
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
File: r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa (raw, json)
Hash identifier: g3vK5sA65v+7PdOd+BP2GUpSj+7FPNKIBilvXl2ubRQ=
Subject key identifier: AF:64:03:18:96:7A:5A:47:70:BF:CF:52:9C:54:70:BC:AE:92:F7:D4
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 71
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
Signing time: Fri 01 Aug 2025 01:31:10 +0000
ROA not before: Fri 01 Aug 2025 01:31:10 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 9374
IP address blocks: 117.18.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Aug 1 01:31:10 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=AF640318967A5A4770BFCF529C5470BCAE92F7D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:11:e8:25:dc:14:14:75:03:93:3b:8a:da:
89:c4:d3:30:a8:6f:f3:9a:e4:7d:e2:8a:be:84:d1:
8f:1b:22:60:4a:84:eb:23:c2:04:b6:a6:99:bc:f9:
ee:14:35:a7:7e:fe:15:48:40:d6:da:e4:8d:8c:bc:
22:74:11:3e:06:da:93:e3:52:31:93:49:53:38:d9:
09:72:80:08:60:1e:af:d8:b1:83:ce:a8:f2:25:65:
d1:f4:8c:41:8f:66:bc:07:61:28:b8:2d:65:99:a5:
96:fc:8a:56:af:34:ac:9a:86:7a:5a:c5:6c:2d:54:
5b:10:5a:ae:bd:5f:0b:18:60:6b:74:e3:06:46:0a:
6c:3b:cb:22:c5:d0:95:c1:b7:c3:5f:6c:24:8e:f7:
89:5f:3c:23:b3:0f:1a:8b:7c:7b:41:1d:b7:c0:2d:
6b:4b:c9:08:b7:19:65:83:7b:8b:cd:e6:be:56:25:
ca:32:08:c5:9c:d8:9d:d8:b5:7e:d9:bb:8b:77:ab:
cd:6c:a2:a9:0a:ee:3d:ee:ff:61:68:04:ab:3b:36:
7b:7d:52:52:c6:86:d8:7b:2d:4b:80:b0:63:62:d2:
ca:27:17:87:e5:20:e1:20:97:e5:5f:2a:ba:d2:e6:
25:39:22:99:25:f2:20:ca:3f:e4:be:5d:f2:b5:98:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:03:18:96:7A:5A:47:70:BF:CF:52:9C:54:70:BC:AE:92:F7:D4
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/r2QDGJZ6Wkdwv89SnFRwvK6S99Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.88.0/21
Signature Algorithm: sha256WithRSAEncryption
59:99:c9:fb:fd:02:7c:09:b2:0b:15:32:8d:15:00:6e:0b:f6:
1c:99:01:1a:b1:9a:c8:a2:58:a8:2e:7a:24:78:9a:c0:d3:e4:
f8:f0:16:06:6b:65:e7:7c:70:dc:07:44:f9:56:af:59:67:57:
d8:78:3b:6d:03:33:38:73:07:6e:ca:dd:ba:69:bf:58:81:ce:
2c:88:d2:07:db:df:5e:94:e1:3e:66:ba:17:4b:a7:bf:12:74:
cf:53:84:6b:ae:19:2d:e5:d4:f4:98:22:ac:6c:36:c1:60:5a:
27:0d:0b:f1:64:19:4e:a5:8b:94:ef:96:56:91:8c:cc:61:4e:
19:23:55:02:bd:64:b3:a3:02:01:b6:b3:3c:d0:79:71:bc:f3:
19:33:92:b1:bb:64:0b:0d:2e:37:5d:74:49:09:28:01:57:57:
bf:d2:26:c0:e4:4e:07:7d:e1:90:a1:67:fe:eb:74:c7:8e:6a:
10:71:35:36:e0:6a:61:4b:be:be:a6:6b:85:c1:b3:82:ed:e6:
32:9e:7c:8a:2f:2e:6f:59:af:fe:84:c5:c3:2e:63:0e:65:c5:
17:95:7d:ae:2a:1a:74:ad:f0:da:5f:80:3b:f8:d4:32:99:ed:
06:57:d2:07:59:e0:b6:c9:c5:65:cb:80:9d:1b:d5:93:f4:a4:
f5:b8:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:45 2025 by rpki-client