
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
File: CRrxOzOTs_M6f80K1I1q8eHROTQ.roa (raw, json)
Hash identifier: i8u9HY9I9FpjmJCsnviSx89/1SiRtOCRGan56M5zW3Q=
Subject key identifier: 09:1A:F1:3B:33:93:B3:F3:3A:7F:CD:0A:D4:8D:6A:F1:E1:D1:39:34
Certificate issuer: /CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Certificate serial: 22
Authority key identifier: AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
Signing time: Fri 01 Aug 2025 01:36:01 +0000
ROA not before: Fri 01 Aug 2025 01:36:01 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 24255
IP address blocks: 64.33.0.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Validity
Not Before: Aug 1 01:36:01 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=091AF13B3393B3F33A7FCD0AD48D6AF1E1D13934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:43:60:a9:1e:10:a1:e5:01:35:bc:4c:7d:
d1:17:9b:f9:d0:5f:98:c4:33:42:d0:d4:62:b9:50:
6f:61:9f:ab:06:35:e1:8f:59:d7:6b:06:7e:6c:25:
03:f6:ee:91:85:87:7b:f6:d7:19:57:34:a8:05:58:
15:cb:59:be:97:09:26:29:3e:55:0a:79:a8:fc:f9:
64:4b:51:16:76:6d:fb:f2:bc:10:5f:90:06:45:33:
82:9d:9d:98:71:72:bc:ac:8a:fc:b0:a6:62:60:ea:
f3:5c:f4:bc:f0:98:a6:f9:81:98:68:16:27:99:df:
f7:cc:74:79:68:99:ec:9d:e0:80:00:5a:62:83:ee:
80:ec:11:05:f4:2b:5a:20:51:e0:6d:e4:66:e4:6b:
e5:d4:74:04:29:c7:88:df:d4:ee:1b:d6:23:a1:7b:
01:1a:77:03:c1:04:fb:84:b9:5c:bd:c8:c2:5e:e3:
bb:46:4c:41:62:0b:a2:c8:05:e8:98:f7:af:16:30:
68:47:f7:39:6e:4f:3e:2f:a0:c8:f4:2a:3b:a4:96:
a9:de:bb:1f:d4:48:46:f2:f6:90:70:84:2f:c2:59:
f0:6d:40:10:12:37:69:76:31:f6:c0:20:0c:dd:73:
90:f7:fd:6c:6a:53:3f:41:93:5e:ae:40:88:eb:5f:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:F1:3B:33:93:B3:F3:3A:7F:CD:0A:D4:8D:6A:F1:E1:D1:39:34
X509v3 Authority Key Identifier:
keyid:AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.33.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c7:6a:ac:dd:db:6c:6a:cb:09:c8:62:8b:92:21:02:ec:35:ea:
c5:e2:89:78:15:a7:97:3b:9e:3e:6a:37:b1:9e:5d:30:43:a6:
f6:c1:68:45:2d:e9:f9:7b:92:2c:29:35:5b:04:ce:da:5a:36:
7f:51:58:e9:ce:06:b9:8f:2b:a5:66:62:1b:4c:d4:66:6e:0c:
f4:04:be:46:dd:bf:ca:98:75:f8:58:60:43:37:c6:84:a0:68:
3d:15:ba:c4:c2:5c:4e:1b:40:29:29:67:5d:1f:67:41:52:68:
b0:b8:33:bb:97:97:dd:d4:f6:aa:02:88:a6:ad:65:91:4c:d6:
dd:47:ea:08:66:73:5b:ea:9e:a2:83:72:c9:7b:c8:c4:74:d6:
92:06:be:6d:00:67:76:c8:76:2a:b7:c8:8e:62:ca:7c:5f:d2:
5e:f6:e7:1a:b1:4b:31:73:61:f3:a2:6b:9e:c9:4c:3d:3d:eb:
da:b1:62:c7:2e:e1:9d:43:80:43:2a:dc:85:7e:bb:ee:f6:09:
4a:e0:ca:11:2d:61:6c:fb:74:fb:75:d4:7b:c3:55:30:80:b8:
fb:2f:67:e5:3f:f5:cf:7d:9e:6a:ae:19:22:e2:73:bd:a4:a0:
af:a7:33:cd:27:d1:7e:98:da:f2:84:c5:5f:92:0e:df:30:7d:
b6:bc:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:59:56 2025 by rpki-client