000
ROA not before: Wed 01 Oct 2025 01:43:37 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 10013
IP address blocks: 220.215.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 1 01:43:37 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=BCED211F6895FDC3A4189D3C3FFE2C540DE0F6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:91:ba:cc:3a:83:6b:47:8f:df:36:5c:ed:
ae:c0:ee:ff:96:b0:3c:36:ad:62:bd:75:4c:a7:4f:
92:f8:97:6f:72:dc:61:65:9f:b2:32:6f:42:a0:a2:
87:ae:ec:2c:17:b7:e7:71:08:bb:02:f4:50:77:35:
d1:ed:37:94:82:c6:d5:d6:f5:e0:3d:d8:09:e8:7e:
19:09:a0:90:78:5e:d5:c2:87:9c:95:ef:3e:cd:70:
20:f7:60:18:ec:20:b8:f9:b9:af:a5:11:86:3f:66:
be:9f:60:e7:dc:62:5f:9f:45:4d:ae:f4:78:0e:62:
06:82:f0:c8:5c:7c:ca:4a:5a:a0:2b:f9:3f:f9:a1:
15:cc:c4:14:0b:02:92:d0:fc:c7:cd:61:77:7a:47:
bb:f5:2a:89:44:c4:ef:f7:e8:2f:d6:5c:3f:06:24:
13:ee:ed:90:46:94:50:eb:1e:23:50:45:b7:05:14:
1e:d9:a7:37:a6:16:57:4f:e2:5d:53:3f:6d:33:81:
4e:2f:52:ce:f0:73:ee:a0:9c:af:b0:9a:b3:b3:d6:
e8:11:f6:96:eb:5d:d9:37:03:1a:46:06:47:9b:34:
8f:d5:2e:44:88:7d:e5:c0:13:fa:e9:c6:4b:fa:18:
ad:e7:f3:47:4c:64:17:cc:1e:63:46:4b:c4:0f:fa:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:21:1F:68:95:FD:C3:A4:18:9D:3C:3F:FE:2C:54:0D:E0:F6:EB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.215.40.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a7:cc:c8:f0:94:8e:91:93:1f:35:cc:8c:a4:8b:60:ad:4a:
a3:62:a3:4c:b1:56:41:d0:ad:a7:db:44:aa:d1:79:40:9c:1e:
8e:d5:de:e0:8a:7b:d9:6e:98:01:b7:30:0b:75:92:90:62:a8:
6e:1c:30:69:00:d3:1f:48:b6:cb:b4:e8:b6:4f:2c:2d:91:9d:
bd:97:21:e3:f6:fa:c3:a6:9a:74:bc:cb:c4:0b:5b:5c:57:40:
37:11:e7:75:1e:34:d2:6c:38:5b:61:02:29:68:3d:b7:b9:e3:
19:97:e3:1d:a5:c6:96:1b:3e:7d:6a:1b:9a:b7:52:3d:55:e7:
ca:55:37:c4:25:d4:c1:a3:fb:55:2a:5d:cb:a3:93:7e:16:23:
0b:15:68:45:fa:cb:ee:93:76:fa:51:f9:f5:b8:2b:03:24:aa:
f9:50:84:27:23:30:23:af:ce:c4:fb:64:02:f7:a9:ef:51:50:
c2:f9:89:d5:34:a8:8b:51:9e:42:74:4d:53:bb:6b:92:1e:0e:
8c:79:7a:b7:e6:7a:67:bc:97:f8:ea:90:ab:e7:7e:01:3c:86:
5d:2e:3e:b6:d7:12:25:e6:35:01:e2:6b:7b:b6:22:5e:39:99:
df:cc:fc:25:08:77:7d:04:3d:c2:24:d9:38:e3:d0:72:0c:04:
2e:34:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:27:53 2025 by rpki-client