
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
File: I6b37zElZFLNEdFXHNXID5KMBMU.roa (raw, json)
Hash identifier: a0Z/+WSGVD1EuHWt63tfsSO2gJbn2gnBVOO0bxZ07kk=
Subject key identifier: 23:A6:F7:EF:31:25:64:52:CD:11:D1:57:1C:D5:C8:0F:92:8C:04:C5
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 02FA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
Signing time: Tue 10 Jun 2025 10:48:06 +0000
ROA not before: Tue 10 Jun 2025 10:48:06 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 4721
IP address blocks: 203.114.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Jun 10 10:48:06 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=23A6F7EF31256452CD11D1571CD5C80F928C04C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:ba:c9:ac:5a:f7:e6:62:c1:1c:8a:7f:5c:
19:e2:7a:54:2c:49:25:e8:1d:fb:47:8a:39:45:1f:
97:35:63:f8:b5:42:84:e3:e4:11:65:e6:33:88:1f:
c8:33:10:cb:1c:43:7b:7b:72:52:c0:5f:51:c8:aa:
f2:77:03:09:1f:16:68:3f:ab:78:68:49:95:64:db:
2b:71:97:29:65:d6:b7:20:c6:96:4b:92:7e:72:3d:
87:83:c0:cb:49:6d:58:71:55:63:ef:c4:12:55:81:
1c:14:07:ff:7b:c2:f8:fa:af:83:a4:43:66:23:e4:
d6:ed:6b:ec:00:e4:3f:9d:16:6e:0b:86:ab:2e:22:
cb:3e:81:91:6d:1b:e6:20:e1:fe:32:37:7c:1a:1d:
f1:84:ff:2d:bb:24:e7:ed:ad:b4:23:dd:b2:4e:fe:
00:a1:76:7e:d3:dd:59:38:3d:15:9c:2b:1f:6d:a4:
94:74:42:c0:bd:0a:ae:45:46:67:80:54:b3:3c:e7:
a2:81:6d:6d:a3:52:88:88:a8:1a:68:2b:eb:ac:99:
e1:61:27:94:8c:92:89:57:a0:38:fd:5f:f8:29:37:
63:55:84:d6:df:10:2d:32:f8:b7:cf:db:f1:ee:7f:
f6:02:f2:1a:fd:26:ba:16:63:5e:90:7d:50:6f:99:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:F7:EF:31:25:64:52:CD:11:D1:57:1C:D5:C8:0F:92:8C:04:C5
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.114.248.0/23
Signature Algorithm: sha256WithRSAEncryption
ea:b8:67:32:6a:4e:10:23:20:bb:69:1f:88:48:d9:1c:fb:1f:
16:15:85:06:a3:10:eb:61:ad:5f:00:a5:14:9e:1c:e7:20:e7:
58:51:20:33:7b:e3:9c:18:0c:e4:12:5f:db:70:ab:4d:c6:1b:
d8:23:bf:c2:25:44:27:75:90:6f:4c:be:75:df:46:76:35:ca:
52:79:1b:09:ab:3b:ed:82:86:24:a7:7c:f2:0c:ab:1f:28:2e:
9e:c3:05:d6:f8:83:8d:4b:c7:29:ab:af:d6:47:5c:02:fe:6e:
82:4c:e7:83:e6:3f:3a:1f:9f:f7:33:ed:cf:48:67:68:17:4e:
e9:7e:20:47:f8:a6:1d:81:69:70:d3:e3:ea:66:ac:f0:ad:4f:
97:b9:8b:e8:64:83:c9:7a:cd:5c:14:6f:e8:3a:dc:fc:a5:61:
66:6b:96:16:1b:10:10:5d:fa:c8:49:cf:d8:60:8e:20:e4:14:
43:3f:65:f9:be:8e:8d:ab:24:86:2a:24:35:7b:e5:3b:2a:94:
36:28:b4:92:7e:81:24:be:4c:99:0e:a1:6a:2b:8f:1d:db:cd:
2a:e7:77:4e:6a:bc:b8:12:f9:3c:13:00:51:c4:15:5d:bf:bc:
4c:89:67:b0:43:03:53:e6:d4:03:c1:8f:27:ce:18:e0:55:70:
52:84:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:16:08 2025 by rpki-client