
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
File: 9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (raw, json)
Hash identifier: ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=
Subject key identifier: F5:20:C1:06:EE:DD:25:15:47:90:C6:DC:B7:F4:58:B0:CB:89:38:FC
Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial: 38
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
Signing time: Tue 01 Jul 2025 01:31:45 +0000
ROA not before: Tue 01 Jul 2025 01:31:45 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 24259
IP address blocks: 103.2.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Validity
Not Before: Jul 1 01:31:45 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=F520C106EEDD25154790C6DCB7F458B0CB8938FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:9d:99:b8:c6:9d:a1:66:96:ad:f6:27:cf:
db:00:e7:50:fe:16:f3:97:27:a5:d1:5f:a6:5f:05:
87:ce:98:3f:ae:27:ee:8e:a7:e7:b8:ef:a2:fa:fb:
82:54:1e:5e:62:ea:86:20:28:dc:35:35:70:98:71:
d4:fd:70:ba:8b:06:9f:05:83:83:4e:e4:89:f6:5b:
9c:f0:c3:d8:4e:e4:dd:83:54:3f:be:cb:c2:52:3e:
d8:51:00:51:52:7b:e0:2a:84:97:c7:46:7a:19:01:
6e:a0:1c:d8:02:b9:60:b8:15:1e:09:b0:51:d0:6d:
1e:8d:1f:35:96:ae:66:09:33:30:53:00:bf:e6:c2:
18:40:9b:fb:e7:01:47:ec:33:bb:70:68:05:fe:fc:
90:0c:e3:b2:fc:4e:6c:30:87:61:88:fb:ec:22:c7:
a0:8b:c4:39:85:a1:76:a9:36:5f:fd:ef:3d:1c:d7:
94:94:4a:75:e5:27:ed:5a:4a:5d:12:23:26:a2:e3:
d4:19:75:3c:4d:9b:a5:71:77:42:2e:18:37:19:9f:
85:b1:e4:5d:63:c9:df:97:38:bd:6c:8a:99:65:98:
f3:ab:24:58:89:9b:38:54:83:b6:21:e9:e8:2a:24:
11:40:a2:7e:9f:66:d7:d3:0b:88:93:1e:b9:79:8f:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:C1:06:EE:DD:25:15:47:90:C6:DC:B7:F4:58:B0:CB:89:38:FC
X509v3 Authority Key Identifier:
keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.32.0/22
Signature Algorithm: sha256WithRSAEncryption
be:22:fd:a8:84:ef:67:3f:dd:16:c0:d1:f2:c6:7c:48:92:a3:
7d:59:84:88:01:67:24:4c:41:3d:12:b6:2f:74:48:19:22:a0:
17:48:27:9c:0b:fb:e7:95:08:eb:1e:13:96:73:08:6f:c9:86:
f0:9f:07:7a:d5:c2:70:4f:bc:b7:b5:0f:32:6e:57:03:83:b2:
0a:19:cb:4a:27:14:98:de:ce:9c:bf:44:6a:90:85:19:38:b0:
08:a7:e3:a0:56:30:5b:6a:bd:02:31:f5:ff:20:0b:5f:9a:07:
e5:19:a8:11:2f:04:99:5e:b0:0e:49:5f:8b:e4:57:37:62:d3:
fb:43:74:ef:e3:d3:42:d6:62:7f:51:e0:00:d7:e1:54:f5:39:
0d:29:d1:20:60:3a:21:40:b0:ee:6e:b3:26:27:05:63:dc:0a:
be:c7:74:6e:bb:99:a8:25:ab:29:72:3e:63:98:5a:6a:68:3b:
13:0f:e0:da:ab:7a:c4:ef:69:2e:03:f0:20:92:04:55:ea:3b:
5f:bd:3d:ab:96:85:20:05:01:8a:24:c5:d5:68:e2:eb:c7:87:
6e:c2:ab:1b:f4:50:d1:6d:e7:2c:f6:87:1c:ec:b3:e1:a0:33:
bc:1e:f3:2c:be:55:aa:90:0f:0f:6e:e9:71:29:7a:82:48:10:
c0:64:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:57:23 2025 by rpki-client