
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa
File: wcXUBGbRJGQLS0aqXFND5orNoJU.roa (raw, json)
Hash identifier: ApC5aXzzVZGnOceBJ1e4Viy5CAMWh1QURWVh4EpxZPI=
Subject key identifier: C1:C5:D4:04:66:D1:24:64:0B:4B:46:AA:5C:53:43:E6:8A:CD:A0:95
Certificate issuer: /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial: 36
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa
Signing time: Fri 31 Jan 2025 01:29:01 +0000
ROA not before: Fri 31 Jan 2025 01:29:01 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 17530
IP address blocks: 122.201.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Validity
Not Before: Jan 31 01:29:01 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=C1C5D40466D124640B4B46AA5C5343E68ACDA095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:75:69:2d:c5:a6:c1:55:d6:d6:01:df:03:
7d:34:48:2e:fd:e7:7e:c6:a9:f0:d3:7a:af:93:65:
ff:af:fa:14:a4:15:5f:f3:ee:de:eb:33:e8:67:3f:
12:db:59:4a:e0:73:23:18:f9:8a:fb:b4:e6:5d:cd:
ba:e5:6d:f9:6e:a0:6d:d4:13:b2:f8:5f:49:55:77:
24:d1:70:aa:27:8f:2b:78:77:ef:56:d6:2b:7e:16:
21:f1:26:59:a2:ac:b4:85:c2:33:65:c3:a6:7b:c0:
ab:8c:ca:9e:c4:26:59:27:11:c2:e8:8f:ca:01:e1:
ad:6e:9d:29:d2:be:a8:f1:e7:30:4c:58:b9:b8:dd:
a2:73:63:34:06:fb:df:f0:cf:47:2c:99:9c:60:e6:
2f:7f:ed:06:6b:87:6d:d1:e5:01:9c:73:99:b8:ec:
7b:bf:e4:44:6d:fc:13:54:fe:a4:70:11:a1:41:ab:
a1:cc:a3:82:ff:c1:c8:f8:22:5d:18:94:81:d2:c6:
25:2f:42:d9:f8:7c:d1:e9:3a:4c:81:3a:62:e7:91:
48:47:07:26:ea:80:de:b5:39:a5:2b:bd:26:6b:c7:
b9:55:fa:c6:49:54:5a:75:9e:6d:da:d8:11:ec:b5:
5c:df:dd:c2:a6:cc:be:18:84:c7:e3:00:5a:82:fd:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:D4:04:66:D1:24:64:0B:4B:46:AA:5C:53:43:E6:8A:CD:A0:95
X509v3 Authority Key Identifier:
keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/wcXUBGbRJGQLS0aqXFND5orNoJU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.201.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:a0:a0:b0:cc:3b:42:04:ce:ec:6c:32:3d:4c:03:15:ae:5a:
5d:cd:49:df:6e:50:d0:24:25:28:40:16:b8:82:a4:a4:8e:0e:
3d:99:5e:be:01:b6:d8:7e:b6:81:be:5f:03:48:06:7c:e8:9c:
28:3a:5f:8f:3e:aa:f5:44:06:e1:01:68:de:6a:2e:5b:ff:7e:
6a:e6:5c:91:6c:ba:fc:e6:81:6e:b2:9a:b9:f8:f2:a8:0a:4e:
67:56:eb:08:3e:2a:10:27:7b:8f:57:3e:dd:f9:44:28:48:df:
d9:55:f2:45:f6:47:c9:c9:e3:19:25:a5:8f:6e:0c:7d:a4:3d:
44:9b:b2:16:28:07:f5:05:dd:83:b7:13:2d:bc:fd:06:4b:dd:
85:95:85:b0:a0:9b:03:11:a9:9b:c9:aa:bc:9e:27:80:91:08:
6e:ba:fc:d7:58:d6:63:ba:05:5f:34:72:94:41:66:05:0f:88:
c4:61:a4:bd:51:ec:14:c5:57:fa:f0:87:c6:d2:b3:ef:cd:58:
22:14:cd:ca:f2:4f:76:b8:a9:3a:d4:d1:a3:41:27:b4:24:54:
66:38:7c:eb:9c:ac:46:ea:cb:ee:89:3b:7e:a1:de:fb:c6:6e:
da:cc:07:d5:fd:e0:07:47:01:36:40:42:a8:c9:64:d0:ac:a2:
53:94:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:02:03 2025 by rpki-client