
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
File: r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa (raw, json)
Hash identifier: SPrX8pYwxVh/0vC83BIkPrvI03PX4GixpvwH+wXxjvA=
Subject key identifier: AF:A9:2A:06:C6:92:4D:0C:BC:16:E6:21:13:DC:58:51:E2:80:DE:A3
Certificate issuer: /CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
Certificate serial: 13
Authority key identifier: AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
Signing time: Tue 22 Apr 2025 02:09:55 +0000
ROA not before: Tue 22 Apr 2025 02:09:55 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 58645
IP address blocks: 103.13.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
Validity
Not Before: Apr 22 02:09:55 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=AFA92A06C6924D0CBC16E62113DC5851E280DEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:1c:08:7e:c3:9c:e6:91:ec:17:fb:6d:0c:
70:34:12:3e:71:34:e7:ff:51:c2:70:62:92:c5:4b:
f9:04:ed:d6:5f:80:6e:24:2c:f0:1d:66:af:5f:7d:
6e:9e:f8:7d:ac:2a:5e:35:66:2c:91:7d:8e:df:8d:
40:d0:e6:c3:8e:65:e2:de:69:26:da:63:53:81:76:
45:81:17:5c:1f:9f:ed:01:8a:8a:78:b7:32:04:41:
a3:c5:9b:7b:a7:35:54:bb:e0:6f:33:01:a8:04:2f:
4b:d5:38:2d:f0:15:5c:93:13:ca:67:85:56:37:33:
84:a4:b3:1b:9f:0a:73:40:d3:b8:91:39:66:d6:75:
f6:f3:7d:94:df:9b:33:fe:ae:f9:07:43:5c:92:8d:
35:b7:1a:85:d8:f8:46:cd:82:43:5f:3a:32:1e:ef:
73:4c:d2:f4:30:c7:61:10:3b:a8:c4:c9:47:c7:0e:
44:40:61:56:d3:90:2f:d6:f2:a6:27:00:6f:5c:45:
79:19:c6:d2:8d:ce:d5:4b:60:21:22:18:ee:a7:00:
02:00:49:7e:7c:34:64:61:76:f4:9e:c7:ca:8d:3c:
3f:58:53:de:55:12:85:9c:7f:25:78:c1:0a:96:99:
dd:f9:13:04:2a:67:d5:3d:5e:73:8a:cd:e8:87:9e:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:2A:06:C6:92:4D:0C:BC:16:E6:21:13:DC:58:51:E2:80:DE:A3
X509v3 Authority Key Identifier:
keyid:AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.168.0/22
Signature Algorithm: sha256WithRSAEncryption
80:8a:85:83:ae:78:60:a8:92:b2:1f:51:25:f3:c2:fa:f2:26:
b4:f5:b5:cf:73:50:ed:0b:a7:fa:c8:17:6a:dc:48:66:d3:6a:
29:22:24:26:12:de:28:35:4b:d7:0d:0c:22:d6:33:b6:c1:85:
24:7c:ca:39:e6:5c:65:e6:45:91:69:c1:5e:a5:fb:39:3c:30:
fb:e6:4d:1e:13:2a:02:ef:8c:95:66:6c:6e:11:03:af:9c:f2:
ca:81:67:39:7b:3d:92:40:43:55:63:52:14:5e:07:e8:d0:7a:
5c:e7:2e:b1:95:1b:f5:4f:a5:8e:1a:68:43:90:16:b9:f1:f3:
c5:61:dc:53:a9:13:14:fd:76:c4:21:a4:f9:31:8c:de:b4:fd:
f0:7b:a0:33:f6:21:89:f4:ac:e6:5b:6b:eb:75:2b:28:d0:c1:
8d:91:1f:8d:27:24:2f:81:e5:fc:b7:88:03:18:48:4b:d2:97:
ef:dd:48:62:e1:39:9d:a6:c4:6f:dc:67:95:dc:40:fd:18:60:
67:61:c0:e4:bb:e0:3f:58:5e:92:09:b4:06:40:2f:15:83:e1:
e6:98:2d:d8:70:41:72:20:eb:f4:6e:df:a8:a2:cb:5a:4d:56:
1a:e0:fb:49:d0:7c:7d:43:53:c7:52:d5:bb:a2:54:c6:13:b9:
d0:39:10:ed
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQ0M4
ODg3MDhEMTlBMzhGQjNCMThGRDFCNDkyOTc0RDVEODA5NkY2MB4XDTI1MDQyMjAy
MDk1NVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQUZBOTJBMDZDNjkyNEQw
Q0JDMTZFNjIxMTNEQzU4NTFFMjgwREVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM/zHAh+w5zmkewX+20McDQSPnE05/9RwnBiksVL+QTt1l+AbiQs
8B1mr199bp74fawqXjVmLJF9jt+NQNDmw45l4t5pJtpjU4F2RYEXXB+f7QGKini3
MgRBo8Wbe6c1VLvgbzMBqAQvS9U4LfAVXJMTymeFVjczhKSzG58Kc0DTuJE5ZtZ1
9vN9lN+bM/6u+QdDXJKNNbcahdj4Rs2CQ186Mh7vc0zS9DDHYRA7qMTJR8cOREBh
VtOQL9bypicAb1xFeRnG0o3O1UtgISIY7qcAAgBJfnw0ZGF29J7Hyo08P1hT3lUS
hZx/JXjBCpaZ3fkTBCpn1T1ec4rN6IeekycCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSvqSoGxpJNDLwW5iET3FhR4oDeozAfBgNVHSMEGDAWgBSsyIhwjRmjj7Oxj9G0
kpdNXYCW9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTUyL3JNaUljSTBabzQtenNZX1J0SktYVFYyQWx2WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JNaUljSTBabzQtenNZX1J0SktYVFYy
QWx2WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81NTIvcjZrcUJzYVNUUXk4RnVZaEU5eFlVZUtBM3FNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcNqDANBgkqhkiG9w0BAQsFAAOCAQEAgIqFg654YKiSsh9RJfPC+vImtPW1
z3NQ7Qun+sgXatxIZtNqKSIkJhLeKDVL1w0MItYztsGFJHzKOeZcZeZFkWnBXqX7
OTww++ZNHhMqAu+MlWZsbhEDr5zyyoFnOXs9kkBDVWNSFF4H6NB6XOcusZUb9U+l
jhpoQ5AWufHzxWHcU6kTFP12xCGk+TGM3rT98HugM/YhifSs5ltr63UrKNDBjZEf
jSckL4Hl/LeIAxhIS9KX791IYuE5nabEb9xnldxA/RhgZ2HA5LvgP1hekgm0BkAv
FYPh5pgt2HBBciDr9G7fqKLLWk1WGuD7SdB8fUNTx1LVu6JUxhO50DkQ7Q==
-----END CERTIFICATE-----
Generated at Thu Nov 6 03:08:21 2025 by rpki-client