
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
File: fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa (raw, json)
Hash identifier: MbsLFAEMVej+V0m+BPZruuAIeS+wKZhfBIAoAdp02/c=
Subject key identifier: 7C:1D:EB:77:C3:F1:9A:C8:60:CF:B1:70:90:EE:B1:32:A1:9A:E8:7E
Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial: 59
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
Signing time: Sat 01 Mar 2025 01:30:53 +0000
ROA not before: Sat 01 Mar 2025 01:30:53 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 2519
IP address blocks: 203.79.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Validity
Not Before: Mar 1 01:30:53 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=7C1DEB77C3F19AC860CFB17090EEB132A19AE87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:73:5b:9d:6c:57:d3:5d:2c:b0:9b:cf:55:
1f:a2:85:2e:60:fc:b2:b0:0b:38:62:df:c2:e8:82:
cd:b0:e9:fb:da:93:0b:fc:09:ca:1b:01:5b:14:4d:
93:5e:96:17:45:a8:52:75:9f:b7:71:95:f3:79:fe:
9e:a9:ba:51:c6:d6:36:f6:ff:d5:3e:b8:2e:ff:77:
db:e1:75:c3:73:ee:28:46:f4:63:20:1a:ff:24:cb:
33:cd:2c:ef:ae:12:ca:e3:af:1e:d3:a5:6c:a7:6f:
bd:8c:87:e3:5c:3c:6b:73:3e:7a:d4:1b:7d:24:12:
fc:82:d1:cb:4b:62:0b:35:2a:e4:0a:8d:39:1b:ee:
3f:5d:8b:a2:3d:fb:60:f3:51:17:03:1b:3b:1f:87:
e9:50:0d:8d:55:0f:01:18:da:b6:89:84:e2:43:b9:
6d:38:50:89:6d:8e:5a:30:f8:ac:e2:ee:16:b2:ba:
5f:29:41:7f:f5:33:f8:e8:9c:5f:28:5d:0f:69:9c:
4a:68:5d:ca:62:ff:bc:26:54:4b:1e:71:e8:48:f2:
da:3a:8f:04:bb:b1:d8:60:7d:bf:e9:0b:c3:86:fa:
04:ed:07:a4:61:63:9e:75:20:9b:2a:6d:df:27:e8:
99:a9:97:ae:7c:89:ef:1f:73:b1:5c:16:64:46:70:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:EB:77:C3:F1:9A:C8:60:CF:B1:70:90:EE:B1:32:A1:9A:E8:7E
X509v3 Authority Key Identifier:
keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.62.0/24
Signature Algorithm: sha256WithRSAEncryption
33:39:e1:b7:f7:ae:b5:54:14:85:45:c1:e6:ce:a0:e6:ed:2f:
66:27:3e:81:e1:e8:2c:47:e6:b4:88:e1:13:d6:88:ae:59:c7:
b8:29:f4:a3:2f:fe:cc:8a:3a:dc:77:39:15:e6:9e:91:54:42:
1f:9c:a9:bd:9f:17:33:58:aa:66:67:e3:aa:cc:23:17:33:0f:
11:c0:99:9a:4c:77:9d:7e:0b:0c:40:0a:ff:c9:8f:bd:1b:af:
d7:07:4d:65:cd:cf:57:63:f8:4d:15:b2:f6:2d:57:98:c1:7d:
86:16:bb:2c:19:7c:8d:1b:a5:74:77:38:74:0e:b8:75:19:f2:
3f:79:66:ad:80:5b:12:b0:19:6f:57:10:59:55:06:f9:58:30:
a2:85:41:34:24:7c:9f:99:a3:08:be:b2:ce:b5:23:ab:b1:e4:
8c:6b:17:37:84:79:5b:9b:f5:fa:7b:b4:65:4d:a2:54:9f:7b:
01:46:5a:d5:7c:fb:cb:14:87:06:32:a6:08:38:3a:88:82:8d:
f6:42:6d:6d:c5:60:d1:a4:50:15:bb:3b:c0:a6:9c:48:dc:89:
78:88:81:b4:81:96:c8:38:db:be:6d:99:63:f1:4e:e1:5b:34:
da:d1:7c:2a:4b:4c:f3:cc:c4:41:d0:59:51:25:f4:87:03:ad:
bf:01:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:44 2025 by rpki-client