
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
File: HGj1hzrouxa8v1T8nRyqr3FXFtM.roa (raw, json)
Hash identifier: nprRW6F45ZidPOgQzF55ndVlw6s9lcszqSeCGJldyS4=
Subject key identifier: 1C:68:F5:87:3A:E8:BB:16:BC:BF:54:FC:9D:1C:AA:AF:71:57:16:D3
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 039F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
Signing time: Fri 01 Aug 2025 01:54:53 +0000
ROA not before: Fri 01 Aug 2025 01:54:53 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 4721
IP address blocks: 218.219.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 1 01:54:53 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=1C68F5873AE8BB16BCBF54FC9D1CAAAF715716D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:9b:f9:29:a6:69:9a:02:3a:49:02:11:46:
49:1e:77:1d:3a:11:5a:e1:86:37:4d:4a:e7:e8:3f:
a9:c2:2f:29:f4:a6:00:5d:76:be:59:6c:e7:ab:c6:
3d:1c:59:22:f9:c5:49:4b:8b:db:d5:b6:7d:09:9b:
b4:6d:aa:01:44:59:9b:34:fc:1f:f6:a8:8f:7a:43:
63:e1:50:e8:45:f7:07:f8:0d:40:3a:d8:c5:48:69:
37:0d:d9:8b:0d:cb:0a:f1:3c:cb:a3:d5:d1:df:34:
db:1b:47:91:9d:76:3a:95:4c:02:64:d9:ad:d1:c5:
83:a8:c6:65:d0:08:46:df:f2:a4:51:cb:74:47:77:
68:ca:ad:7d:cc:d3:48:3b:7e:4b:dc:00:40:0f:2b:
4b:18:3b:f6:c3:9f:b2:a7:ca:70:fc:29:2a:fa:96:
b7:48:2d:7f:84:c3:cd:ea:88:b6:d1:21:1a:0d:06:
0e:bb:de:a0:c0:61:48:bb:b8:d8:02:0e:06:45:8e:
c7:1d:4b:b7:0f:59:55:79:cb:3a:ca:e9:3b:dc:3f:
c5:35:a6:e3:0a:d3:b9:10:aa:1a:39:4f:41:f4:39:
9f:89:a7:f1:b1:9e:02:0c:12:ac:5e:32:1d:e1:c8:
1e:60:34:37:63:f8:63:01:f5:3b:61:8c:df:5f:d9:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:68:F5:87:3A:E8:BB:16:BC:BF:54:FC:9D:1C:AA:AF:71:57:16:D3
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.219.80.0/20
Signature Algorithm: sha256WithRSAEncryption
da:4e:28:39:85:fd:5e:50:e8:f8:4f:cd:a5:25:c5:b5:e6:57:
28:1f:1c:0b:bf:f1:93:aa:f3:ed:5a:92:19:7d:5f:b4:a5:d1:
de:f6:26:ec:2b:6c:4d:b1:c0:97:57:10:b8:ce:c5:7d:14:17:
7f:69:88:10:5c:a7:e4:87:b8:9f:14:f8:7b:23:66:1c:c3:7f:
cc:49:73:d9:1e:31:f5:06:ba:13:e4:1f:ee:3b:f7:84:1e:85:
8a:17:02:05:2d:6e:f3:ad:96:2b:e9:32:c6:98:43:7c:1c:91:
d7:c0:5a:46:ce:a2:97:73:29:9a:ae:5b:90:b4:6e:44:de:3c:
64:41:ff:e4:e0:99:d9:cc:00:85:4b:cb:fe:d5:35:fd:3c:db:
50:c1:d9:e2:e1:c8:af:36:87:de:73:b6:d5:9d:26:4a:e1:1d:
8a:36:95:47:80:db:16:a3:b3:e0:31:cb:85:5e:22:8c:f1:1f:
61:fb:99:73:67:32:69:e5:f0:2e:d6:5b:44:3c:57:6d:12:ed:
cc:34:63:e1:44:0d:ab:38:fc:80:08:04:66:a7:0f:d7:0a:b5:
27:49:e3:70:e3:8d:36:d1:7b:7f:9e:04:fc:37:b5:bf:be:c5:
e6:5e:65:93:92:60:c3:db:13:14:08:f9:a6:4c:51:97:9a:5c:
1e:1a:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:53:47 2025 by rpki-client