
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa
File: hUbv0XF1KpVHjTvh1OYepNL3gHM.roa (raw, json)
Hash identifier: 2sk3ShTiFeV9HOXdMa/sX6CdRVD33AaGFwCess1tllM=
Subject key identifier: 85:46:EF:D1:71:75:2A:95:47:8D:3B:E1:D4:E6:1E:A4:D2:F7:80:73
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0346
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa
Signing time: Fri 01 Aug 2025 01:40:05 +0000
ROA not before: Fri 01 Aug 2025 01:40:05 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 9824
IP address blocks: 27.126.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 1 01:40:05 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=8546EFD171752A95478D3BE1D4E61EA4D2F78073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:6d:6b:42:e8:d0:d3:3d:57:9b:d8:e6:f5:
d7:81:50:0b:8b:62:81:76:44:33:c3:47:5c:5b:e2:
e1:a8:75:8d:e3:80:29:1e:30:a8:73:5d:5c:e7:9e:
24:8c:26:c5:ad:c2:68:25:75:33:1d:0e:f3:80:88:
07:ad:fa:33:4a:7c:a9:13:af:2a:d4:41:c2:1f:e1:
79:db:b9:99:ff:a2:bd:ab:fc:84:f8:df:2a:60:ca:
6a:6b:9f:7e:78:28:de:45:64:cf:80:8c:87:7e:ae:
27:eb:9b:85:13:b1:18:85:cc:4a:c7:de:9e:de:4d:
b8:af:b1:d3:39:07:e4:54:78:2d:a3:93:2c:9a:27:
ba:90:18:b7:19:aa:77:ab:8a:29:67:55:1a:fc:29:
fa:6b:e2:4d:6c:be:9c:4a:6a:65:f5:9d:d8:89:2f:
d6:09:b2:35:c0:42:b6:a2:b4:49:84:40:3e:f4:21:
74:94:f9:46:2e:29:f7:5c:34:93:68:0d:e0:ec:41:
eb:c8:74:04:b0:e9:68:2b:76:42:21:14:6d:a6:c0:
27:36:91:09:a7:c5:11:27:6d:9f:46:ce:94:ff:e4:
d0:68:98:59:91:16:35:13:5c:bf:a7:41:5a:3c:f7:
16:22:72:be:cb:1e:c6:20:7e:d9:06:1d:96:04:7f:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:EF:D1:71:75:2A:95:47:8D:3B:E1:D4:E6:1E:A4:D2:F7:80:73
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.126.128.0/20
Signature Algorithm: sha256WithRSAEncryption
85:89:80:ea:eb:4e:16:64:b8:32:36:52:6f:62:b7:cd:b9:35:
6b:7e:07:de:c6:25:cc:94:0c:da:b6:26:0a:1d:b5:8b:0f:07:
23:c5:28:e1:bb:b8:a3:bd:60:0c:5b:5b:18:85:53:eb:61:13:
81:3e:ff:9b:28:65:a6:5b:58:ff:3f:29:70:ad:0e:fb:b5:0b:
3f:5e:e8:75:de:ef:e1:7f:40:3d:ad:2d:69:b9:e5:8c:22:67:
8c:2e:70:cc:91:d9:14:de:df:29:e8:f2:85:cd:95:6b:3d:ff:
c2:af:d6:f1:6f:fc:f3:fa:45:28:62:1f:13:96:f5:72:b8:36:
98:50:41:01:ff:95:c4:19:18:12:71:8e:25:ca:06:a1:c6:08:
0a:31:cd:0f:d8:c9:00:8e:84:96:fc:25:57:e2:36:b6:e3:08:
24:65:8d:a1:4a:99:b1:53:09:9b:a7:1f:a9:ca:8e:8e:2d:be:
6f:78:f0:7a:80:5a:23:ff:4d:ff:ce:39:01:8e:a4:06:65:e8:
c4:63:eb:25:1a:b3:da:1d:d9:fb:60:41:22:cf:05:57:a2:b3:
38:0f:d9:8e:ff:22:4c:9d:ec:e5:63:40:a7:2d:49:fb:d9:ff:
36:05:27:cf:e1:0d:30:ec:7e:fe:de:03:3d:c2:42:4f:bd:67:
c6:77:d7:51
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQwMDVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDg1NDZFRkQxNzE3NTJB
OTU0NzhEM0JFMUQ0RTYxRUE0RDJGNzgwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3km1rQujQ0z1Xm9jm9deBUAuLYoF2RDPDR1xb4uGodY3jgCke
MKhzXVznniSMJsWtwmgldTMdDvOAiAet+jNKfKkTryrUQcIf4XnbuZn/or2r/IT4
3ypgymprn354KN5FZM+AjId+rifrm4UTsRiFzErH3p7eTbivsdM5B+RUeC2jkyya
J7qQGLcZqneriilnVRr8Kfpr4k1svpxKamX1ndiJL9YJsjXAQraitEmEQD70IXSU
+UYuKfdcNJNoDeDsQevIdASw6WgrdkIhFG2mwCc2kQmnxREnbZ9GzpT/5NBomFmR
FjUTXL+nQVo89xYicr7LHsYgftkGHZYEf4pLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhUbv0XF1KpVHjTvh1OYepNL3gHMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2hVYnYwWEYxS3BWSGpUdmgxT1llcE5MM2dITS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQbfoAwDQYJKoZIhvcNAQELBQADggEBAIWJgOrrThZkuDI2Um9it825NWt+
B97GJcyUDNq2JgodtYsPByPFKOG7uKO9YAxbWxiFU+thE4E+/5soZaZbWP8/KXCt
Dvu1Cz9e6HXe7+F/QD2tLWm55YwiZ4wucMyR2RTe3yno8oXNlWs9/8Kv1vFv/PP6
RShiHxOW9XK4NphQQQH/lcQZGBJxjiXKBqHGCAoxzQ/YyQCOhJb8JVfiNrbjCCRl
jaFKmbFTCZunH6nKjo4tvm948HqAWiP/Tf/OOQGOpAZl6MRj6yUas9od2ftgQSLP
BVeiszgP2Y7/Ikyd7OVjQKctSfvZ/zYFJ8/hDTDsfv7eAz3CQk+9Z8Z311E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:07:51 2025 by rpki-client