
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
File: eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa (raw, json)
Hash identifier: 4yunNaNNxlrTr49HnqdvkLNjJ07nNvKz3gdz6OGl4VA=
Subject key identifier: 79:28:55:B7:43:77:0A:F6:05:EE:36:7A:86:15:E0:61:5B:83:30:07
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 2D
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
Signing time: Tue 07 Oct 2025 01:24:30 +0000
ROA not before: Tue 07 Oct 2025 01:24:30 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 9354
IP address blocks: 202.157.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Oct 7 01:24:30 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=792855B743770AF605EE367A8615E0615B833007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:2c:2c:05:cd:c0:8f:6f:ec:a2:94:7b:b5:
c0:c8:13:1e:8a:8f:ed:24:c4:d1:06:10:68:9a:88:
5b:9a:86:e9:2a:49:7c:13:10:72:19:57:99:a0:5f:
1a:4c:1a:53:4f:67:48:1d:aa:14:95:e1:12:8a:49:
1d:26:f5:52:c8:07:98:28:cd:db:c8:e4:e8:ee:8d:
d0:ad:a6:f9:63:1b:54:ee:ca:2b:56:9b:f1:a4:ec:
3d:99:1e:56:28:80:67:f1:10:7d:46:65:e5:72:e2:
ae:c9:51:94:d8:05:a9:e7:3d:b4:09:53:73:8d:0d:
7a:b4:70:35:08:2a:03:f0:be:f5:4d:1f:81:b9:b9:
1c:8c:07:72:e5:60:14:b9:2f:81:cd:d2:b7:07:42:
66:37:ca:d2:5f:82:31:69:c8:16:41:0c:e3:50:f3:
14:ae:3c:b1:e9:ae:c7:d7:2a:fd:8e:a7:34:ac:2a:
97:12:cf:e3:5e:83:22:ef:20:f5:50:31:00:bc:49:
72:49:de:cc:15:9f:b4:b7:19:c1:9e:7e:57:0d:1b:
cd:74:fd:dd:d2:67:02:2f:ba:5a:0c:a0:9a:3c:e6:
ca:5e:40:a6:7f:40:d7:bb:92:ab:49:d6:5f:cb:f7:
3c:ee:0b:70:b7:cb:32:b3:66:9d:cf:2f:01:b3:19:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:55:B7:43:77:0A:F6:05:EE:36:7A:86:15:E0:61:5B:83:30:07
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.157.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:a5:3b:a0:49:59:e7:d8:73:ec:46:e4:5f:87:61:e2:2d:1a:
02:16:12:72:80:8e:ff:26:b1:dc:d4:30:fe:ad:52:41:10:a2:
4a:ee:74:ac:a6:3a:62:16:6a:9d:92:3c:43:f8:4b:7f:2f:0a:
63:77:8e:f6:9b:4c:be:9e:83:29:97:25:ba:94:19:83:38:d8:
1e:b3:be:16:fe:31:d9:ac:04:bf:bf:cb:ce:50:45:91:95:19:
33:30:f7:eb:9d:ef:b4:0b:e8:2c:bb:0e:fe:f9:95:65:94:bf:
45:14:88:1d:83:cb:57:60:12:48:1e:0f:23:53:24:cf:05:2a:
54:93:53:88:65:15:ad:51:e8:cc:49:6f:1b:93:25:dd:ab:66:
0c:cd:15:db:b7:1e:2c:67:16:42:24:61:7f:06:b7:02:08:0b:
4c:26:e5:30:09:23:1c:84:03:44:3e:2b:cd:cb:c5:1e:bf:dd:
c4:cc:2f:13:75:da:68:d7:cb:bc:47:66:fd:90:c8:71:0e:24:
69:73:f6:5c:18:99:99:b1:9b:24:3d:93:44:74:6f:3a:25:08:
e2:c0:61:7d:16:ed:56:5e:f8:d8:eb:4a:0e:ad:ba:b1:45:04:
3a:e1:dc:0d:de:77:61:0f:57:a1:bf:d0:96:a4:9b:14:e1:96:
d0:69:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:45 2025 by rpki-client