
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
File: yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa (raw, json)
Hash identifier: mSMss7lrAMVrY7SM+fqQDVJaPoYUW7929dRegUbhobM=
Subject key identifier: CB:3D:5E:64:34:33:BB:F2:28:88:47:BE:C5:A2:57:2A:19:33:80:7A
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 5E
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
Signing time: Thu 27 Mar 2025 04:51:08 +0000
ROA not before: Thu 27 Mar 2025 04:51:08 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 4717
IP address blocks: 202.249.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 27 04:51:08 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=CB3D5E643433BBF2288847BEC5A2572A1933807A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:d2:15:6d:b7:7a:80:e7:7e:02:98:92:bc:
e1:7b:e0:f7:1e:b9:4a:7c:f4:25:59:16:cf:26:d0:
39:a9:08:91:82:ff:5c:b8:28:5e:16:a2:b9:61:0c:
7d:1c:7a:e8:6f:a2:59:44:0b:1b:e1:0a:32:43:44:
14:e1:37:13:63:22:fc:59:63:a0:00:92:47:21:62:
0b:5c:86:a9:16:dc:03:f9:1a:39:da:5d:c8:ff:74:
20:b4:a3:97:1b:5b:ea:3e:26:95:c5:98:70:e2:d3:
53:ca:08:ed:dd:1a:bb:78:81:9f:dd:d2:b7:2e:90:
03:13:7a:8e:3e:d8:ea:76:7f:24:e6:0a:8e:40:18:
e3:e7:fe:3a:b8:48:9a:b1:4d:43:d3:3a:13:9e:7c:
6b:78:28:69:d1:94:30:5e:c7:27:4c:18:91:9d:e3:
b1:c8:e6:a0:04:a9:eb:6a:12:a8:b6:13:99:2d:71:
0d:fa:64:72:2e:5a:c4:c2:0a:fa:b2:2a:08:b2:fb:
a4:89:66:08:0d:8f:ce:21:46:4b:6e:a6:60:b0:b6:
0e:d5:4d:d0:cb:32:78:87:9e:cb:e7:7e:8d:3b:2c:
5c:4f:7d:65:00:51:bf:2c:aa:0a:76:3c:28:02:fd:
32:87:27:1e:c3:29:fd:85:3f:a1:07:ce:4c:41:24:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:5E:64:34:33:BB:F2:28:88:47:BE:C5:A2:57:2A:19:33:80:7A
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.249.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e4:49:bd:ff:73:18:6b:85:98:73:7c:2f:38:29:1d:35:9d:
63:ab:bf:4f:43:d1:94:32:26:2e:45:4e:76:43:8e:65:76:c4:
e3:ce:8b:1e:4d:0e:ce:21:bf:10:29:7f:b2:02:e0:eb:7a:9f:
d3:3d:40:47:0b:c8:2a:d5:74:54:2e:84:72:38:65:4e:9d:b6:
d1:ed:fe:bf:0b:e0:0f:66:41:9d:29:0c:9a:77:42:2b:1a:ca:
c4:1b:94:9a:94:66:8c:85:22:23:d6:e3:a5:52:81:e8:b1:a0:
dc:fd:73:97:48:e2:7a:1c:92:7c:14:5e:6d:44:a1:a0:5a:d9:
0f:da:d2:af:0b:6e:9d:06:ee:14:af:72:7b:f7:39:da:74:22:
8d:b4:b6:b1:be:83:53:37:09:7a:e5:54:e9:a1:20:35:15:6b:
11:ab:68:23:98:a7:f0:61:98:88:ad:89:48:c1:27:cc:b6:83:
9a:43:67:f2:9a:54:4a:ee:42:e2:09:c8:fd:35:ea:e5:fd:34:
7d:a0:26:38:b8:c8:e3:b6:e3:10:25:05:97:6c:b6:fd:c1:bd:
fa:b1:9c:22:5c:03:c0:3b:00:67:72:6f:90:67:60:72:b2:20:
e1:fc:c6:75:19:25:83:9b:65:bf:53:29:46:9d:04:32:12:c8:
43:a7:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:50:15 2025 by rpki-client