
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
File: Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa (raw, json)
Hash identifier: YO4jXTpwQ5lP4y0JOO0/yS9k9lcMRHf1glVWJJBA7MY=
Subject key identifier: 51:FE:D1:6C:2B:EF:CE:05:A0:EE:BF:01:B1:A1:7D:4F:21:2C:BE:92
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 93
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
Signing time: Tue 01 Jul 2025 01:34:56 +0000
ROA not before: Tue 01 Jul 2025 01:34:56 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 55900
IP address blocks: 43.248.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Jul 1 01:34:56 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=51FED16C2BEFCE05A0EEBF01B1A17D4F212CBE92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b5:b7:1f:d4:87:2f:9a:20:5e:60:88:0e:
71:fa:89:96:05:1e:12:c0:ca:ab:8a:6f:03:8d:23:
21:d0:df:ea:d1:d1:cb:cd:50:04:a2:be:f7:9a:66:
2a:f2:6c:ff:57:8b:32:b5:d2:1b:2b:61:cc:a0:b8:
86:6e:cf:de:c7:4f:b2:2a:a4:34:53:2f:61:98:56:
ba:30:89:e1:72:d0:61:bb:4b:78:0f:c6:af:37:62:
6f:13:47:88:f4:43:66:86:4d:ad:01:89:e7:1d:2a:
99:0e:ba:94:77:53:80:a3:fe:f4:cc:2a:6d:38:f0:
f9:f8:44:30:bb:d1:f9:41:c0:ce:60:78:52:f6:cd:
0b:bd:e8:26:42:a9:c9:66:e7:eb:32:6f:cc:1f:ac:
67:2b:e4:e3:86:ec:2f:65:00:df:5b:48:c2:0d:12:
4e:03:b8:7d:3c:53:85:7d:10:c1:5f:36:7f:ac:4a:
bd:a5:36:a3:53:99:13:bf:fa:f2:97:29:a3:74:2a:
cf:f2:ad:44:a7:91:5d:8f:7f:85:03:46:1e:1b:aa:
52:e3:38:94:01:07:c2:9b:97:6b:d8:40:dc:fe:e6:
f2:12:f0:9d:4d:1f:90:5c:bd:2c:83:95:9f:8c:21:
bd:c3:d7:74:a6:f6:e2:ce:3e:f7:16:dc:c7:ab:0a:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:D1:6C:2B:EF:CE:05:A0:EE:BF:01:B1:A1:7D:4F:21:2C:BE:92
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.160.0/22
Signature Algorithm: sha256WithRSAEncryption
92:24:dc:e2:b1:db:8e:1a:01:70:31:26:dc:8f:79:52:7e:e9:
99:b3:6d:d3:a6:4b:28:8a:2a:5a:49:8d:67:8c:41:91:da:ac:
f3:df:85:2b:dd:ad:52:db:a5:b5:c8:88:07:90:d4:b7:84:85:
89:d3:d0:f1:d9:1c:47:5f:25:9e:fc:0f:a4:f8:40:fc:78:5d:
f1:5b:2c:ae:56:8a:e9:f5:93:6b:2f:98:0f:19:d1:42:38:4a:
4d:67:a5:dd:1b:0b:d6:26:54:68:b5:f7:d3:c0:04:c7:34:d0:
a7:a3:13:0a:0e:d8:c0:c8:f1:70:90:fd:86:5a:97:87:43:e2:
7b:d4:c2:bf:49:17:2d:94:f3:39:54:57:5e:4b:ce:3d:0a:71:
47:d5:1e:91:c0:4f:9e:b3:a1:80:0d:08:a3:c5:92:5d:9f:9d:
0c:d0:53:24:81:89:1b:64:06:ed:54:eb:50:b8:cd:c9:77:2b:
9d:f3:6b:b7:49:0d:67:c5:ff:79:30:65:3f:27:23:f1:89:6c:
e6:dd:59:4a:08:b2:c5:cc:7f:d1:97:1c:7a:92:b3:2e:0d:b9:
e5:3e:e3:c2:c0:4c:6f:4e:c1:26:25:01:87:0d:ff:a9:b7:f6:
ad:07:40:45:4a:fc:d7:0b:ed:4d:3a:f4:da:fb:b2:e6:ca:5e:
e5:66:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:56 2025 by rpki-client