
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
File: fzj2SAo08Y94Xi3rmJLD567jfAU.roa (raw, json)
Hash identifier: m9N5nM9U1Bh+1N4MWLySde7mookMkz/F+nW7D+AvY94=
Subject key identifier: 7F:38:F6:48:0A:34:F1:8F:78:5E:2D:EB:98:92:C3:E7:AE:E3:7C:05
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 3F
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
Signing time: Tue 31 Dec 2024 01:30:52 +0000
ROA not before: Tue 31 Dec 2024 01:30:52 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 55385
IP address blocks: 202.174.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Dec 31 01:30:52 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=7F38F6480A34F18F785E2DEB9892C3E7AEE37C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:09:ac:62:d8:b3:1b:21:63:c7:d6:b2:e0:
50:01:b8:75:c3:13:8e:88:f6:bf:02:02:0f:80:1b:
84:06:1f:68:1a:42:4f:46:4a:2e:ae:78:24:21:08:
1b:6b:1e:36:50:81:41:7a:0c:e8:e4:33:3b:55:fd:
69:02:f0:97:8a:ff:5c:58:6c:13:ff:8b:83:16:55:
46:91:16:5a:95:96:4e:25:8c:7a:d1:c1:51:44:b1:
a1:7f:9e:8b:dd:6a:18:f1:69:b1:81:6c:d7:d2:db:
d6:4e:29:19:c7:de:db:c2:5b:4c:5c:f4:48:47:11:
65:8a:af:18:01:6d:16:0d:c4:0f:28:ca:c2:dd:d7:
bb:7f:c1:6e:1f:c1:35:b5:0a:3b:e3:97:03:45:49:
a8:75:b6:85:84:3a:18:a6:ed:ef:ef:ca:44:1b:dc:
4c:76:17:99:0c:49:53:af:29:7e:d6:51:76:3c:a7:
a8:75:7c:01:c1:9e:9f:5e:03:ff:24:ae:82:be:81:
26:97:6a:7b:ef:dc:4a:c1:58:cf:21:74:0f:1f:55:
83:6d:4b:d9:a0:07:9a:cf:a3:62:f6:76:a0:9d:e7:
33:55:ee:80:04:eb:f8:15:3a:43:43:3e:81:3f:66:
18:c6:a3:11:23:e7:af:d8:eb:c1:53:21:06:c6:be:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:F6:48:0A:34:F1:8F:78:5E:2D:EB:98:92:C3:E7:AE:E3:7C:05
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.174.58.0/23
Signature Algorithm: sha256WithRSAEncryption
72:f2:32:fa:0f:bf:b6:0a:7f:03:a6:f7:4b:69:e3:23:78:74:
fd:86:67:2b:0f:fc:8a:4c:4f:43:09:74:7d:d8:45:aa:ea:29:
ad:e2:f4:00:46:09:4a:36:3e:5a:89:4c:98:09:4e:58:fb:07:
83:7a:00:0f:79:fa:73:fb:7b:71:1e:d6:fc:37:fd:18:6b:13:
b3:4b:1f:a0:09:18:10:01:63:82:72:46:ea:7b:43:56:28:90:
ec:95:ab:18:84:83:6e:10:2e:80:64:98:2d:8a:4e:46:d1:14:
96:48:c2:0d:9b:b8:a9:f8:d4:61:f7:3c:27:d2:10:49:a9:f4:
a2:eb:9d:54:b4:5b:97:82:88:19:4a:3b:aa:d7:98:8c:7e:90:
d2:f7:49:12:a0:1c:ee:1d:57:78:45:b0:ce:31:17:d5:66:e4:
97:df:ae:8b:d8:c5:8b:f5:7c:64:4e:4a:72:f6:1d:d4:15:76:
bf:5b:f7:b2:23:4a:f1:77:6b:8b:7d:87:f2:c8:51:5d:76:5c:
bf:76:03:2f:77:d4:10:2a:e6:ed:3b:2e:65:3f:4b:bc:30:c2:
e4:90:58:e1:a7:55:49:19:d3:45:c9:e9:50:c4:d0:23:02:de:
6f:42:cd:97:e3:2f:2e:cd:d9:ea:49:82:75:87:e4:5f:66:e8:
c3:b4:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:53:54 2025 by rpki-client