
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
File: JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa (raw, json)
Hash identifier: NRxJAUVPp6wEdJD4Q1FpLQqEd6Yi0IDleyFRkOJXHZk=
Subject key identifier: 24:2B:CF:6C:3B:4F:40:FA:38:07:3B:FB:A8:63:44:8B:0C:01:1A:E5
Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial: 2F
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
Signing time: Tue 01 Jul 2025 01:31:38 +0000
ROA not before: Tue 01 Jul 2025 01:31:38 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 23791
IP address blocks: 118.102.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Validity
Not Before: Jul 1 01:31:38 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=242BCF6C3B4F40FA38073BFBA863448B0C011AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:d5:0c:76:20:99:6e:2e:1d:73:e7:2b:85:
80:d3:50:92:4d:30:78:f6:6c:fb:b2:15:25:05:fe:
e0:34:fb:30:18:bf:e7:71:4f:34:08:88:cb:c1:d0:
1b:df:ad:ef:51:98:2b:da:74:32:fa:71:08:2a:2f:
1d:39:90:e0:6d:4c:d8:32:97:94:86:6c:0a:6a:a8:
84:00:0e:60:c8:97:cb:86:68:60:93:35:96:09:8e:
1b:f9:00:cd:85:27:28:a9:d3:c1:e9:62:ed:cb:dd:
e6:11:7d:35:e3:3a:00:72:92:1f:49:0f:eb:f0:7c:
74:af:88:c8:ac:06:ca:8d:12:b1:cc:b6:ec:3b:dc:
8e:ab:71:95:77:3c:7f:99:fd:3d:f7:91:fd:4d:4e:
09:0c:36:e3:a4:be:3a:2c:97:5a:97:46:35:99:db:
79:38:a8:ab:38:06:44:cd:48:2e:d7:96:2d:8e:9e:
ab:af:26:c3:1d:b9:3f:e9:d5:05:d9:19:d1:26:d7:
3d:b7:6d:1d:7d:88:4a:91:13:4a:1b:fe:f0:a7:3d:
b8:2f:b3:d5:4b:d4:51:2f:f8:c0:a0:54:cc:71:f4:
b0:eb:ba:44:66:c1:15:86:94:87:9f:0b:45:f1:93:
cd:78:ac:95:db:ee:b7:ce:1b:67:55:be:36:07:91:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:CF:6C:3B:4F:40:FA:38:07:3B:FB:A8:63:44:8B:0C:01:1A:E5
X509v3 Authority Key Identifier:
keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:71:ca:73:07:79:fc:68:42:e4:01:7f:12:30:65:9a:f7:64:
78:12:4d:5a:b3:c2:c8:51:82:b6:25:f3:e9:f3:6d:7f:89:c8:
8e:bd:71:52:5d:f7:53:ee:e4:63:d8:56:4b:8e:bb:ce:52:2c:
78:ae:cb:e5:a2:91:9e:c1:99:ad:bf:a6:b9:c7:2c:29:59:96:
21:27:32:c8:6f:a1:d9:4e:10:1e:9a:3c:a3:7b:03:e4:83:8c:
02:6c:1e:97:3d:06:27:91:a2:c8:ee:c2:94:04:6f:d8:14:2e:
39:48:1d:9d:a2:6e:cd:64:92:c2:0c:1c:5b:af:42:46:84:ee:
e8:de:16:6b:89:a7:96:30:87:8b:9f:f2:7b:ac:f9:26:35:c8:
8f:23:3f:25:ec:da:72:70:1e:cf:96:fc:e4:14:63:e1:a0:2c:
a6:b5:c7:d3:12:c8:d1:48:b9:20:f1:09:e4:46:5c:47:6a:63:
9a:20:f9:76:13:53:95:a0:30:e5:55:a3:bf:a1:e9:4a:a8:4e:
c6:e6:84:f3:a2:07:ff:f8:2b:bd:8b:f4:dd:67:51:1b:d6:ec:
9d:48:fc:70:70:aa:58:15:5c:82:3f:f0:ef:f2:09:bc:2b:7a:
0e:28:55:a3:77:a8:78:4a:3c:73:24:ca:6c:02:e4:39:ba:eb:
97:8d:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:00 2025 by rpki-client