
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
File: tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa (raw, json)
Hash identifier: GhAaPEG/2cFDEhuE3hcsyBAwA7J82m48rmpOcH2NMJA=
Subject key identifier: B6:64:57:0C:13:4B:09:2B:2B:74:93:4B:59:D0:25:18:B4:E9:42:92
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 82
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
Signing time: Mon 01 Sep 2025 01:30:30 +0000
ROA not before: Mon 01 Sep 2025 01:30:30 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 131896
IP address blocks: 103.198.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Sep 1 01:30:30 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=B664570C134B092B2B74934B59D02518B4E94292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:75:85:24:be:43:27:40:34:83:74:c7:f6:
9f:cd:46:3d:84:2d:fc:63:82:a5:e0:fa:b9:0c:77:
78:5d:56:68:2e:04:5a:6e:84:6b:c3:ed:7e:f0:6a:
56:d3:a1:fe:67:91:23:3a:c8:cb:52:1d:23:16:f0:
ae:2c:20:98:c2:64:b6:a4:ab:47:b4:52:c9:a7:11:
cf:4e:62:36:80:90:16:46:a3:4e:ad:bf:fc:6a:71:
6f:c4:97:3b:51:c6:47:5d:93:dd:77:7d:e3:a7:81:
c3:b8:b2:ec:db:a6:7e:ea:7e:f9:38:be:d5:63:bd:
aa:d9:8e:c0:28:96:5f:b6:fe:9d:e8:c5:7d:74:4b:
af:c8:9e:bb:4c:50:cc:c3:9a:37:d6:56:5d:b8:7a:
b9:45:65:3d:a9:10:a6:0c:39:36:02:74:59:41:41:
bc:d5:1d:60:e1:be:b8:a5:28:7a:ea:96:cc:68:c7:
d1:e7:7c:e7:38:0d:89:cd:ed:9d:13:f9:e3:0b:67:
f6:e0:34:18:49:ea:0e:22:c4:e8:95:82:64:cf:73:
9e:8c:52:b3:ab:fc:33:35:5e:83:a6:1f:b9:50:82:
30:47:42:d4:ab:81:f3:ed:ed:56:22:92:e6:46:2a:
68:fc:2e:39:56:c1:55:9b:44:52:55:7a:b1:e9:5c:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:57:0C:13:4B:09:2B:2B:74:93:4B:59:D0:25:18:B4:E9:42:92
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.111.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2c:4b:f9:b0:ac:12:e9:ab:bc:84:27:ab:7c:a0:af:d4:c7:
e2:b6:5c:ec:64:c4:c9:9c:90:74:0a:d7:4e:fc:80:16:d5:fd:
8a:43:87:4a:53:da:23:67:9c:3a:55:0f:39:03:a7:4c:62:74:
e5:e7:68:e3:6a:e2:ab:c0:25:83:93:bf:0b:7c:fc:7d:a7:e3:
40:41:86:09:6c:a6:bc:98:ce:e3:1f:19:93:71:ae:1b:59:86:
c3:4b:94:9f:ef:e7:d3:e2:5c:3e:66:03:ff:41:ee:7f:e4:d7:
11:ea:08:9f:b3:82:ed:24:7a:6d:58:18:56:1a:0b:28:33:42:
a4:85:05:8d:3a:59:e0:d5:b0:9c:79:86:2f:3c:05:d2:6e:98:
80:ed:f0:08:2c:10:3a:8f:86:e9:64:3d:0c:10:09:19:b0:a0:
71:f7:be:72:b3:90:44:bc:5a:ad:d8:64:94:54:6a:e1:fe:11:
16:88:5a:a2:4f:9d:1a:a5:6d:c6:58:78:83:f4:24:37:d1:2e:
bf:0b:39:f0:ec:61:c0:61:ac:b5:86:f8:5e:99:f5:22:aa:a8:
ec:cb:5e:c2:32:b7:91:6e:dc:7e:70:ea:f0:15:6a:ec:03:03:
17:13:eb:94:71:c2:56:7b:4e:49:2d:fc:96:98:c4:c6:18:5e:
4f:aa:75:29
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx
NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNTA5MDEw
MTMwMzBaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2NjQ1NzBDMTM0QjA5
MkIyQjc0OTM0QjU5RDAyNTE4QjRFOTQyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBRHWFJL5DJ0A0g3TH9p/NRj2ELfxjgqXg+rkMd3hdVmguBFpu
hGvD7X7walbTof5nkSM6yMtSHSMW8K4sIJjCZLakq0e0UsmnEc9OYjaAkBZGo06t
v/xqcW/ElztRxkddk913feOngcO4suzbpn7qfvk4vtVjvarZjsAoll+2/p3oxX10
S6/InrtMUMzDmjfWVl24erlFZT2pEKYMOTYCdFlBQbzVHWDhvrilKHrqlsxox9Hn
fOc4DYnN7Z0T+eMLZ/bgNBhJ6g4ixOiVgmTPc56MUrOr/DM1XoOmH7lQgjBHQtSr
gfPt7VYikuZGKmj8LjlWwVWbRFJVerHpXJ0nAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtmRXDBNLCSsrdJNLWdAlGLTpQpIwHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE
7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT
d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTczL3RtUlhEQk5MQ1NzcmRKTkxXZEFsR0xUcFFwSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnxm8wDQYJKoZIhvcNAQELBQADggEBABUsS/mwrBLpq7yEJ6t8oK/Ux+K2
XOxkxMmckHQK1078gBbV/YpDh0pT2iNnnDpVDzkDp0xidOXnaONq4qvAJYOTvwt8
/H2n40BBhglspryYzuMfGZNxrhtZhsNLlJ/v59PiXD5mA/9B7n/k1xHqCJ+zgu0k
em1YGFYaCygzQqSFBY06WeDVsJx5hi88BdJumIDt8AgsEDqPhulkPQwQCRmwoHH3
vnKzkES8Wq3YZJRUauH+ERaIWqJPnRqlbcZYeIP0JDfRLr8LOfDsYcBhrLWG+F6Z
9SKqqOzLXsIyt5Fu3H5w6vAVauwDAxcT65RxwlZ7Tkkt/JaYxMYYXk+qdSk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:09:53 2025 by rpki-client