
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
File: crRXLvXWyw3_KFUPOMrMiqrEWVo.roa (raw, json)
Hash identifier: mVAgusId6vg9DatWndxLxnp3MFPLorNYd6hE2yDaZZc=
Subject key identifier: 72:B4:57:2E:F5:D6:CB:0D:FF:28:55:0F:38:CA:CC:8A:AA:C4:59:5A
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: 86
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
Signing time: Fri 01 Aug 2025 01:29:29 +0000
ROA not before: Fri 01 Aug 2025 01:29:29 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 18144
IP address blocks: 222.231.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Aug 1 01:29:29 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=72B4572EF5D6CB0DFF28550F38CACC8AAAC4595A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:6f:b4:d7:04:da:95:33:ad:1a:2a:c7:ab:
76:8b:d8:9f:97:03:f0:b4:bb:a5:d1:cf:da:a4:0f:
84:26:96:97:cd:d3:96:b7:1c:df:2d:52:ed:e5:ac:
e2:54:a5:31:36:cc:89:66:08:b0:46:77:ec:04:bb:
ad:91:56:05:b9:6c:75:92:0a:9c:70:a7:1e:ef:ec:
cd:bd:14:3d:40:cc:90:1a:d3:05:89:5c:4b:fc:a4:
d0:22:38:3c:a0:56:51:48:d3:e6:0e:23:c7:19:37:
8e:e7:d0:e8:c4:3f:25:2a:59:3f:1d:1b:b1:0b:3d:
51:3e:98:d4:e2:75:71:ed:6d:f7:30:21:ec:76:4c:
cf:82:cd:78:44:e4:64:bb:83:1f:eb:09:c2:41:e2:
3b:59:18:2c:ff:1b:ae:72:22:1a:d3:7a:b5:e9:b2:
76:64:92:86:a0:9b:d4:0a:98:63:c3:10:0e:90:6f:
3c:ed:65:e3:11:47:5d:56:8d:b9:52:d8:72:26:3e:
3d:24:09:97:63:a2:ee:a7:3b:2a:c7:ec:dd:65:f8:
8f:7e:06:40:6c:95:9c:17:6a:f0:62:49:e2:e0:26:
b4:16:81:30:5d:63:31:c4:50:5e:a7:6c:d9:99:2c:
5e:59:79:58:10:22:a8:24:7e:ab:16:fe:f4:16:6d:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:57:2E:F5:D6:CB:0D:FF:28:55:0F:38:CA:CC:8A:AA:C4:59:5A
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/crRXLvXWyw3_KFUPOMrMiqrEWVo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.231.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:11:6b:9f:93:06:d3:cc:bb:3e:57:07:8b:9b:22:df:b2:63:
16:3d:fb:87:0f:a5:2b:f8:7b:cb:89:c1:d8:1a:e0:f8:bf:18:
a4:43:95:ec:20:01:28:44:f2:d6:05:74:e4:af:37:dd:88:94:
b2:d1:ee:05:cf:bc:c7:d6:53:e5:3d:f1:f6:e6:74:98:c3:fe:
50:8b:9a:05:41:60:5d:b5:aa:98:4b:85:ae:5a:4d:76:bf:06:
24:7f:31:e8:68:0c:b1:c9:68:6a:b4:f7:1f:3c:38:bc:f2:56:
e8:0e:15:2a:48:28:5e:9e:f5:90:57:15:29:6e:c3:f3:ee:36:
c1:8b:5c:15:27:e1:de:06:18:8b:87:ef:59:21:9e:98:ca:b5:
a9:ec:43:76:c7:e7:48:50:dd:c5:14:17:86:3a:ae:af:ea:b8:
98:be:b6:8f:1a:5b:b0:46:46:78:66:6f:ee:5f:f5:d8:3d:5d:
10:0b:d6:1d:6a:71:d9:ea:88:82:3d:6f:1f:f0:83:dc:48:16:
2c:2c:73:22:62:27:10:49:c3:22:d4:ed:8c:0a:4a:68:78:d5:
dd:e5:5e:5c:54:a8:b1:0f:a3:27:24:af:56:2f:28:57:5e:d3:
fa:7c:69:c4:dd:c8:f9:1d:5c:7b:b0:33:65:25:3c:db:c1:5d:
d3:60:8b:01
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4
MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNTA4MDEw
MTI5MjlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDcyQjQ1NzJFRjVENkNC
MERGRjI4NTUwRjM4Q0FDQzhBQUFDNDU5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbEm+01wTalTOtGirHq3aL2J+XA/C0u6XRz9qkD4QmlpfN05a3
HN8tUu3lrOJUpTE2zIlmCLBGd+wEu62RVgW5bHWSCpxwpx7v7M29FD1AzJAa0wWJ
XEv8pNAiODygVlFI0+YOI8cZN47n0OjEPyUqWT8dG7ELPVE+mNTidXHtbfcwIex2
TM+CzXhE5GS7gx/rCcJB4jtZGCz/G65yIhrTerXpsnZkkoagm9QKmGPDEA6Qbzzt
ZeMRR11WjblS2HImPj0kCZdjou6nOyrH7N1l+I9+BkBslZwXavBiSeLgJrQWgTBd
YzHEUF6nbNmZLF5ZeVgQIqgkfqsW/vQWbTITAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUcrRXLvXWyw3/KFUPOMrMiqrEWVowHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL
H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS
cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNzgzL2NyUlhMdlhXeXczX0tGVVBPTXJNaXFyRVdWby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbe50AwDQYJKoZIhvcNAQELBQADggEBADsRa5+TBtPMuz5XB4ubIt+yYxY9
+4cPpSv4e8uJwdga4Pi/GKRDlewgAShE8tYFdOSvN92IlLLR7gXPvMfWU+U98fbm
dJjD/lCLmgVBYF21qphLha5aTXa/BiR/MehoDLHJaGq09x88OLzyVugOFSpIKF6e
9ZBXFSluw/PuNsGLXBUn4d4GGIuH71khnpjKtansQ3bH50hQ3cUUF4Y6rq/quJi+
to8aW7BGRnhmb+5f9dg9XRAL1h1qcdnqiII9bx/wg9xIFiwscyJiJxBJwyLU7YwK
Smh41d3lXlxUqLEPoyckr1YvKFde0/p8acTdyPkdXHuwM2UlPNvBXdNgiwE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:45 2025 by rpki-client