
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
File: Z3opzT7mND4VOk1ejMNtVw0CRYU.roa (raw, json)
Hash identifier: acIVRX74gIJNqV+4bWVJOvTfamNUrvZuPrExSBBKcp8=
Subject key identifier: 67:7A:29:CD:3E:E6:34:3E:15:3A:4D:5E:8C:C3:6D:57:0D:02:45:85
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 02FB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
Signing time: Tue 10 Jun 2025 10:48:07 +0000
ROA not before: Tue 10 Jun 2025 10:48:07 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9824
IP address blocks: 203.114.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Jun 10 10:48:07 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=677A29CD3EE6343E153A4D5E8CC36D570D024585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:5c:60:6f:e2:e6:8f:40:ca:75:34:73:54:
75:86:49:2c:9b:6f:1a:20:52:3c:d0:62:0c:6f:ce:
18:cd:bb:72:1c:be:84:3b:7e:2f:48:65:63:8a:b8:
e6:63:d1:62:61:9e:16:32:6d:21:0a:07:72:67:28:
cd:33:3a:5f:68:5f:b9:ec:ce:5f:32:3f:19:bc:ee:
af:aa:b7:a0:bc:26:c6:f2:9b:85:0e:c9:31:b7:f1:
32:fa:08:8b:81:da:86:c2:0a:39:dd:ae:4c:ab:53:
fd:aa:33:57:de:88:d9:e4:8f:85:59:ce:8a:31:22:
71:4e:71:88:a5:da:05:e1:3f:7b:14:99:c7:2c:3f:
ac:78:5c:bf:37:11:da:63:68:d6:7e:0e:6b:64:2e:
50:59:2e:c8:23:39:2c:24:cc:09:54:c9:5b:9e:61:
22:0c:0e:5f:0b:d4:74:8b:c3:5d:79:00:be:da:ba:
fc:ce:6a:1d:69:59:60:b5:1a:97:2e:ff:d0:9c:1a:
16:52:4d:4a:90:a1:cb:0e:29:f7:f5:7e:94:20:7d:
d9:fb:5e:8c:38:d2:bf:8d:da:e7:6c:e8:6e:34:22:
f8:00:ee:5b:35:01:1a:1d:d3:67:bd:57:cc:c5:71:
e1:ff:7d:e0:4a:10:01:0e:c8:3f:87:15:c8:15:32:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:29:CD:3E:E6:34:3E:15:3A:4D:5E:8C:C3:6D:57:0D:02:45:85
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.114.248.0/23
Signature Algorithm: sha256WithRSAEncryption
80:d2:e1:41:77:c9:57:53:15:97:b4:87:67:69:30:2d:87:fa:
5b:6e:06:9c:84:2f:b5:26:76:36:59:6f:8b:72:29:b4:93:d7:
5f:a7:86:7b:f2:1b:b5:2d:e4:7d:67:6c:aa:ed:5c:b1:ee:0c:
13:5e:a7:a9:2b:c3:32:71:06:d0:7b:63:13:72:83:b5:18:07:
4e:d4:55:9b:a9:8f:42:78:85:df:bb:ff:36:89:9f:ee:ab:37:
9c:c3:17:ca:da:75:56:aa:83:29:17:a5:58:bd:02:a8:7a:d7:
5d:fc:db:70:60:5b:cb:0c:e1:e2:b0:6a:e2:eb:72:d1:c8:a1:
ca:fc:97:89:5b:3b:dc:45:42:c5:1c:6b:d1:28:0b:0c:6f:f4:
d1:3a:75:a7:06:53:4c:31:6c:97:c3:fd:9d:9f:8b:a4:78:38:
ce:26:c9:c7:43:c4:b4:96:1c:2b:30:ac:4a:57:20:48:46:71:
de:d6:ed:f2:e3:87:61:41:6f:c0:0d:f2:ce:ea:b0:fc:8e:75:
e9:d5:9e:49:f9:a6:40:3e:4d:e1:5e:70:fa:d5:58:29:44:0b:
e4:b2:96:c8:4d:7c:89:fa:0e:6a:c1:40:3d:72:9b:65:b6:d6:
83:cd:cd:39:9b:ec:54:4f:4a:79:ec:07:62:e3:1d:b0:f5:0f:
2b:d3:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:25:51 2025 by rpki-client