
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
File: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (raw, json)
Hash identifier: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=
Subject key identifier: 8C:FB:A7:27:0D:FE:11:7C:27:0F:81:D5:F1:7B:C2:56:C2:46:2C:3B
Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial: 03
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
Signing time: Wed 23 Apr 2025 00:30:42 +0000
ROA not before: Wed 23 Apr 2025 00:30:42 +0000
ROA not after: Tue 21 Apr 2026 06:15:57 +0000
asID: 18070
IP address blocks: 210.158.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Validity
Not Before: Apr 23 00:30:42 2025 GMT
Not After : Apr 21 06:15:57 2026 GMT
Subject: CN=8CFBA7270DFE117C270F81D5F17BC256C2462C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:23:c1:93:1e:e3:f8:47:df:10:3e:59:09:
32:89:68:13:db:a6:00:f4:45:0d:c3:70:a9:62:19:
2c:13:bd:8f:bc:71:e8:44:a0:0b:e2:fe:9d:5c:bc:
be:04:9e:ba:4c:8d:42:21:26:45:4b:a8:0d:9b:64:
0d:79:90:9b:a2:7a:53:35:a8:53:f0:f5:da:a5:7a:
3d:9e:a8:52:27:e1:7f:40:34:1d:3c:72:5b:67:4c:
99:a7:d0:3c:a5:12:12:97:6d:bb:44:fb:e9:ee:1d:
bf:df:d4:ad:ae:4c:d5:c9:5b:69:08:83:cc:6a:39:
6d:de:08:b1:3b:ea:ad:59:3c:33:43:6c:13:ce:05:
89:41:e9:67:e7:ba:ce:a0:d3:ea:5d:ad:ad:f7:9a:
cb:bc:55:87:51:52:aa:65:9f:17:ae:4c:93:49:bd:
db:75:57:6c:51:1a:f5:90:c6:85:87:ab:70:95:28:
36:6d:a0:7b:7b:8a:ac:f9:dd:9c:3c:b8:e0:d9:5d:
39:f0:d5:71:2d:b4:ad:b9:e5:e9:18:c2:fb:73:8f:
d4:7d:18:3f:ea:23:a5:a6:bf:35:1a:eb:d7:02:c0:
a6:eb:d2:95:9d:ae:a7:ef:4b:93:1a:02:0b:8e:62:
2a:b8:c8:43:09:66:80:16:8b:6a:52:a1:29:f5:d5:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:A7:27:0D:FE:11:7C:27:0F:81:D5:F1:7B:C2:56:C2:46:2C:3B
X509v3 Authority Key Identifier:
keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/jPunJw3-EXwnD4HV8XvCVsJGLDs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.158.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:6e:1e:58:5d:1a:be:10:1a:4e:22:b4:72:43:6c:82:d1:80:
a5:65:67:55:d9:36:8e:0e:06:29:27:23:56:b3:e5:4f:4a:62:
0d:5b:af:39:43:91:de:fe:5a:bc:3e:f0:87:1f:c7:b0:a0:41:
4e:d5:7e:ff:ce:4b:5e:d9:28:04:a2:0b:50:09:7d:2f:7c:f1:
8d:71:56:fe:58:5a:08:fa:ce:f1:09:88:b4:09:4b:ea:7c:f3:
4b:b2:2c:e8:aa:95:0f:bf:97:1c:2a:07:c2:89:e3:25:e9:75:
02:ac:ed:eb:56:c8:f0:5e:4c:16:e2:89:94:2c:48:66:2b:8f:
4d:0f:e4:c4:4b:8e:ee:c0:d7:2a:00:be:c4:6a:93:99:9e:29:
e8:f8:f3:34:33:d1:23:5c:ad:df:f3:14:9c:4f:bd:83:03:7a:
ba:5b:71:1f:ab:e5:08:0b:e8:05:b8:f7:54:af:18:5a:8e:26:
1c:38:38:18:c6:09:96:b2:a8:5e:db:86:7f:23:c9:ff:19:88:
ff:41:0c:25:9e:9a:25:3a:a5:78:ac:13:d0:6c:d5:21:2d:44:
95:61:75:3d:4f:c6:b7:8c:2b:a1:a1:43:7e:3b:04:1a:25:6f:
09:80:d7:2a:cb:1f:12:a6:6d:76:b1:d1:e6:53:ae:b8:13:34:
42:cf:22:eb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1
RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI1MDQyMzAw
MzA0MloXDTI2MDQyMTA2MTU1N1owMzExMC8GA1UEAxMoOENGQkE3MjcwREZFMTE3
QzI3MEY4MUQ1RjE3QkMyNTZDMjQ2MkMzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPL6I8GTHuP4R98QPlkJMoloE9umAPRFDcNwqWIZLBO9j7xx6ESg
C+L+nVy8vgSeukyNQiEmRUuoDZtkDXmQm6J6UzWoU/D12qV6PZ6oUifhf0A0HTxy
W2dMmafQPKUSEpdtu0T76e4dv9/Ura5M1clbaQiDzGo5bd4IsTvqrVk8M0NsE84F
iUHpZ+e6zqDT6l2trfeay7xVh1FSqmWfF65Mk0m923VXbFEa9ZDGhYercJUoNm2g
e3uKrPndnDy44NldOfDVcS20rbnl6RjC+3OP1H0YP+ojpaa/NRrr1wLApuvSlZ2u
p+9LkxoCC45iKrjIQwlmgBaLalKhKfXVvCkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSM+6cnDf4RfCcPgdXxe8JWwkYsOzAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN
1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV
UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzcvalB1bkp3My1FWHduRDRIVjhYdkNWc0pHTERzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKeoDANBgkqhkiG9w0BAQsFAAOCAQEADm4eWF0avhAaTiK0ckNsgtGApWVn
Vdk2jg4GKScjVrPlT0piDVuvOUOR3v5avD7whx/HsKBBTtV+/85LXtkoBKILUAl9
L3zxjXFW/lhaCPrO8QmItAlL6nzzS7Is6KqVD7+XHCoHwonjJel1Aqzt61bI8F5M
FuKJlCxIZiuPTQ/kxEuO7sDXKgC+xGqTmZ4p6PjzNDPRI1yt3/MUnE+9gwN6ultx
H6vlCAvoBbj3VK8YWo4mHDg4GMYJlrKoXtuGfyPJ/xmI/0EMJZ6aJTqleKwT0GzV
IS1ElWF1PU/Gt4wroaFDfjsEGiVvCYDXKssfEqZtdrHR5lOuuBM0Qs8i6w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:50:08 2025 by rpki-client