
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/JJAaa8RKKZFdk9Z1hFQ10FddGEw.roa
File: JJAaa8RKKZFdk9Z1hFQ10FddGEw.roa (raw, json)
Hash identifier: L5riNyCrs1AH2opb0nZQX6VHx7ABupHIvPAsaiLXSX0=
Subject key identifier: 24:90:1A:6B:C4:4A:29:91:5D:93:D6:75:84:54:35:D0:57:5D:18:4C
Certificate issuer: /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial: 4D
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/JJAaa8RKKZFdk9Z1hFQ10FddGEw.roa
Signing time: Sat 01 Nov 2025 01:32:14 +0000
ROA not before: Sat 01 Nov 2025 01:32:14 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 24271
IP address blocks: 218.231.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 06:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Validity
Not Before: Nov 1 01:32:14 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=24901A6BC44A29915D93D675845435D0575D184C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:2b:5f:aa:4d:4c:22:a5:7f:93:7e:e5:03:
a2:5e:cc:8b:cf:97:2f:cd:25:ef:a8:9b:45:73:80:
0f:3a:59:c2:81:23:f4:57:18:f2:7a:79:48:2f:71:
dc:f8:cf:ed:3c:6d:66:2b:0b:06:29:b7:5b:4f:5d:
0c:8b:06:43:21:f7:9e:fa:26:76:5b:aa:70:7a:ad:
1a:62:83:b7:d9:09:01:d2:2c:a7:7b:b7:07:34:5e:
fe:90:38:dd:6d:03:c3:a4:53:4d:d9:35:a7:cc:1b:
c6:28:1b:70:4b:83:ae:11:ca:56:3b:87:ee:77:06:
19:d1:d1:4d:cb:5e:e2:3c:e8:1d:65:b1:67:ad:c5:
84:9c:c0:aa:96:86:49:80:33:cb:bb:28:6e:3d:96:
91:3a:27:ef:66:8f:68:ff:5d:77:0f:20:81:25:09:
34:00:7a:c0:ab:a2:ff:73:6a:c8:aa:ca:af:0a:3f:
b4:ff:c7:41:9d:58:4a:e7:4a:c4:cc:7a:51:63:50:
f3:73:42:53:a7:59:33:88:a1:4b:8e:c4:7c:58:b6:
e0:1d:0f:81:56:6a:7e:d5:bd:d0:23:4c:6f:bd:16:
cc:e3:8e:e0:57:34:bb:22:c2:cc:35:47:6b:78:0d:
3f:18:e1:be:f3:3c:5b:6f:7e:41:26:d1:47:da:55:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:1A:6B:C4:4A:29:91:5D:93:D6:75:84:54:35:D0:57:5D:18:4C
X509v3 Authority Key Identifier:
keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/JJAaa8RKKZFdk9Z1hFQ10FddGEw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.231.216.0/21
Signature Algorithm: sha256WithRSAEncryption
40:3e:32:3d:79:31:d1:1c:cf:e1:98:be:ee:26:44:d2:0b:6b:
19:bd:2e:47:10:ff:dc:c2:3c:6f:fd:c9:e5:ce:15:8e:f8:63:
f9:3b:51:6a:30:64:46:f6:c6:6f:e9:1f:64:fa:d5:32:b9:8d:
9c:e9:40:b9:4d:99:ba:a8:07:cf:cd:e1:79:9c:6b:a7:99:e6:
29:e5:44:8b:3c:f5:70:a5:b7:54:ee:0f:54:32:04:e9:a6:32:
12:5f:f5:97:b7:5f:44:32:ab:44:47:f7:5a:63:9f:77:1d:8c:
dc:fc:7c:b2:81:0f:07:eb:ab:f4:10:e5:24:7a:da:2c:ef:ee:
a3:62:27:fa:64:6f:e3:1a:cf:93:f8:a9:89:2f:2e:b9:81:65:
e1:0e:36:bf:6b:ef:dd:fc:cd:57:0b:ad:f0:7a:0a:3b:03:b6:
26:10:48:40:36:c7:77:5c:90:1a:40:80:17:24:c4:2e:d7:81:
9c:8e:fe:8b:11:e3:f0:52:8f:24:f3:32:d1:8f:98:0d:47:4b:
24:a8:25:f0:fe:97:46:e3:c4:50:50:3f:07:c5:59:21:50:d6:
35:df:b3:7c:d7:83:c4:bc:95:48:a9:ca:b1:31:5c:ad:90:81:
f9:43:28:9c:4b:9d:2b:cb:a1:d8:2f:7c:6c:6d:07:09:da:a3:
f5:bf:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 10:07:36 2025 by rpki-client