
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
File: t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa (raw, json)
Hash identifier: wU/5iSSqYGZKC2AHSc5jcwCDSZN+OgbZrIcAqX5i5fs=
Subject key identifier: B7:60:67:4E:04:85:BE:64:2E:38:6E:27:3A:FA:33:E5:52:47:3D:1F
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 7B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
Signing time: Tue 01 Jul 2025 01:35:56 +0000
ROA not before: Tue 01 Jul 2025 01:35:56 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Jul 1 01:35:56 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=B760674E0485BE642E386E273AFA33E552473D1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:a9:5d:18:5c:07:cc:5d:38:2d:4e:15:3b:
66:e4:40:79:f5:4b:14:e7:6a:76:14:64:66:10:82:
cc:8a:bb:d1:87:6c:27:cd:e2:40:2d:f7:57:51:4f:
6c:79:3b:06:3b:32:b6:36:78:a2:c5:1c:6f:23:8f:
3e:7b:cc:d4:e7:e7:94:89:ae:81:d4:3c:52:59:25:
5f:4f:f0:73:e7:9f:62:c6:45:a1:36:3b:e0:bc:44:
4a:fc:91:fb:77:ad:91:7b:84:b9:24:39:cb:bf:42:
2d:4c:a1:f2:67:14:ba:27:b6:b3:3d:09:a0:75:dd:
b4:00:67:ee:60:c4:30:22:9c:e4:ec:a4:7d:19:80:
4d:90:29:2f:2d:14:61:96:e1:4a:74:2a:3a:12:e7:
00:13:e0:da:97:4e:0b:ef:b5:55:07:16:22:8d:69:
c6:f1:f5:ea:44:05:a4:03:db:a0:59:83:9c:66:b4:
2f:73:a0:07:97:8f:75:43:43:12:93:21:cd:30:26:
1b:cd:a5:b5:23:d9:5b:3a:e9:33:94:52:74:8a:8c:
e5:08:46:fb:6a:87:ba:8e:70:2d:af:d6:7c:3e:cc:
11:f0:fd:8f:eb:42:f2:f1:7a:53:5a:c9:f7:6c:4f:
91:c1:80:32:4f:df:5a:f6:59:9d:09:3b:41:fe:39:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:67:4E:04:85:BE:64:2E:38:6E:27:3A:FA:33:E5:52:47:3D:1F
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.16.0/23
Signature Algorithm: sha256WithRSAEncryption
47:7f:64:71:3c:37:9a:fe:c6:c9:65:93:7b:f7:ef:ea:19:63:
77:1d:80:67:9e:24:29:f7:db:66:73:f1:96:0e:86:68:8c:bd:
3f:07:b4:4e:e3:dd:2e:bb:3b:bb:92:7d:d8:c4:b9:ec:ab:ed:
6b:7b:b1:62:54:74:10:bf:72:5e:cb:95:6d:86:c7:20:5d:ce:
24:63:7a:03:13:65:07:d6:0d:bc:db:8f:ef:af:b7:2a:26:5b:
4d:5e:05:77:c5:34:00:ce:61:eb:5d:57:de:bf:f1:df:17:1d:
71:95:12:41:54:d1:f3:af:e1:f9:87:19:28:bb:63:e4:9f:bd:
2c:b4:d1:7e:1b:a5:1a:11:96:54:1c:cf:30:c7:b3:dd:32:16:
fa:0c:9f:8a:fe:bb:1b:c4:12:2c:4c:8d:5c:2a:06:4f:dd:d0:
f5:de:d9:9e:f0:12:b2:a8:d5:67:a6:69:f7:aa:52:8f:3e:17:
88:97:2b:74:46:d2:ac:bd:1c:7a:bc:9d:89:81:fc:e1:1d:c2:
11:2d:20:1d:0b:37:fd:5f:fe:2f:bb:d1:cd:d9:1d:9f:18:04:
57:92:13:6d:23:40:44:b8:bb:1a:ef:11:eb:91:b1:5c:f6:87:
f8:20:60:78:a2:f6:c3:11:e7:4e:d2:61:e5:2a:50:3e:d9:5d:
d1:0b:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:27:34 2025 by rpki-client