
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa
File: wCDh38DbWV281qx3SSWzsyiinEk.roa (raw, json)
Hash identifier: UrhVQBSeQdfgzqSW4p7cTXi0A8EWVtPSRwg78ZUVfTk=
Subject key identifier: C0:20:E1:DF:C0:DB:59:5D:BC:D6:AC:77:49:25:B3:B3:28:A2:9C:49
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 2D
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa
Signing time: Fri 01 Aug 2025 01:36:03 +0000
ROA not before: Fri 01 Aug 2025 01:36:03 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 24255
IP address blocks: 202.88.192.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Aug 1 01:36:03 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=C020E1DFC0DB595DBCD6AC774925B3B328A29C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:9e:df:e7:2d:9b:89:60:d5:f9:e7:a6:e7:
0f:ad:85:45:e1:ac:e9:e7:be:91:41:a1:84:32:18:
a8:a2:7a:8b:59:a4:68:7d:9f:08:c5:61:68:bf:8f:
14:9b:5d:6a:6e:94:cf:2f:cc:5b:a2:a3:7a:2d:fc:
24:13:6e:75:91:5f:a2:02:0f:ab:62:4c:8a:b1:70:
a7:02:e3:c8:ef:c5:87:0a:50:d9:a1:a8:d2:38:cc:
14:64:c2:be:8c:e6:01:3d:4a:1b:6e:e1:60:53:8f:
79:db:62:cb:3b:c7:4e:f6:0a:17:58:c1:b9:fe:10:
95:73:02:d1:91:97:b0:5f:1a:d3:66:65:a6:32:14:
26:ea:40:d3:32:0e:3a:b6:bf:23:c8:82:32:2c:df:
e2:62:39:23:36:e0:d9:7d:e9:e4:6d:8f:16:9d:5f:
fc:33:77:79:ce:f1:93:1a:76:42:d4:3f:05:b2:5d:
f4:8c:99:93:36:b8:bc:25:83:30:44:3e:58:ea:6a:
c8:b0:f5:ba:70:59:71:f5:3f:e4:2c:3e:7c:dd:a3:
da:54:92:4b:5c:ce:dc:7a:39:d2:c2:ec:3b:68:e2:
25:6e:75:78:ec:e8:f6:71:2e:13:97:28:90:63:37:
d1:50:cf:75:a2:39:17:db:aa:90:46:62:95:c9:42:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:E1:DF:C0:DB:59:5D:BC:D6:AC:77:49:25:B3:B3:28:A2:9C:49
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.88.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:e2:48:83:92:e3:4b:6d:a7:0c:b2:65:e2:78:14:cd:9e:1c:
fe:ec:1e:18:9c:e9:68:d3:3d:07:d6:0a:13:1b:c8:f2:21:cb:
92:40:6f:dd:a0:c2:15:6d:36:86:7f:6c:b5:10:4c:7a:b7:17:
8c:56:d6:05:50:1e:61:41:58:fb:1a:e9:de:c2:f9:43:17:73:
a8:12:48:cf:95:12:19:54:68:82:6d:34:fe:be:cc:74:90:6a:
09:37:64:02:7e:23:98:27:2f:ae:32:cd:93:09:2f:b5:73:a9:
25:8d:ad:83:1f:cd:58:e0:80:01:dc:3d:19:68:9d:0e:25:1b:
2f:32:fa:0a:65:39:00:41:3a:67:10:22:67:ba:6b:ee:bc:7c:
b6:a4:4a:fc:1e:7b:99:a9:2c:24:9c:9b:26:8a:3d:8c:6d:56:
cf:7e:57:2d:b2:68:09:9a:98:2d:38:95:30:0d:cf:2e:d9:fd:
82:a7:3c:13:7b:f0:b4:8b:75:65:90:57:fe:29:0f:af:76:9f:
6d:e8:4c:4c:73:ae:b1:e6:8b:16:b6:10:2b:5d:f5:9d:e1:93:
df:fd:78:23:d4:62:6c:33:39:03:7d:51:24:62:37:8c:65:d4:
32:ce:ba:38:1e:08:57:55:64:7c:bd:ee:e9:b1:96:c4:b8:2c:
e9:44:0f:8c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG
NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTI1MDgwMTAx
MzYwM1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQzAyMEUxREZDMERCNTk1
REJDRDZBQzc3NDkyNUIzQjMyOEEyOUM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALNCnt/nLZuJYNX556bnD62FReGs6ee+kUGhhDIYqKJ6i1mkaH2f
CMVhaL+PFJtdam6Uzy/MW6Kjei38JBNudZFfogIPq2JMirFwpwLjyO/FhwpQ2aGo
0jjMFGTCvozmAT1KG27hYFOPedtiyzvHTvYKF1jBuf4QlXMC0ZGXsF8a02ZlpjIU
JupA0zIOOra/I8iCMizf4mI5Izbg2X3p5G2PFp1f/DN3ec7xkxp2QtQ/BbJd9IyZ
kza4vCWDMEQ+WOpqyLD1unBZcfU/5Cw+fN2j2lSSS1zO3Ho50sLsO2jiJW51eOzo
9nEuE5cokGM30VDPdaI5F9uqkEZilclCMEMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTAIOHfwNtZXbzWrHdJJbOzKKKcSTAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T
jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN
MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDUvd0NEaDM4RGJXVjI4MXF4M1NTV3pzeWlpbkVrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pYwDANBgkqhkiG9w0BAQsFAAOCAQEAqeJIg5LjS22nDLJl4ngUzZ4c/uwe
GJzpaNM9B9YKExvI8iHLkkBv3aDCFW02hn9stRBMercXjFbWBVAeYUFY+xrp3sL5
QxdzqBJIz5USGVRogm00/r7MdJBqCTdkAn4jmCcvrjLNkwkvtXOpJY2tgx/NWOCA
Adw9GWidDiUbLzL6CmU5AEE6ZxAiZ7pr7rx8tqRK/B57maksJJybJoo9jG1Wz35X
LbJoCZqYLTiVMA3PLtn9gqc8E3vwtIt1ZZBX/ikPr3afbehMTHOuseaLFrYQK131
neGT3/14I9RibDM5A31RJGI3jGXUMs66OB4IV1VkfL3u6bGWxLgs6UQPjA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:25:35 2025 by rpki-client