
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
File: ZSIrZGGu6GsHxzZgxErna_x1arc.roa (raw, json)
Hash identifier: 2AHUamLM+XDR41/pFdAvvpbrNKpX4iG6u5nYpCGZ3GE=
Subject key identifier: 65:22:2B:64:61:AE:E8:6B:07:C7:36:60:C4:4A:E7:6B:FC:75:6A:B7
Certificate issuer: /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial: 06
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
Signing time: Mon 02 Dec 2024 01:26:49 +0000
ROA not before: Mon 02 Dec 2024 01:26:49 +0000
ROA not after: Thu 20 Nov 2025 01:37:29 +0000
asID: 17936
IP address blocks: 218.40.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Validity
Not Before: Dec 2 01:26:49 2024 GMT
Not After : Nov 20 01:37:29 2025 GMT
Subject: CN=65222B6461AEE86B07C73660C44AE76BFC756AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:44:6b:6b:cf:a4:20:fc:36:5e:40:41:9c:
c5:f6:02:36:e4:93:2b:40:cb:47:4d:23:f8:c3:ed:
b7:e9:eb:53:47:a8:90:59:24:05:84:61:5e:51:4c:
78:b8:95:3a:56:c9:5e:f8:7f:f5:b8:3a:d2:91:91:
a0:4f:da:09:3a:0a:ec:56:71:63:de:7b:48:88:84:
df:d9:88:c1:c3:f9:48:22:9c:b3:80:af:2f:71:f7:
e5:a3:cc:ec:7e:8a:8f:19:32:9d:f2:ec:f9:33:6b:
d2:cb:85:a9:c0:44:f8:9e:d8:7e:d0:f5:0f:7b:03:
1f:5e:ab:c8:1e:f6:d3:65:87:b8:aa:52:e6:65:68:
5c:1e:95:66:78:57:b0:4a:1d:d4:9c:e8:2d:4b:ef:
29:a7:96:79:79:3c:d3:b9:fa:a2:55:bd:29:52:88:
22:d5:35:5e:05:4a:df:85:81:4e:85:a0:f9:82:f0:
65:6d:f3:14:c9:91:dd:52:62:a2:ec:20:89:1e:5b:
42:fe:ca:3c:80:15:50:76:41:81:f8:05:f3:25:40:
40:a8:89:1c:7a:e8:3d:80:df:e5:d4:d7:59:84:83:
99:d3:b7:67:1b:61:ce:eb:ab:6b:8c:a5:7c:39:6b:
08:45:16:81:77:ab:06:e7:4e:a6:32:af:cf:30:76:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:2B:64:61:AE:E8:6B:07:C7:36:60:C4:4A:E7:6B:FC:75:6A:B7
X509v3 Authority Key Identifier:
keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZSIrZGGu6GsHxzZgxErna_x1arc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:f1:57:0c:2d:71:ac:9c:41:af:d7:e7:8c:10:fa:cd:10:82:
47:0f:f3:d3:b5:e8:37:dc:58:bb:6e:54:57:e9:db:55:f0:0e:
bc:56:16:76:78:cc:7d:51:91:eb:9d:78:77:cf:ed:73:16:70:
22:6f:f9:5e:56:e0:45:fb:41:ac:f0:53:e9:2e:9e:cc:7f:a2:
d0:7e:21:52:fe:44:20:1d:ab:de:35:70:b1:73:e1:45:80:93:
18:64:11:b0:f4:e8:91:51:b1:06:89:b0:37:da:06:7d:c8:32:
a4:49:24:cb:2b:83:26:e5:82:20:75:f7:5f:70:8c:88:28:48:
f8:0b:10:41:2f:5b:bf:75:7d:38:57:c6:0d:c3:dc:68:59:fc:
7a:77:26:c9:7f:dd:e4:a3:c7:7a:96:d9:e7:88:45:75:c4:c5:
b9:4a:c2:fe:24:d0:00:85:45:cf:d1:ea:9a:00:83:3a:95:a8:
0e:05:cd:35:4a:ad:ce:c7:39:ee:c4:f2:a3:e1:c8:30:7c:d5:
bc:7f:63:92:c2:7d:31:03:00:a8:9f:e5:b3:84:fa:76:1a:06:
48:e0:0c:ce:88:72:8a:a6:f6:14:aa:a4:b2:2f:12:51:23:a3:
5b:4c:06:f2:ad:67:02:0b:7e:18:f7:58:d6:c9:b1:2d:c0:6d:
dd:7a:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:16:43 2025 by rpki-client