
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
File: 0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa (raw, json)
Hash identifier: RJ+FVY0BEmzxO6/i0X8eIV7USCi5xuOnAYVgsTOe0MY=
Subject key identifier: D0:46:FD:15:79:B6:16:4F:B7:1F:9B:6D:99:B7:B7:3C:EA:05:81:20
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: B1
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
Signing time: Wed 01 Oct 2025 01:38:38 +0000
ROA not before: Wed 01 Oct 2025 01:38:38 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 2527
IP address blocks: 131.213.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Oct 1 01:38:38 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=D046FD1579B6164FB71F9B6D99B7B73CEA058120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:39:41:cd:a0:92:e0:a1:42:0c:dc:7f:f6:
9c:e0:9e:f2:61:df:4a:44:02:00:0e:94:c4:d8:bf:
ed:de:42:30:2b:bb:88:8c:3e:cd:b8:fc:c9:2c:17:
d7:04:9e:ea:c9:5d:99:45:6d:31:2a:3f:9d:d2:00:
d4:e7:3b:ef:8f:74:5c:76:43:6b:41:e0:e2:27:83:
95:73:ac:c9:8b:90:a5:62:e1:b5:cb:03:5a:57:27:
d5:17:89:83:d4:4a:8c:81:35:f8:b8:e7:16:c8:5d:
5c:53:6d:80:59:b8:6a:d7:64:92:a7:c1:cf:0f:3b:
df:b2:f7:67:7f:8d:37:61:c0:1e:ac:7b:7d:fe:3b:
1a:e9:a4:3f:21:23:45:41:a1:ea:5a:ec:21:e2:39:
ff:3b:98:98:26:59:21:32:27:ce:a4:1d:86:86:8f:
dd:ed:fb:54:c0:d6:7e:80:42:0f:20:83:91:ff:43:
6a:a7:71:c7:3e:0d:0c:58:3c:09:65:b0:9f:3a:53:
69:f5:eb:d4:c6:eb:bc:aa:4d:84:73:2b:f8:5d:24:
00:43:38:83:22:a5:71:8e:dd:ee:66:98:ef:ba:2e:
a5:13:85:c7:cd:4c:61:bf:ef:fd:e9:5d:eb:84:7d:
79:a9:b6:e4:4a:3a:37:8a:6a:1a:1c:db:33:48:20:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:FD:15:79:B6:16:4F:B7:1F:9B:6D:99:B7:B7:3C:EA:05:81:20
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:8c:69:1d:a0:ca:0c:3d:11:d7:e3:db:63:60:bf:bc:5b:a8:
38:00:16:9e:d2:f3:6a:5b:7f:54:bc:da:b5:fb:ef:f0:f4:07:
f0:fe:f5:75:42:35:9f:2c:ac:a1:93:03:25:34:9c:6b:9c:df:
fe:e1:29:f3:00:96:51:2f:e3:01:e9:5c:3f:1c:44:ab:ed:ea:
92:12:bd:2b:3a:b1:09:87:41:50:e5:4f:c4:78:9f:db:f3:aa:
a7:44:e5:01:6f:da:16:54:3a:8e:23:12:39:07:92:ad:06:0a:
40:67:47:e3:cb:0b:36:88:fb:ec:af:46:56:90:91:d1:7a:98:
82:4c:70:14:45:be:f5:e6:4e:e1:31:57:fb:b8:0a:6a:6e:a9:
9c:8a:45:5e:ba:00:c3:ff:7a:68:5e:6a:17:82:bc:13:45:91:
9e:f7:74:e0:dc:08:c5:c7:d5:d7:70:e9:15:91:eb:2b:19:1c:
a7:42:ac:ca:51:7a:6d:fe:41:83:d7:77:bb:0a:cd:24:e4:57:
a3:c9:f0:a4:6f:be:00:d5:08:48:f4:99:a2:f0:8b:0c:42:e4:
de:f6:b4:6b:6d:1a:f2:c0:45:2b:4e:f2:2b:c5:5d:b5:7b:04:
6f:0c:32:49:13:6c:f7:ac:41:fb:70:0b:0e:80:75:89:44:a0:
11:64:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:58 2025 by rpki-client