
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
File: sLGgaActsaSFOUuP72d7QBmj5Bk.roa (raw, json)
Hash identifier: 0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=
Subject key identifier: B0:B1:A0:68:07:2D:B1:A4:85:39:4B:8F:EF:67:7B:40:19:A3:E4:19
Certificate issuer: /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial: 15
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
Signing time: Fri 23 May 2025 02:54:12 +0000
ROA not before: Fri 23 May 2025 02:54:12 +0000
ROA not after: Fri 15 May 2026 01:30:03 +0000
asID: 59093
IP address blocks: 133.247.104.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
Validity
Not Before: May 23 02:54:12 2025 GMT
Not After : May 15 01:30:03 2026 GMT
Subject: CN=B0B1A068072DB1A485394B8FEF677B4019A3E419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:36:eb:59:a9:22:a2:1d:ab:a7:ba:bb:a8:
2f:ac:a4:6f:6d:0e:5f:eb:7e:d3:4c:99:e8:25:58:
f1:cb:d5:1b:c5:87:a3:4e:f5:62:5f:39:a0:d1:94:
2a:36:da:97:63:ff:81:f5:e2:31:33:0f:b0:23:9c:
25:0a:b2:f1:aa:b0:c9:d6:db:80:5a:2f:b1:e4:cd:
0e:85:7b:3b:b5:2a:f3:48:e2:81:4e:62:c0:88:bf:
9a:bf:ce:29:f1:24:b4:62:5a:f7:95:a9:f6:ee:ee:
dc:23:e2:c1:c3:73:97:2f:db:07:34:49:5d:d6:82:
4c:40:b1:1c:5d:17:7b:ba:57:14:6e:7e:0f:c2:46:
46:1e:6b:5a:f4:32:21:09:d5:db:25:79:86:cd:75:
44:51:6a:79:ab:17:b8:5f:a6:cf:d3:6b:39:6f:f1:
71:89:51:72:41:4e:2d:0b:c3:92:23:5f:9c:26:a0:
8c:c2:59:4b:7f:31:6a:c7:be:d9:bd:6e:c2:48:34:
ea:50:6f:a4:e8:a1:9b:3c:37:d4:22:65:a4:94:1a:
fe:72:5d:ee:e0:c6:bb:22:d3:a7:42:64:92:f9:59:
38:08:73:5e:91:25:61:5b:a7:1f:b2:f1:63:7e:a9:
59:0d:c5:a5:f8:0d:36:97:c3:57:99:0e:e0:9b:51:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:A0:68:07:2D:B1:A4:85:39:4B:8F:EF:67:7B:40:19:A3:E4:19
X509v3 Authority Key Identifier:
keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/sLGgaActsaSFOUuP72d7QBmj5Bk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.247.104.0/21
Signature Algorithm: sha256WithRSAEncryption
37:66:2b:21:e6:7a:0e:40:46:0a:65:0a:c2:b6:62:82:20:04:
7d:e1:82:43:dd:6a:db:90:01:1c:f6:ab:36:1f:b3:bb:c7:c2:
ad:19:49:52:03:99:4f:86:30:46:f2:7f:67:70:64:e0:d1:bb:
23:c0:50:fc:d3:e6:a5:fe:06:b2:83:c0:04:18:41:d3:70:c9:
20:14:99:e9:30:f8:8d:63:4e:15:19:e7:34:50:51:d1:8d:1a:
3a:24:d9:53:bb:b9:db:8e:04:9d:22:af:cc:f8:1a:26:31:06:
bd:19:1e:20:58:8d:98:31:b3:63:68:05:ab:3c:d5:a1:d5:ef:
b0:0a:b1:c9:ab:c0:13:e2:4e:51:d2:39:6a:4d:dc:cd:cb:25:
31:2f:4a:f9:80:91:59:28:40:37:2f:2c:3e:b3:9c:c7:3e:d8:
83:6a:bc:6e:5b:0b:08:f7:16:50:d5:3f:02:8b:a7:34:6a:df:
dd:4e:6b:e9:88:9f:dd:2a:b1:45:e4:d9:90:4c:7a:b3:2c:d2:
0c:5b:ac:ba:a0:95:a3:c9:52:02:f0:df:26:df:0d:2f:d1:aa:
ed:2e:28:19:e8:d1:3e:c4:23:05:de:3a:cf:56:60:c8:a1:e9:
b8:fc:a3:06:2d:14:8d:a8:d1:e6:1e:63:70:e1:6c:2d:f9:4d:
a8:41:43:e4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMTI1
QjQzQTc1QUUzMTMyNjlBNjA2MzhFNjYzMTc5NzBCNTBCNUQzMB4XDTI1MDUyMzAy
NTQxMloXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQjBCMUEwNjgwNzJEQjFB
NDg1Mzk0QjhGRUY2NzdCNDAxOUEzRTQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBYNutZqSKiHaunuruoL6ykb20OX+t+00yZ6CVY8cvVG8WHo071
Yl85oNGUKjbal2P/gfXiMTMPsCOcJQqy8aqwydbbgFovseTNDoV7O7Uq80jigU5i
wIi/mr/OKfEktGJa95Wp9u7u3CPiwcNzly/bBzRJXdaCTECxHF0Xe7pXFG5+D8JG
Rh5rWvQyIQnV2yV5hs11RFFqeasXuF+mz9NrOW/xcYlRckFOLQvDkiNfnCagjMJZ
S38xase+2b1uwkg06lBvpOihmzw31CJlpJQa/nJd7uDGuyLTp0JkkvlZOAhzXpEl
YVunH7LxY36pWQ3FpfgNNpfDV5kO4JtRfWkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSwsaBoBy2xpIU5S4/vZ3tAGaPkGTAfBgNVHSMEGDAWgBThJbQ6da4xMmmmBjjm
YxeXC1C10zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTY4LzRTVzBPbld1TVRKcHBnWTQ1bU1YbHd0UXRkTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzRTVzBPbld1TVRKcHBnWTQ1bU1YbHd0
UXRkTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81Njgvc0xHZ2FBY3RzYVNGT1V1UDcyZDdRQm1qNUJrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA4X3aDANBgkqhkiG9w0BAQsFAAOCAQEAN2YrIeZ6DkBGCmUKwrZigiAEfeGC
Q91q25ABHParNh+zu8fCrRlJUgOZT4YwRvJ/Z3Bk4NG7I8BQ/NPmpf4GsoPABBhB
03DJIBSZ6TD4jWNOFRnnNFBR0Y0aOiTZU7u5244EnSKvzPgaJjEGvRkeIFiNmDGz
Y2gFqzzVodXvsAqxyavAE+JOUdI5ak3czcslMS9K+YCRWShANy8sPrOcxz7Yg2q8
blsLCPcWUNU/AounNGrf3U5r6Yif3SqxReTZkEx6syzSDFusuqCVo8lSAvDfJt8N
L9Gq7S4oGejRPsQjBd46z1ZgyKHpuPyjBi0UjajR5h5jcOFsLflNqEFD5A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:40 2025 by rpki-client