
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/2nprAMW0J4_X44KzKmip4tgXbVQ.roa
File: 2nprAMW0J4_X44KzKmip4tgXbVQ.roa (raw, json)
Hash identifier: sCc3GdT49N/MyfDVmciVCgZCqC8Az1UFSZpG+Q/yxNY=
Subject key identifier: DA:7A:6B:00:C5:B4:27:8F:D7:E3:82:B3:2A:68:A9:E2:D8:17:6D:54
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 71
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/2nprAMW0J4_X44KzKmip4tgXbVQ.roa
Signing time: Sat 01 Nov 2025 01:31:31 +0000
ROA not before: Sat 01 Nov 2025 01:31:31 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 10011
IP address blocks: 219.100.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Nov 1 01:31:31 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=DA7A6B00C5B4278FD7E382B32A68A9E2D8176D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:56:82:cb:e8:02:51:b9:23:7f:7d:a4:bd:
4b:3f:7c:3a:a5:d0:8f:59:87:34:82:aa:cc:3a:ee:
45:b8:0a:d6:ba:3d:10:22:30:59:29:87:91:78:26:
5f:05:68:18:69:28:6d:ae:91:29:c1:62:b5:7c:09:
4c:80:6c:49:bb:d3:2b:3f:85:95:e9:65:18:a2:89:
7e:78:77:ff:08:d2:e8:48:ce:6a:cf:9e:d1:1d:49:
f2:7e:ec:6d:19:a8:77:23:ad:ca:a4:73:d5:f6:fb:
1a:97:2d:f6:60:3c:43:38:a1:b3:53:51:b3:90:41:
ee:cf:25:a3:02:e9:b4:c3:da:f4:d7:8a:dc:96:fc:
ea:9a:48:b7:1c:dc:ff:fb:93:4a:4f:4a:20:be:98:
f4:b5:e4:61:c5:0c:99:fb:fb:39:ce:c8:2b:f7:c6:
d4:ea:4d:41:9a:7f:71:20:5f:26:7c:68:c1:ae:cf:
ed:ce:c2:0c:d5:22:35:18:8b:b9:9e:83:e8:df:47:
44:f7:bf:55:33:75:df:f4:f7:f5:67:e3:b7:24:2a:
dd:86:b6:fc:46:db:d7:0a:ba:7d:6a:e5:c6:57:a9:
a0:b9:9f:dc:7c:68:ca:76:b2:a2:5c:06:e2:ad:9a:
a7:4d:bf:d3:ee:b6:2a:ef:34:f9:3b:e1:0e:d6:26:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:6B:00:C5:B4:27:8F:D7:E3:82:B3:2A:68:A9:E2:D8:17:6D:54
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/2nprAMW0J4_X44KzKmip4tgXbVQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
17:a0:0b:cc:34:dc:99:dc:36:5a:84:5a:93:ec:db:33:14:11:
0b:a2:14:ea:fa:dd:cc:34:d9:67:d9:b5:bd:51:dc:74:b1:bf:
27:1c:1e:44:d4:de:e2:f4:15:0b:d7:cd:a1:00:0a:e2:12:b8:
6f:0a:37:87:17:bf:4b:8d:44:e1:c1:0c:1d:d4:f0:5d:dc:cd:
55:09:c9:16:f2:78:7a:e5:08:83:ee:4e:8a:4e:de:00:17:01:
d3:d0:6f:b1:4e:1c:61:bc:2b:39:89:e1:1d:3f:23:c8:6f:98:
19:88:2a:61:d4:5c:e3:1e:7c:87:a1:f2:a6:5e:69:65:38:6d:
ab:bf:e7:66:18:a7:b8:9c:b7:2e:4c:2f:c2:b1:e1:c1:77:33:
43:53:16:ba:56:81:50:48:1b:5c:90:46:94:f9:b3:50:c1:e1:
cc:9b:2f:63:87:87:f5:95:d6:00:84:04:f7:73:47:78:df:6f:
5e:c9:ad:9c:d4:f7:0b:d9:93:20:05:9f:ce:7a:18:6c:4a:77:
59:32:30:e6:09:fd:50:47:11:d2:b8:2d:af:99:51:64:aa:1a:
aa:45:f8:8b:65:35:4c:bf:f7:2a:7f:c7:54:50:bb:e4:9d:8e:
ba:2f:5c:61:9d:e3:40:e8:75:6f:31:2c:6b:33:d7:56:a2:6d:
93:06:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:42 2025 by rpki-client