
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
File: 2d9lDEzuFI18CrQX7hoTuewn__4.roa (raw, json)
Hash identifier: Cnz9oe/9Qfn+ZYagfz3mTFD9lPQnta4lx00L+sBQogk=
Subject key identifier: D9:DF:65:0C:4C:EE:14:8D:7C:0A:B4:17:EE:1A:13:B9:EC:27:FF:FE
Certificate issuer: /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial: 17
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
Signing time: Sat 29 Mar 2025 05:36:54 +0000
ROA not before: Sat 29 Mar 2025 05:36:54 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 23775
IP address blocks: 210.255.240.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Validity
Not Before: Mar 29 05:36:54 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=D9DF650C4CEE148D7C0AB417EE1A13B9EC27FFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:b5:9a:a8:2a:f7:01:fc:46:a0:63:c2:ce:
27:1a:b5:e5:b4:d7:82:e8:0f:bc:46:58:4a:2c:35:
30:35:43:68:3b:35:ba:0d:70:32:63:38:87:d0:96:
09:3c:a0:bb:de:f8:12:f6:03:a7:59:38:d1:5f:a5:
85:5d:e3:d8:29:1d:6a:a8:97:10:60:f1:d6:73:dc:
1e:29:c2:f1:62:1a:f1:ae:37:83:37:a0:86:56:e0:
e8:22:56:89:2f:ab:c5:65:37:b3:8c:ee:40:a5:55:
f7:7d:25:bb:dc:99:92:ce:10:b5:40:59:d1:4e:c1:
1b:0c:9f:bc:3f:79:5c:23:02:07:35:c8:64:6a:41:
cb:c8:f4:fb:71:7c:aa:b2:ab:8a:8c:9a:ed:06:68:
4f:e6:03:a7:5f:ad:c4:8b:43:99:9c:da:27:47:79:
0e:48:13:50:13:60:19:68:21:cc:8b:80:c4:f6:29:
21:47:c7:61:e9:18:3d:cd:0f:46:48:34:8e:3d:10:
72:f3:b6:39:32:78:e7:33:3d:de:95:f8:09:01:ad:
0b:11:ef:9b:b8:9b:5e:b2:cf:18:5c:be:df:89:57:
8f:5b:e3:f8:92:ed:4e:b4:73:8f:af:47:fe:6a:ee:
59:3f:63:35:a2:e6:10:76:61:10:86:d7:a1:17:d3:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:65:0C:4C:EE:14:8D:7C:0A:B4:17:EE:1A:13:B9:EC:27:FF:FE
X509v3 Authority Key Identifier:
keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/2d9lDEzuFI18CrQX7hoTuewn__4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.255.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:2e:a6:fd:fd:35:3a:b5:c3:1d:7b:a8:83:70:01:e2:b2:97:
3d:f7:4e:88:54:1f:29:a3:ba:e6:f1:77:05:62:b0:7e:88:8a:
13:5c:68:4b:ff:c5:05:91:4f:9e:8d:41:32:6c:7d:80:ae:ba:
56:98:4a:d8:b1:c0:f7:91:be:62:1a:27:ac:c7:0e:4b:40:20:
7a:6c:7f:d1:41:8e:2d:32:6d:38:d5:f7:59:f9:6a:e7:60:9c:
86:2f:0a:a3:96:be:cb:b6:b2:fc:63:1c:14:d3:84:f7:fd:1d:
13:d8:14:74:0c:27:21:b7:9b:84:2b:ef:6f:ce:05:5b:d6:eb:
33:ea:af:6f:5a:c5:eb:3f:04:b3:f3:72:26:71:81:8c:5d:4d:
78:af:01:6a:c1:7b:ce:75:79:57:c3:d8:31:31:7a:95:d9:e3:
72:44:2e:5e:39:69:cc:91:09:e0:ae:49:b8:2b:bf:1b:3b:f7:
1f:95:f1:43:7e:f7:3c:2a:d1:ae:90:79:fe:b3:58:78:16:2d:
73:d7:9f:e2:69:00:2a:0a:1b:be:08:62:a2:25:36:6a:11:9b:
6d:fa:8d:9f:75:a2:d8:74:63:e7:b9:a8:2c:ff:18:53:6c:6c:
c7:8e:bc:1f:11:4b:1c:14:42:a6:27:8e:0d:69:e2:d8:bf:e8:
cc:de:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:53:17 2025 by rpki-client