
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
File: YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa (raw, json)
Hash identifier: J7YN+U8/LPeth8Se7rqNbaKQGeEt6yTYPAU/KaoUs+U=
Subject key identifier: 62:B2:DF:52:71:39:A4:2E:89:E9:82:60:87:B6:23:43:03:08:04:F8
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 2C
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
Signing time: Fri 01 Aug 2025 01:36:01 +0000
ROA not before: Fri 01 Aug 2025 01:36:01 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 24255
IP address blocks: 219.100.184.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Aug 1 01:36:01 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=62B2DF527139A42E89E9826087B62343030804F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:6f:a0:d1:ec:aa:ad:43:46:b0:bc:8c:45:
1d:40:01:39:76:8a:54:2b:3e:19:5e:4b:ea:4e:55:
a7:75:37:d6:cc:e0:19:98:57:a8:82:5f:86:14:b1:
a0:1a:fb:3a:ab:06:26:4e:d6:f5:3a:1c:7b:49:f6:
30:a3:16:26:8c:73:2b:23:87:32:af:90:05:fc:83:
64:aa:be:38:35:81:fa:f5:7f:1c:0d:99:7e:d5:fd:
89:83:91:66:0e:da:e9:39:95:8b:1d:a8:5b:23:03:
3d:b2:4d:59:1f:88:4b:30:c2:c2:ba:28:26:d8:41:
27:bf:6d:43:cf:4e:36:16:80:ec:6e:45:c5:57:6c:
97:d6:32:8e:09:65:46:9a:db:2c:f9:ca:2b:dd:09:
c4:e1:f6:bc:9f:2e:58:f3:70:62:d2:08:4c:b5:f3:
67:00:71:15:d2:22:24:57:84:8c:a0:e9:5d:50:1b:
75:60:50:8e:9b:0a:50:cd:0d:a5:0f:06:74:4e:95:
10:be:46:58:49:f8:3e:3b:4d:55:9a:06:66:52:3f:
85:22:b5:1c:fc:0a:00:38:98:3d:12:2c:84:76:df:
1e:14:a8:f5:2b:68:ae:04:34:96:85:2e:51:44:5c:
74:a1:a5:4a:f1:87:3c:fe:fb:ca:54:1c:bb:79:33:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:DF:52:71:39:A4:2E:89:E9:82:60:87:B6:23:43:03:08:04:F8
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/YrLfUnE5pC6J6YJgh7YjQwMIBPg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:9b:39:a6:ae:be:c2:11:0a:27:7c:29:b9:f5:02:00:b6:72:
19:2e:96:2b:b6:61:24:72:13:d2:13:90:b6:ae:b0:19:c3:29:
78:2c:fb:55:2a:10:cb:44:fb:ed:c6:a0:f7:19:0a:d9:91:d7:
b7:7f:40:c7:af:a0:35:5a:d7:41:e0:25:63:4e:d5:17:75:ea:
04:dc:be:aa:8c:22:6a:f9:6d:16:b0:22:f1:97:f4:71:38:ed:
19:38:f4:1a:e5:6e:de:fe:4e:99:28:dd:ea:87:3f:77:48:f3:
1a:26:e1:69:94:ac:63:60:19:db:bd:f3:f3:a5:00:86:4b:3c:
6b:ca:1f:ff:c1:41:5e:d1:fe:06:57:1e:53:a5:43:c4:41:02:
32:a8:21:88:c4:56:12:e7:0f:58:fb:6a:2e:1e:fc:5e:f9:ab:
85:30:d7:e5:50:26:b8:82:a9:7a:fc:37:e1:e2:39:b3:aa:db:
72:f9:db:a0:9e:48:87:e4:00:35:17:9e:72:6a:ea:c1:bb:4a:
1f:8a:a6:37:f0:54:13:c1:94:f7:4b:44:cb:ff:76:91:20:53:
e6:f8:b1:96:48:c5:a5:53:f6:a6:8c:17:67:a3:6f:e2:1a:24:
a7:83:58:71:f5:54:66:56:f6:b0:72:ec:89:b5:c4:b4:f9:c1:
80:f4:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:27:10 2025 by rpki-client