
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
File: Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa (raw, json)
Hash identifier: 8Ufra1iA3RaQMlX3++D0Nzd4UOCLOlxNrFLDF7bmvjw=
Subject key identifier: 43:CF:17:84:67:09:EB:75:C3:95:5A:16:F4:56:DE:5D:88:7A:47:31
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0380
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
Signing time: Fri 01 Aug 2025 01:47:22 +0000
ROA not before: Fri 01 Aug 2025 01:47:22 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 9824
IP address blocks: 115.42.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 1 01:47:22 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=43CF17846709EB75C3955A16F456DE5D887A4731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:d2:91:72:64:47:eb:15:31:fd:c4:34:f2:
39:b6:2e:68:31:06:43:70:ae:aa:29:87:91:32:83:
15:34:88:51:8c:b1:b5:f4:82:20:2b:dd:6a:24:46:
ed:b0:91:6a:ae:3c:69:40:17:2b:98:2f:21:7c:4f:
97:83:7a:e4:ba:33:8b:ad:c9:40:c4:93:88:d6:58:
b7:05:11:66:fa:d8:39:c4:b3:97:07:72:0f:15:55:
29:b0:dc:98:ae:45:78:62:59:7d:08:10:e5:59:c0:
00:da:a4:ac:94:ed:a4:8a:d9:73:2d:f7:f8:b0:4b:
74:03:88:ff:8b:dc:c4:03:e6:e5:4d:6b:e0:41:41:
bc:8b:b7:62:eb:a6:b3:8e:7a:82:56:42:ed:41:fb:
19:13:b0:49:e0:2f:0e:b6:2d:58:15:6c:43:76:4e:
fd:18:79:ea:e0:9c:a4:df:ef:61:1e:f0:d0:f6:e8:
7c:68:cc:de:00:57:14:5e:34:40:59:bf:18:d7:8b:
56:9f:79:ab:b4:76:54:e4:91:5f:b3:41:22:15:ee:
69:fe:fa:b6:1c:64:3f:5e:03:6e:38:ae:c5:1a:b5:
f3:2f:4b:dc:23:d4:6b:47:f2:48:a9:5b:28:1d:5a:
b1:34:a6:69:0d:ca:51:44:1f:07:d0:69:4c:c8:54:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:17:84:67:09:EB:75:C3:95:5A:16:F4:56:DE:5D:88:7A:47:31
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.96.0/20
Signature Algorithm: sha256WithRSAEncryption
23:ed:bd:1d:41:2a:57:75:36:3b:09:b5:af:51:bc:50:4c:6f:
28:17:d5:46:fe:b9:db:4e:ae:2e:df:3a:54:68:f7:0b:86:55:
b4:b8:34:bd:98:41:68:f9:72:57:6b:9e:98:b4:e7:09:ee:dd:
9c:71:88:4b:8e:2c:4d:c2:8b:87:68:25:98:33:df:46:36:58:
ae:ac:ad:4c:5e:5b:42:60:dd:67:e0:97:5d:df:02:bf:bf:d7:
3d:a9:0c:70:fb:48:30:a0:ff:b8:c5:b6:82:85:74:26:db:09:
20:da:6c:0d:93:89:68:8e:c1:8d:f0:d6:8a:48:4c:b0:46:56:
ad:41:d9:68:cf:9e:c5:ce:c9:93:9a:1c:a8:fb:3c:bb:8b:4c:
89:28:ec:62:55:ab:06:37:0c:2a:7d:3f:1e:32:83:57:aa:21:
dc:f5:93:20:da:0b:7d:5c:d0:e7:3d:3b:c7:a6:4a:f3:c5:65:
01:87:bb:3c:32:a7:14:6b:82:44:ae:12:47:c8:0e:6b:89:75:
dd:b2:cf:3e:87:fc:02:bf:bf:f1:1d:29:15:32:48:61:fd:51:
6a:1b:99:ff:d8:80:62:81:15:eb:4e:97:72:33:10:31:e2:5a:
5c:cb:88:b2:25:89:36:60:13:90:4b:1b:f4:0f:4b:ad:95:19:
f7:fb:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:21:05 2025 by rpki-client