
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
File: WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa (raw, json)
Hash identifier: pFVJSFTqerD1z7Tb59xXjGtHMsWc70CjlgOmxRRe7MA=
Subject key identifier: 58:42:B5:51:AD:0D:51:01:40:63:5A:74:BC:A1:61:C6:32:2E:D5:D4
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0194
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
Signing time: Wed 01 Oct 2025 01:33:48 +0000
ROA not before: Wed 01 Oct 2025 01:33:48 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 2527
IP address blocks: 110.232.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 1 01:33:48 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=5842B551AD0D510140635A74BCA161C6322ED5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:c9:82:79:f9:9a:c2:2e:40:91:95:f9:74:
4c:07:61:ce:55:c0:51:d4:e9:b6:c0:41:ed:34:b1:
9c:93:93:0f:54:5d:f7:88:b6:55:3f:bf:ae:45:12:
3c:47:a8:c0:69:43:60:1b:4f:18:b0:57:d2:11:e0:
90:9f:2d:50:f4:c1:5b:a0:2a:f1:87:a6:ed:32:e0:
ec:de:6d:b1:61:59:5f:95:dd:21:da:92:11:88:6a:
1b:e2:8f:b8:18:9c:5f:a9:29:eb:5d:d6:83:c9:d6:
0f:2e:c1:23:a3:28:6c:1f:d0:42:61:e0:14:5d:cb:
ea:e8:bf:eb:b1:82:fe:bc:13:56:5e:ef:e7:f0:87:
99:c7:b1:55:ca:cf:82:42:44:46:a4:6a:67:11:f5:
51:fa:81:60:e8:be:f6:a8:68:56:c5:e9:9b:08:93:
a3:5d:aa:92:cc:5f:c5:be:8e:63:3a:f2:8d:e2:dc:
0d:55:78:44:74:9a:f8:ed:99:9d:09:de:52:a2:b4:
78:c0:3f:06:49:d0:d4:50:87:05:34:40:c2:50:37:
0f:8e:03:ca:78:09:3f:e4:4c:82:0e:e3:c5:7f:08:
5c:5e:32:f5:62:7d:41:82:9b:c3:a9:d1:5b:86:09:
50:db:64:5d:e2:bf:2c:81:3b:e3:45:3e:78:69:d3:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:B5:51:AD:0D:51:01:40:63:5A:74:BC:A1:61:C6:32:2E:D5:D4
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
03:38:db:47:12:14:83:28:b3:74:1c:2b:dd:53:bd:52:b1:30:
89:8b:76:6a:55:dc:d7:ff:81:4b:73:bf:fb:0a:32:39:98:a9:
ab:68:e9:20:e1:61:f7:e4:ff:19:3c:d0:be:c4:32:83:42:de:
38:24:83:7b:63:d2:3c:3f:16:66:c3:44:1b:92:aa:6e:61:f8:
d0:87:24:8b:f8:b7:09:5a:45:9e:b3:0d:f1:3b:48:7e:e6:d1:
12:c4:41:81:f1:30:1f:11:7d:fa:0b:01:dd:43:49:06:23:b6:
2c:a0:0a:53:de:c8:6f:c7:ae:c6:7a:37:31:fd:31:7f:e8:92:
8d:70:64:c2:59:a9:f3:eb:61:b1:0e:c9:05:4c:5a:88:7a:b9:
5b:f3:28:a9:c9:5b:a8:43:b6:77:13:1d:fc:07:1e:9f:54:6b:
7c:28:1f:12:04:50:3c:84:e6:e5:de:ce:ae:57:c1:d8:8c:0f:
fe:09:71:39:aa:9c:e1:71:f8:67:1e:5b:23:c6:b2:b9:47:dd:
f1:ea:9c:19:5a:64:28:5b:20:99:c3:4a:f2:3b:d3:ee:86:54:
6b:a3:d6:32:29:35:ac:48:8c:64:56:7e:ee:7e:b0:07:e3:7d:
0c:72:3e:50:ae:c3:ec:d5:88:19:40:37:84:5b:09:7d:30:e8:
f1:39:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:31:55 2025 by rpki-client