
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
File: _3B7QiwW5sTgx4ua99AczTfcvms.roa (raw, json)
Hash identifier: NxoL0qLLOYeoaqD3GQAcnJKV949PAp7YjHRbT/ytRm4=
Subject key identifier: FF:70:7B:42:2C:16:E6:C4:E0:C7:8B:9A:F7:D0:1C:CD:37:DC:BE:6B
Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial: 46
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
Signing time: Fri 01 Aug 2025 01:35:34 +0000
ROA not before: Fri 01 Aug 2025 01:35:34 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 59127
IP address blocks: 116.199.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Validity
Not Before: Aug 1 01:35:34 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=FF707B422C16E6C4E0C78B9AF7D01CCD37DCBE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:dc:50:16:6a:a5:09:0e:e6:43:95:3b:a8:
87:2a:55:d3:3f:bf:d6:cf:f1:70:88:0d:ab:e4:5c:
3e:12:13:73:b1:ef:a1:b3:6b:53:50:ba:0d:ad:78:
13:01:98:db:b7:ce:22:ac:63:be:54:7a:5f:35:cb:
a1:72:25:a4:34:8c:7f:80:8a:92:13:12:29:73:55:
21:1d:9e:d9:76:9b:66:e4:86:2d:6e:2c:87:e6:10:
16:a2:e4:89:83:ea:81:48:2c:20:c6:32:54:71:e9:
77:87:52:60:8c:ae:89:8a:a5:ac:0e:73:43:14:26:
0b:a7:eb:24:54:5e:e6:b9:e1:f1:aa:09:43:8d:5e:
90:81:1a:4d:d6:f6:50:2c:46:03:d1:88:0a:cf:dc:
00:2e:3d:1b:68:1b:a5:26:f6:84:03:54:95:6d:58:
ef:20:d1:33:35:09:11:9a:e4:6d:87:be:1e:b9:a0:
1b:4a:fe:1e:41:66:03:4e:1a:99:9d:1b:b1:22:f4:
eb:f7:f8:b7:14:61:50:30:b2:a3:0e:8e:f8:25:cd:
ec:85:7a:7e:a0:22:d5:08:28:d5:08:a6:85:90:2e:
82:6c:60:21:97:6a:d7:aa:61:0a:27:eb:35:52:bc:
bd:07:a3:8a:3f:98:99:07:ce:90:f5:8a:82:08:78:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:7B:42:2C:16:E6:C4:E0:C7:8B:9A:F7:D0:1C:CD:37:DC:BE:6B
X509v3 Authority Key Identifier:
keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.199.240.0/20
Signature Algorithm: sha256WithRSAEncryption
32:3b:b0:6e:d0:1b:13:a7:90:14:1e:c3:61:48:fd:08:32:b3:
23:a2:2b:79:b5:22:3a:e5:27:cd:c0:9b:7e:fe:57:8d:c0:7d:
00:d1:e4:c9:38:60:be:b7:04:55:32:d1:30:77:f9:82:7e:a2:
1e:83:0f:89:4d:ed:0b:a9:e7:de:54:87:bc:0c:4b:49:4b:a8:
d6:39:43:e9:0d:db:6b:5c:87:1a:91:42:22:40:4b:50:83:3c:
9e:7b:52:fe:4d:f6:5b:8f:db:65:5e:94:4b:13:87:01:3a:2c:
15:e7:2f:20:83:eb:54:db:aa:bb:38:1e:e1:87:7f:65:7b:44:
90:7c:2e:c6:fd:30:4c:e9:39:f9:e9:d7:2a:6e:4c:ae:01:94:
70:ee:3f:02:3d:62:56:92:29:5a:62:e7:bb:1a:3b:9c:11:7e:
77:aa:88:98:83:e4:a0:42:ea:85:61:50:04:0c:8b:c2:83:fc:
ba:ba:f6:d0:df:e9:c1:ad:50:c6:a4:1d:df:8c:7f:83:c5:d2:
b9:0e:84:1a:7f:be:e3:cc:b9:3b:9d:b1:28:ef:18:f3:29:74:
b2:cf:6e:fb:5f:ef:97:43:8d:4f:98:12:10:ea:5a:ee:6c:2f:
1d:2c:cb:c3:07:e9:11:9e:da:e8:a9:fb:1b:92:3c:2a:fc:d8:
d3:4e:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:45:15 2025 by rpki-client