
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
File: 88KZBtS7bsmWCDVnYBuBWyON4EU.roa (raw, json)
Hash identifier: jOwUVHLNtMC1m/imqxAGkQ//ypuNmv7Iv0KAVZt7MP0=
Subject key identifier: F3:C2:99:06:D4:BB:6E:C9:96:08:35:67:60:1B:81:5B:23:8D:E0:45
Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial: 43
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
Signing time: Fri 01 Aug 2025 01:30:34 +0000
ROA not before: Fri 01 Aug 2025 01:30:34 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 18274
IP address blocks: 202.173.96.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Validity
Not Before: Aug 1 01:30:34 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=F3C29906D4BB6EC996083567601B815B238DE045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:6f:4c:ae:e8:5e:b7:fd:fe:67:78:15:7f:
a3:d1:c5:3b:f2:d1:78:03:c5:43:3e:4d:f6:c5:5f:
8f:49:9b:1e:9f:27:ae:ac:3a:85:6d:12:8a:be:e4:
8b:8b:42:fa:85:b4:9b:90:72:d9:72:60:b7:28:a8:
11:6d:5e:ec:16:e3:4f:cb:00:aa:2f:c6:28:f1:2b:
7c:ea:75:f8:46:9d:a4:a4:60:44:9c:e5:eb:8a:3b:
87:cf:89:7f:63:b4:8e:81:9f:71:e4:4f:a7:85:e0:
dd:f6:de:c6:89:9d:ba:48:83:c0:8a:38:a4:35:a8:
5b:14:78:9c:51:d0:11:ae:f8:91:9b:0a:b5:09:e4:
5e:07:e2:1a:80:24:86:a5:8f:a7:9e:b3:0b:2f:29:
e5:8c:55:71:85:4b:f1:31:5c:2d:a4:fd:99:a1:1c:
d7:60:73:a5:d9:f9:7f:d3:68:25:25:ad:81:dc:50:
3c:71:84:69:42:a3:bb:19:eb:32:b4:d7:31:2a:8f:
75:25:18:b0:3d:80:1e:02:28:be:8a:d1:24:fd:db:
69:14:c4:f0:32:b4:09:78:de:6a:8d:18:44:80:bd:
76:40:64:37:27:4a:23:7f:a0:0b:0b:e7:ab:eb:8e:
94:61:50:94:49:74:64:da:af:a0:04:21:35:8f:82:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:99:06:D4:BB:6E:C9:96:08:35:67:60:1B:81:5B:23:8D:E0:45
X509v3 Authority Key Identifier:
keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.173.96.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:cb:1d:83:84:68:89:10:b8:a0:c0:ac:3a:f5:78:36:c5:02:
d4:47:06:8e:ac:7b:ce:50:29:b1:82:db:d9:96:6d:ef:d2:62:
f3:ca:25:9d:f7:a8:db:fa:9a:84:4d:b3:c1:64:7a:eb:5b:47:
1e:fb:de:e1:f9:24:7e:3d:59:13:6b:79:8a:69:d3:9c:4c:1c:
c3:0d:2c:a6:ff:1a:18:ee:f3:6c:a8:ce:fb:2f:99:84:13:f2:
5b:28:93:82:f2:83:66:33:3a:81:af:5e:84:bd:f9:cd:b0:99:
50:75:43:a9:fa:ad:5d:66:99:dc:ff:10:88:c8:43:17:7c:4c:
4a:50:13:1d:1c:33:55:eb:c3:82:3d:be:9e:5d:fb:4a:bb:f2:
a5:97:a1:ba:a8:99:17:c8:d3:55:0e:ef:2a:83:c3:61:83:89:
2d:be:df:9d:36:b8:9b:fc:52:7c:5d:c1:ed:18:fa:9c:e2:c9:
b1:bc:81:84:8c:93:73:83:dc:5d:aa:33:62:c5:b7:a0:21:58:
af:8a:f4:23:3d:fd:9b:ad:60:b2:72:9c:2a:66:fc:bf:6a:15:
b1:01:26:02:38:3b:e9:64:4a:e0:29:46:a7:86:86:b8:db:86:
01:ad:38:d4:31:9d:84:84:6c:4a:61:16:7d:19:37:87:0e:bd:
bc:a7:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:16:42 2025 by rpki-client