
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa
File: gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa (raw, json)
Hash identifier: /zLbULyoQNQxGQsxyJHUeJ/8au6NTELsUQqdqAr2c6U=
Subject key identifier: 81:36:04:0B:60:61:D4:B5:41:6D:DC:23:C2:72:47:56:77:59:90:24
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0396
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa
Signing time: Fri 01 Aug 2025 01:51:05 +0000
ROA not before: Fri 01 Aug 2025 01:51:05 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 9824
IP address blocks: 203.89.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 1 01:51:05 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=8136040B6061D4B5416DDC23C272475677599024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:36:54:94:f8:1f:28:ce:4a:eb:a7:e9:8f:
1e:8c:98:8d:75:5c:af:0e:99:07:a3:e4:08:fd:65:
3d:5a:f4:23:a7:78:6e:ea:f7:92:14:12:4f:9a:83:
8c:cc:a6:5c:6d:cb:f2:b2:66:aa:50:37:06:4d:fc:
ea:12:47:4a:4e:44:2d:c1:7c:ca:8f:69:75:ce:c0:
9d:3e:57:ec:eb:15:81:32:c6:b5:a0:a7:e1:5f:8f:
a8:bf:93:69:b9:9f:2c:2e:96:61:c5:9b:db:0e:37:
3c:6f:dc:94:14:f4:7f:8b:7b:37:98:fd:eb:b2:de:
b6:df:e8:f8:6a:2e:98:3b:28:66:ac:c1:9f:7e:50:
b4:68:75:69:91:2c:c3:c9:c6:2b:e2:ee:4d:7b:77:
04:53:c4:e5:78:fc:3b:2a:66:a8:28:86:af:39:4c:
3e:ac:50:ed:1d:a0:0e:e8:1a:6c:31:e3:cc:ad:30:
51:67:dd:03:bd:c1:47:52:6b:b3:14:aa:d5:f6:11:
a1:8a:e1:43:26:69:10:16:3a:d6:45:f1:9c:e0:63:
ab:ed:24:70:e3:8a:cb:4a:56:fe:bc:49:c6:49:0d:
13:44:c4:1a:17:c6:1c:5f:eb:f7:f5:1e:48:05:e2:
38:b6:94:42:01:a0:5e:cb:56:98:50:fa:89:76:6b:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:04:0B:60:61:D4:B5:41:6D:DC:23:C2:72:47:56:77:59:90:24
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.89.32.0/19
Signature Algorithm: sha256WithRSAEncryption
11:e7:e5:b3:65:70:4d:10:76:7f:7d:e3:15:4b:97:89:be:a1:
20:c2:34:24:63:4e:e4:85:23:df:53:99:fd:1e:34:4e:fb:35:
d7:5a:3f:c4:8d:c2:80:24:ad:0b:eb:3d:c5:13:63:aa:a7:ed:
96:5e:26:12:70:71:c1:d4:c6:b1:ef:bd:f2:c5:b2:ba:03:32:
1c:64:ac:47:75:63:e2:26:ce:a6:2b:2b:75:35:8c:5c:fa:1a:
60:68:c3:6c:27:4a:d3:33:49:77:7f:b7:13:20:0e:ba:95:a6:
35:81:bd:bc:ac:ac:a6:f8:19:f9:22:f9:1f:47:fc:8f:45:dd:
6d:68:4b:7d:d6:a5:ad:94:2a:13:bf:79:2e:61:02:18:99:fc:
a5:ca:e9:0c:fd:5b:44:df:26:8b:43:c3:d9:44:84:e9:8d:18:
18:32:21:8c:62:c1:d8:e8:95:3d:f5:9a:97:ef:9c:6a:b0:ff:
19:ee:54:e9:6f:b3:21:b5:da:76:75:23:31:5d:4a:f4:71:93:
45:31:8c:c2:cf:98:9e:d4:92:ce:8b:e3:d8:9b:3d:68:cb:3b:
2f:6b:83:73:91:a6:12:7e:10:29:bd:e7:e8:75:59:b4:85:02:
2b:b7:2d:94:d5:3c:b7:53:5c:2a:12:90:4f:57:d8:95:c1:2f:
43:39:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:21:41 2025 by rpki-client