
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
File: GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa (raw, json)
Hash identifier: vv0rNyucCA/o0J0JXnvPS3K++WEDxkLh5pdw+XUvHUY=
Subject key identifier: 18:4D:26:79:04:49:2E:63:8E:FD:CE:5F:D7:73:2C:E8:77:57:35:D4
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 33
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
Signing time: Fri 01 Aug 2025 01:32:07 +0000
ROA not before: Fri 01 Aug 2025 01:32:07 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 18121
IP address blocks: 202.222.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Aug 1 01:32:07 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=184D267904492E638EFDCE5FD7732CE8775735D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:63:70:8f:59:99:85:7b:6a:14:5f:be:14:ae:
17:f7:29:ff:d3:79:31:3e:0b:89:94:ae:dd:e3:e9:
d5:b0:95:4b:22:40:01:91:f0:0a:fb:27:81:75:55:
eb:b9:f7:85:6f:07:27:4d:9a:e2:c4:6d:ee:83:1a:
88:c6:d0:63:5b:06:8a:49:fb:67:8b:94:64:09:0a:
83:b1:b3:25:b7:c9:27:3d:4e:c3:cf:94:6e:80:c9:
d6:27:6a:d0:c6:5c:da:ad:0a:cb:92:d8:d1:fc:1e:
c6:44:83:79:51:d4:ac:ab:74:48:6e:ff:e8:05:2b:
01:ae:c8:f3:91:9a:09:b5:f1:e4:9e:6b:c5:0c:1e:
77:da:d5:9c:9e:0b:69:dd:61:eb:1f:94:62:b4:11:
4b:98:3a:8d:db:c0:f5:97:db:10:1f:f3:ce:09:70:
7a:3c:31:0c:19:91:95:d6:c8:b9:d5:3e:7b:a6:ad:
76:07:91:71:b3:7f:70:80:7e:57:f1:e1:c0:65:5b:
f2:99:e3:94:a8:1f:ff:ed:4e:d3:bb:89:3b:20:11:
ed:a9:f4:0c:67:7c:15:69:7d:6a:76:e8:43:4f:f1:
df:6d:3b:bb:c2:41:dc:0c:db:8b:90:8f:8d:0d:db:
62:f9:a4:f9:b7:7d:96:e8:4b:d9:da:a3:ce:98:44:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:26:79:04:49:2E:63:8E:FD:CE:5F:D7:73:2C:E8:77:57:35:D4
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.222.32.0/19
Signature Algorithm: sha256WithRSAEncryption
69:56:da:8f:af:39:61:2b:68:6e:b0:b2:bc:d6:f7:51:61:f3:
00:2c:65:2c:09:79:c8:11:17:62:fa:f5:32:e1:00:91:b5:43:
d1:4c:b3:35:df:39:16:c5:ab:36:ec:b5:3e:08:e0:f9:86:e8:
d2:97:ac:52:21:f5:04:2d:b0:f4:c7:27:bf:21:a7:32:a9:c8:
f3:2f:ee:b0:bb:50:9f:89:8b:fd:0b:b8:e3:2d:65:6a:4a:b1:
56:9c:3b:bc:86:90:23:99:62:d3:83:5f:f4:16:85:25:ab:20:
10:3d:0a:a5:90:18:ef:9d:01:5c:20:a2:0a:1b:55:a2:bb:a5:
44:28:9b:a6:bc:f3:bd:89:8a:36:03:7d:84:81:17:26:cb:27:
c5:72:ae:e5:e0:08:b0:75:0c:eb:ba:c1:54:2c:73:85:8e:9c:
82:46:61:05:45:d7:7e:94:a2:99:b9:f0:b0:19:a3:4f:aa:82:
fb:db:1d:12:0e:d6:88:a3:74:c6:70:df:8d:3b:16:8c:9b:1d:
48:c5:45:a1:a1:b5:3e:52:61:c0:8c:35:62:8a:b8:4f:15:90:
48:7a:78:87:b4:14:28:b0:8d:7b:75:b2:96:4f:a3:2c:79:d2:
bf:8f:ef:d2:f8:50:6f:39:48:1d:4b:e5:dd:65:e9:2b:89:5a:
30:41:4c:16
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI1MDgwMTAx
MzIwN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTg0RDI2NzkwNDQ5MkU2
MzhFRkRDRTVGRDc3MzJDRTg3NzU3MzVENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPpjcI9ZmYV7ahRfvhSuF/cp/9N5MT4LiZSu3ePp1bCVSyJAAZHw
CvsngXVV67n3hW8HJ02a4sRt7oMaiMbQY1sGikn7Z4uUZAkKg7GzJbfJJz1Ow8+U
boDJ1idq0MZc2q0Ky5LY0fwexkSDeVHUrKt0SG7/6AUrAa7I85GaCbXx5J5rxQwe
d9rVnJ4Lad1h6x+UYrQRS5g6jdvA9ZfbEB/zzglwejwxDBmRldbIudU+e6atdgeR
cbN/cIB+V/HhwGVb8pnjlKgf/+1O07uJOyAR7an0DGd8FWl9anboQ0/x3207u8JB
3Azbi5CPjQ3bYvmk+bd9luhL2dqjzphEnVECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQYTSZ5BEkuY479zl/Xcyzod1c11DAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MTMvR0UwbWVRUkpMbU9PX2M1ZjEzTXM2SGRYTmRRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcreIDANBgkqhkiG9w0BAQsFAAOCAQEAaVbaj685YStobrCyvNb3UWHzACxl
LAl5yBEXYvr1MuEAkbVD0UyzNd85FsWrNuy1Pgjg+Ybo0pesUiH1BC2w9McnvyGn
MqnI8y/usLtQn4mL/Qu44y1lakqxVpw7vIaQI5li04Nf9BaFJasgED0KpZAY750B
XCCiChtVorulRCibprzzvYmKNgN9hIEXJssnxXKu5eAIsHUM67rBVCxzhY6cgkZh
BUXXfpSimbnwsBmjT6qC+9sdEg7WiKN0xnDfjTsWjJsdSMVFoaG1PlJhwIw1Yoq4
TxWQSHp4h7QUKLCNe3Wylk+jLHnSv4/v0vhQbzlIHUvl3WXpK4laMEFMFg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:30:32 2025 by rpki-client