
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
File: zqWdGo6GaTMa3vXStutITbCwv_U.roa (raw, json)
Hash identifier: s+dZpTrXLIkJjMdX0WDar1DAen3XP51772n9wuyJgLQ=
Subject key identifier: CE:A5:9D:1A:8E:86:69:33:1A:DE:F5:D2:B6:EB:48:4D:B0:B0:BF:F5
Certificate issuer: /CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Certificate serial: 04
Authority key identifier: 8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
Signing time: Fri 26 Sep 2025 04:50:04 +0000
ROA not before: Fri 26 Sep 2025 04:50:04 +0000
ROA not after: Sat 26 Sep 2026 04:32:34 +0000
asID: 55393
IP address blocks: 119.15.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Validity
Not Before: Sep 26 04:50:04 2025 GMT
Not After : Sep 26 04:32:34 2026 GMT
Subject: CN=CEA59D1A8E8669331ADEF5D2B6EB484DB0B0BFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:a4:27:d8:e3:30:39:20:fc:1f:2a:36:5f:
0c:0e:3a:ae:99:84:3f:b9:1d:3c:0a:20:56:55:ff:
fe:28:32:80:16:60:e3:e2:e6:0a:d8:91:ff:10:21:
a2:a8:cb:22:bf:16:b8:c4:5c:d1:ff:b8:32:3e:35:
7e:f2:e5:5f:f9:88:b0:99:4d:8a:42:f5:18:fb:ec:
79:fd:30:d9:bd:96:32:af:b4:5f:de:99:2a:8e:5a:
ba:09:a0:ca:58:1c:d5:55:d3:98:55:d2:97:69:d4:
67:e9:13:54:f9:3a:5c:8f:7f:93:10:74:85:5b:a8:
48:44:7a:44:bf:98:2d:0f:8d:b5:2d:6f:86:02:d5:
f8:69:9a:04:88:f7:24:77:ae:30:a3:17:6d:94:3f:
8e:b6:46:e6:cc:b6:11:f5:f4:e9:10:8d:37:3b:31:
9d:5e:c8:04:0a:7f:bf:87:b4:3a:a7:8c:39:a4:1d:
89:c8:ec:a4:84:84:a9:a0:cc:eb:4a:c6:92:8b:5c:
f0:1a:0d:fc:a7:85:de:8e:5e:6a:ac:a1:96:c9:ec:
33:f5:1e:6b:8e:d8:49:da:28:39:73:5d:dd:2c:9c:
45:91:d5:ed:66:59:da:c6:c4:4b:84:15:81:13:8d:
fe:47:7c:85:3b:fa:97:36:74:d6:86:12:74:83:47:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:9D:1A:8E:86:69:33:1A:DE:F5:D2:B6:EB:48:4D:B0:B0:BF:F5
X509v3 Authority Key Identifier:
keyid:8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:89:7c:a4:18:4c:7a:ef:c7:f7:d0:d8:17:eb:e3:3b:85:c8:
a2:67:18:a8:4b:68:89:6d:c4:cf:c5:6c:a0:c0:0d:89:14:c2:
93:74:79:2b:08:3a:cf:b5:d3:cd:c9:29:0b:09:07:60:8d:c6:
d7:04:ca:79:2a:07:3a:24:d8:ba:0c:79:2a:b1:b0:d6:49:7b:
85:8e:41:2c:60:2d:eb:1b:6d:b5:a0:93:7a:fb:fe:f9:1b:4d:
e6:8d:cd:27:02:e6:79:ee:88:a4:ee:b9:9d:22:6b:b6:e2:e9:
2d:2c:e9:44:f5:1c:92:dc:d7:69:c6:e4:99:21:8c:dd:aa:7a:
2d:65:8a:9c:24:da:15:3f:1f:49:da:47:17:85:42:6d:0e:87:
19:93:c3:3c:63:06:ca:47:df:0d:e0:ee:60:bd:7e:fa:2b:23:
10:79:89:6c:42:47:23:2e:59:fc:d8:27:e8:b4:d4:b9:f2:52:
34:b7:dd:03:26:b3:ff:5f:03:de:9b:20:fa:e2:75:88:3b:8f:
e8:6a:61:3d:89:db:25:a8:98:cc:7b:bd:8e:cb:cd:67:0c:01:
4d:bc:fd:c0:fa:45:95:d9:39:2a:c5:d1:d0:0a:3e:32:e1:6c:
8d:20:c2:21:a0:d2:8e:1a:0c:ed:23:a9:f1:ce:18:d8:4c:90:
4f:b7:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:03:06 2025 by rpki-client