
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
File: a1jW32tO_mL_zHwRgRVnRVm8MpE.roa (raw, json)
Hash identifier: cyVBfZefqU5UyGJcFti9UUwvdXBmaIyCWlsE7DZmS2Q=
Subject key identifier: 6B:58:D6:DF:6B:4E:FE:62:FF:CC:7C:11:81:15:67:45:59:BC:32:91
Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial: 36
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
Signing time: Tue 01 Jul 2025 01:32:18 +0000
ROA not before: Tue 01 Jul 2025 01:32:18 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 17682
IP address blocks: 61.213.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Validity
Not Before: Jul 1 01:32:18 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=6B58D6DF6B4EFE62FFCC7C118115674559BC3291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:4c:d6:ce:c5:a9:78:c0:43:86:75:87:1c:
61:58:48:69:f7:64:65:9a:2b:ab:b2:e3:1f:95:71:
23:d0:75:5e:73:55:f4:66:3e:10:10:54:1d:87:95:
1c:9d:82:b3:22:42:09:6f:96:4a:df:85:e6:94:e3:
f6:8f:e0:1e:a3:60:d6:98:45:0f:ec:2e:05:44:4d:
ef:e2:84:82:a0:a4:3b:3c:90:1e:a5:7a:1a:c4:5c:
b4:4d:1b:76:fa:92:c3:51:7a:62:a3:d3:26:ea:1b:
44:e5:d2:50:24:2e:8c:64:45:cd:5e:fb:06:7d:b5:
4f:23:49:91:55:e5:12:df:6a:c0:19:82:44:21:c1:
40:d9:73:13:3f:88:ba:ce:fa:1c:32:f1:01:49:4a:
0e:77:ac:75:cf:e2:06:38:88:1b:33:1f:9d:2d:49:
95:f0:da:b6:0f:78:68:6c:e5:72:40:95:27:97:f8:
a4:48:42:6e:95:72:f8:6a:37:80:8c:e2:fe:e9:ba:
4a:d1:33:55:34:0a:57:83:26:58:07:a3:3e:71:39:
d3:98:be:76:63:d9:9b:7c:3b:6c:d4:9c:6c:d9:09:
ba:83:71:b8:e1:cb:52:67:6d:93:93:64:79:3c:e2:
46:56:c2:48:95:09:f3:27:82:42:7f:f6:07:ff:70:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:D6:DF:6B:4E:FE:62:FF:CC:7C:11:81:15:67:45:59:BC:32:91
X509v3 Authority Key Identifier:
keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.32.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:cc:7d:58:d5:20:2f:0f:cb:92:8a:09:d2:00:ea:0c:7a:4d:
de:02:6d:8d:f8:cb:d3:1b:62:87:d2:d7:39:5f:69:a5:4f:e9:
a5:e3:20:40:f6:47:b4:fd:6b:38:fe:9c:7b:aa:d7:07:c7:23:
6a:40:7d:d0:70:42:6b:f4:00:71:c3:29:d6:af:ab:48:53:97:
22:d4:a8:bf:7c:83:82:57:fe:ff:91:5e:a2:64:17:51:aa:48:
c0:13:c6:1b:23:7d:f9:07:3a:d8:28:f9:f3:d0:a4:2c:ea:44:
d9:b6:6f:ff:e7:fc:4b:c0:2d:f8:fd:b1:45:d6:f7:e8:b7:66:
38:11:59:56:77:1c:88:bc:50:24:f4:9e:52:61:f8:c0:8d:ca:
60:b6:4c:94:f0:56:f6:06:59:0b:27:b7:03:2f:1d:53:8b:c6:
2a:bb:f1:1a:d7:a0:a0:ea:e1:71:56:67:d7:ab:72:8d:b5:b0:
47:12:04:67:a6:bc:6f:46:55:29:fd:2d:12:e3:5b:c3:42:25:
39:13:4f:63:f2:6e:06:54:0b:db:68:31:cc:06:a5:23:27:e3:
29:ea:3c:4d:0a:9f:21:d5:13:73:eb:0b:8f:b4:91:0f:b2:59:
85:d5:85:b8:c6:97:bc:2e:f2:2f:d9:50:f9:fb:49:69:a9:70:
ee:10:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:24 2025 by rpki-client