
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
File: tSnOZys5ATuRvsS7KDdv0b552x4.roa (raw, json)
Hash identifier: bowoxUgOj88mSY9e7CCqHKux1MlulCt6wOcdtgPM1YY=
Subject key identifier: B5:29:CE:67:2B:39:01:3B:91:BE:C4:BB:28:37:6F:D1:BE:79:DB:1E
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 1E
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
Signing time: Sat 08 Feb 2025 06:48:22 +0000
ROA not before: Sat 08 Feb 2025 06:48:22 +0000
ROA not after: Fri 06 Feb 2026 03:05:32 +0000
asID: 23831
IP address blocks: 223.27.180.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Feb 8 06:48:22 2025 GMT
Not After : Feb 6 03:05:32 2026 GMT
Subject: CN=B529CE672B39013B91BEC4BB28376FD1BE79DB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:49:24:9e:1e:de:3c:b0:06:5b:fb:69:06:
a9:ac:73:9e:5f:df:98:93:f8:48:fb:7b:b6:bb:f7:
f6:9d:39:4b:d5:55:e4:94:d0:9c:96:ff:ec:2d:18:
dd:5d:a6:4f:f3:d7:aa:23:1d:76:b6:20:43:ca:53:
4f:3a:15:50:18:4d:4f:02:b7:d1:e5:16:63:2c:49:
ab:06:b5:bb:1c:46:8f:46:4d:38:0d:62:67:62:ec:
41:9e:76:b0:92:8a:1c:af:78:10:62:73:48:bf:35:
8b:c4:28:12:7b:84:4d:5d:e4:cc:15:4d:92:ec:24:
27:cc:57:61:a5:05:91:37:07:f4:62:3b:e8:83:e0:
d9:bb:a5:66:75:74:70:d3:0c:91:d7:47:5a:dd:30:
44:6b:86:22:30:a8:b8:58:24:2f:c8:0a:9c:63:00:
8e:1d:b2:98:3d:d6:44:b1:8c:69:86:43:9b:e4:98:
a2:7e:2d:89:cc:04:09:84:e8:0a:43:dc:55:73:3d:
11:28:ef:f8:e2:55:0e:db:d3:df:48:a7:ba:31:8c:
12:fd:db:0e:15:4f:31:65:d1:0c:20:58:03:16:35:
a8:9e:dc:ee:2c:be:9e:2b:26:5b:ff:d6:e0:7d:ba:
17:97:69:72:43:38:89:92:04:da:c2:a6:e4:0d:7b:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:CE:67:2B:39:01:3B:91:BE:C4:BB:28:37:6F:D1:BE:79:DB:1E
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/tSnOZys5ATuRvsS7KDdv0b552x4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.180.0/22
Signature Algorithm: sha256WithRSAEncryption
64:66:83:6a:ac:24:34:8e:a4:da:28:eb:e0:11:3a:b8:83:f0:
4c:ef:3b:60:e6:8f:b9:de:fc:67:c5:e8:61:6a:90:50:7f:26:
8f:a4:ab:f6:1d:99:3f:64:d6:25:55:bb:ce:b8:3c:4a:22:8d:
0b:65:b9:a8:44:33:7c:39:d5:7e:1e:35:9f:32:b0:73:a4:91:
a7:56:6f:3e:04:75:7c:19:ea:67:83:cb:01:aa:05:95:ea:27:
0e:ea:d1:4d:92:ee:ed:7d:f6:a1:22:56:1e:ea:00:9c:9f:e8:
65:de:98:6e:01:70:3b:7a:02:a6:1d:2c:30:be:76:ef:05:9e:
6c:78:04:29:58:c7:8e:6c:32:d2:3f:ad:29:c7:9d:3e:4d:82:
db:ac:f9:bc:2c:c2:75:9e:95:3f:a5:3e:e8:23:3d:a9:c6:91:
a2:8c:2e:04:10:96:d9:13:ca:57:8b:cc:bc:3a:28:1b:1d:17:
56:18:d3:a4:de:4d:e6:94:1b:93:ec:ae:c2:5a:ca:14:59:cd:
f9:c9:ef:59:f7:4d:a4:aa:94:bc:6a:09:c3:ac:e9:04:93:0b:
00:d6:f5:9b:b9:6a:b2:49:50:46:02:e1:fd:07:c4:79:26:89:
07:38:ee:a3:cf:3f:1f:9c:3d:10:17:4c:85:5c:f5:6a:9f:de:
b1:7c:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:28 2025 by rpki-client