
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
File: ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa (raw, json)
Hash identifier: v0Y8/swDgcg/j0Cmu+pmzjrNXeurnJUSx0MfNLxRMkg=
Subject key identifier: 66:79:C6:2C:80:09:70:1C:42:E8:B9:58:0C:48:7C:6C:F3:4B:58:5A
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: A8
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
Signing time: Fri 01 Aug 2025 01:31:35 +0000
ROA not before: Fri 01 Aug 2025 01:31:35 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 4685
IP address blocks: 211.120.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Aug 1 01:31:35 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=6679C62C8009701C42E8B9580C487C6CF34B585A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:a2:6e:23:b2:df:12:41:f5:ba:0f:ac:ea:
3d:0d:a8:05:07:05:ee:3a:10:37:a5:47:e9:61:f8:
af:1b:b8:d7:71:47:8b:7e:e3:0b:55:ce:c9:46:9b:
c0:14:34:85:d5:dc:2e:ea:f2:e5:df:a3:af:c6:ed:
fb:7b:00:0f:8a:19:02:c1:a3:56:ab:f8:99:2c:27:
5a:e6:a8:97:ac:28:d7:1e:2d:73:2a:39:db:6a:33:
e7:55:35:2c:40:6f:b2:47:03:05:00:9c:14:9a:cd:
52:1a:7f:52:0f:80:72:23:f7:dc:5b:c9:0a:1f:b6:
75:02:2a:a3:a6:46:2e:52:8e:88:56:44:c4:14:20:
c6:e0:6c:f6:89:10:9c:3c:06:50:cd:03:5e:bd:64:
ae:cb:c3:b2:18:f7:13:e5:d0:47:8a:4a:78:02:33:
23:37:e0:9f:f9:c7:d6:6c:e5:f4:94:c9:33:54:76:
a3:6f:0e:88:7e:ba:0d:0f:cb:7a:36:ad:03:70:62:
ba:f4:0c:6c:9a:95:0c:c4:bc:1f:d6:12:6b:93:b5:
d7:33:f2:e9:54:e7:e1:93:37:7d:39:c9:99:55:a5:
3a:5e:52:82:60:71:92:2d:19:37:f4:62:9d:81:78:
e1:e6:b1:d7:5e:f5:aa:86:b1:49:09:5f:f5:c3:6b:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:C6:2C:80:09:70:1C:42:E8:B9:58:0C:48:7C:6C:F3:4B:58:5A
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.120.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:11:a1:1a:5e:07:33:cf:9a:29:51:80:93:ca:e5:36:17:88:
46:27:f4:c1:57:f7:0b:f6:87:39:9d:03:93:49:4d:e1:7f:fc:
4c:1a:19:54:f2:2b:9e:d0:e3:3c:d1:d9:29:75:87:51:16:51:
6e:3f:55:50:20:45:69:8c:ae:ef:88:05:5e:89:c7:67:20:e3:
db:32:86:4f:a1:90:4f:6f:1e:b3:53:0d:2c:2a:16:75:17:de:
c8:c9:c4:21:4f:15:c0:b0:c2:20:8e:ae:c6:c1:c3:0d:6e:60:
4d:39:89:bf:c4:ed:0c:b8:63:f5:82:69:22:fd:d5:8a:86:d1:
37:b0:d3:38:7f:cb:d8:9e:6b:b4:7c:dc:9e:10:1e:3f:06:66:
20:c0:53:6e:03:65:91:ec:3a:21:6a:b0:19:7b:dc:e7:b2:e2:
87:8e:bd:8f:0a:b6:f5:df:2e:bb:ad:99:94:64:57:62:88:77:
ef:6a:1d:44:cd:cd:88:db:ad:a9:40:d9:41:c4:b7:86:ac:06:
75:d3:bf:18:ab:98:13:87:83:d6:55:ad:65:4b:52:df:d1:4b:
80:2a:52:5e:71:43:6c:53:28:c2:17:e9:5c:79:d5:20:b6:3c:
71:bd:a1:3f:83:8e:c8:b9:b4:3f:69:c8:4b:21:00:13:39:d0:
b5:7f:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:40:00 2025 by rpki-client