
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
File: RlVoUcWg1XP8hMDasBCVj7ygwwk.roa (raw, json)
Hash identifier: wDApKJVDyimvuOw6FQbzI9kF3OvrGTNSgQ29nsuH+Xk=
Subject key identifier: 46:55:68:51:C5:A0:D5:73:FC:84:C0:DA:B0:10:95:8F:BC:A0:C3:09
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 73
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
Signing time: Sat 01 Nov 2025 01:31:32 +0000
ROA not before: Sat 01 Nov 2025 01:31:32 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 10011
IP address blocks: 223.27.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Nov 1 01:31:32 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=46556851C5A0D573FC84C0DAB010958FBCA0C309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:5e:d7:ec:37:0f:02:cd:97:6a:52:a6:c4:
98:05:6e:0c:b7:1d:75:87:98:be:3e:e6:86:1d:fa:
49:42:54:71:3d:82:6c:80:34:4c:16:9c:c0:22:53:
c3:93:54:a4:f0:10:f8:fd:9b:50:1e:d0:db:89:f1:
3d:b8:1c:15:75:1b:cd:eb:df:cb:e3:9e:a2:52:79:
33:18:4a:a1:e0:f1:4c:62:d8:fb:5d:98:d7:71:a3:
fb:d9:c5:19:6e:ff:36:ad:0f:b3:14:28:8c:a8:a7:
ca:c0:8c:b5:f5:05:ba:e5:40:b9:9f:6a:e3:9b:3f:
07:da:a8:00:d3:ed:8b:f7:73:90:f7:78:10:aa:ae:
dc:2b:85:86:fe:8c:d2:3b:48:e3:cd:c4:6e:47:fb:
4c:60:58:61:60:50:42:47:74:03:f2:97:79:14:d9:
9d:2a:01:c3:2f:60:6b:8e:c6:f3:48:fa:ec:e3:f8:
74:f2:64:fb:00:97:c5:fc:ee:9e:61:0d:d7:a2:e7:
af:5a:18:39:22:c3:3a:b5:6d:c9:af:e9:72:2a:5c:
43:db:2c:69:cf:d3:70:3e:59:13:17:bc:e5:7c:69:
17:6d:74:99:12:2b:ce:71:74:d6:ad:ea:58:64:cf:
eb:db:6e:22:50:a6:36:dd:9b:a1:81:b2:21:41:1f:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:68:51:C5:A0:D5:73:FC:84:C0:DA:B0:10:95:8F:BC:A0:C3:09
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.72.0/21
Signature Algorithm: sha256WithRSAEncryption
70:db:b8:5b:06:c3:4a:db:a0:e6:27:3c:e3:03:9f:78:d9:7a:
ad:d5:f1:2b:58:17:24:68:5d:67:a5:a6:7b:6f:dc:11:ea:a5:
f9:c7:a8:4b:00:f8:28:1c:6c:e0:15:46:f4:e7:ba:6b:cd:62:
20:19:51:2d:dd:7f:42:0c:04:77:51:ae:72:fa:fc:95:6a:5a:
bc:5b:1f:30:7e:7d:1c:1b:69:8f:00:bb:23:94:aa:70:74:af:
96:7b:55:8b:71:4b:d5:e9:a8:d9:aa:f6:36:92:a7:18:7a:8b:
9a:8e:49:98:df:5e:aa:03:51:3e:0f:95:c8:33:7f:3f:f0:2c:
22:1e:d8:c3:e6:3e:cc:a6:70:72:63:a5:7e:60:c3:96:6f:31:
85:84:c1:ea:55:4d:18:65:4d:cd:fb:9c:b3:dc:e6:a8:4e:ed:
d7:ed:3a:4b:22:55:e8:fc:88:5a:98:72:23:5a:9c:d8:5e:55:
5a:c2:81:70:41:b9:4d:70:2e:f5:5d:b2:1e:08:22:9f:96:42:
8d:1f:0e:a9:12:0e:23:3e:1c:84:49:a9:85:0c:70:40:1c:4d:
d6:b4:be:7a:6e:b4:9e:1d:3e:43:70:4e:08:81:70:75:79:5a:
1a:58:c3:30:57:08:82:7b:9d:d5:d6:1a:93:2f:fc:e2:ef:25:
8b:5c:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:48:34 2025 by rpki-client