
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
File: JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa (raw, json)
Hash identifier: TwwjEsfC9xaO3foZCHM/bfklCy5s+OGJTBOGEvgBTNo=
Subject key identifier: 25:D1:52:2F:6C:B0:D8:33:86:66:D2:F3:BC:88:AE:DC:92:6A:43:5B
Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial: 04
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
Signing time: Thu 16 Jan 2025 08:06:38 +0000
ROA not before: Thu 16 Jan 2025 08:06:38 +0000
ROA not after: Fri 16 Jan 2026 07:42:57 +0000
asID: 24253
IP address blocks: 103.157.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Validity
Not Before: Jan 16 08:06:38 2025 GMT
Not After : Jan 16 07:42:57 2026 GMT
Subject: CN=25D1522F6CB0D8338666D2F3BC88AEDC926A435B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:b5:9f:c3:d5:b4:52:82:8d:c9:5c:da:da:
da:c7:33:f6:0f:2a:b3:21:90:58:df:51:ed:be:4c:
b0:6a:2d:49:ff:1a:1d:12:4a:69:82:78:6f:2a:7a:
43:f7:24:a6:51:85:fe:9b:75:f3:c1:36:78:29:cd:
81:c9:dd:a3:ff:26:6d:4c:3b:6d:70:61:ca:a4:c4:
2e:9d:6e:95:35:1d:85:ca:58:7f:7e:03:b8:f5:ff:
16:b7:77:2a:f8:9e:60:d8:5f:34:ce:0f:47:3f:a1:
fc:61:a1:42:0c:16:9b:58:90:e6:fd:75:9c:f8:84:
d6:52:36:0b:65:2a:91:bc:10:03:a0:9e:ff:d8:1e:
84:56:be:90:83:ba:27:5f:ca:5d:9b:d9:a0:be:4c:
cc:c2:21:02:ef:9e:d2:85:a0:3e:64:e9:0c:3f:e7:
8d:f3:b6:4a:93:94:4e:f7:66:b8:74:72:9a:f0:37:
be:bb:63:b2:ca:8a:6c:4d:63:4f:f5:f6:0d:1a:86:
a7:e6:81:5e:ef:d8:7f:d1:a0:64:c1:83:dd:4b:66:
5e:1e:cb:91:b0:e1:80:70:87:c5:8f:a9:11:95:f5:
67:f2:66:dd:db:6e:b4:35:7f:45:86:ea:4c:0e:45:
eb:bc:75:a9:c8:7b:f3:3e:27:e6:1b:ad:f1:f0:be:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:52:2F:6C:B0:D8:33:86:66:D2:F3:BC:88:AE:DC:92:6A:43:5B
X509v3 Authority Key Identifier:
keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.156.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:bb:ba:4d:ce:d5:f8:98:87:2a:4d:47:ad:77:96:67:9a:
7f:5e:78:ff:d9:47:93:c7:cf:00:20:0c:24:54:95:0e:01:42:
38:39:0e:15:c3:4a:0d:dc:b0:c0:a0:af:c0:92:30:5e:b4:97:
a8:ff:70:61:20:09:38:b3:87:80:d4:29:45:39:53:70:52:f9:
8a:e9:39:70:67:19:c0:26:f2:51:1a:3a:dd:a9:58:df:56:f0:
b4:a0:38:a4:66:9e:cc:1f:0e:23:2d:6d:7f:6b:3f:04:c9:b7:
cd:94:35:35:33:27:82:03:c1:58:41:a3:ca:30:2a:5f:2e:0b:
ca:7d:e8:d2:08:e8:3a:e5:ff:00:1c:b4:74:4f:9f:ce:42:87:
b5:1b:12:eb:47:bc:10:45:23:86:a3:ae:f7:95:2f:99:47:f0:
90:33:23:a8:2e:a7:b2:48:e9:bc:c3:9e:ee:77:c3:4e:5c:f5:
f6:df:70:18:e5:66:ee:15:21:0f:12:b4:ec:59:e6:51:1a:4c:
23:55:67:7d:18:8f:b3:dd:b4:00:94:9f:52:7c:82:8e:55:06:
54:86:43:5e:0c:14:6e:85:cc:ea:b3:94:f9:f8:4d:9e:ba:f0:
87:78:e3:70:b3:23:76:0a:0b:ce:c0:1b:fe:13:20:61:5d:28:
b3:52:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:21:33 2025 by rpki-client