
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
File: Cp4zJGPc1UWR14epMl5rufLTZs8.roa (raw, json)
Hash identifier: 6lQMiirMd3CC8ig+8syO9rWgmJr91j2z0BdFWMirhyE=
Subject key identifier: 0A:9E:33:24:63:DC:D5:45:91:D7:87:A9:32:5E:6B:B9:F2:D3:66:CF
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: DF
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
Signing time: Thu 01 May 2025 01:29:15 +0000
ROA not before: Thu 01 May 2025 01:29:15 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 2518
IP address blocks: 220.102.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: May 1 01:29:15 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=0A9E332463DCD54591D787A9325E6BB9F2D366CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:2b:70:99:78:25:56:24:ca:49:32:d5:b0:
b0:99:aa:d4:3a:74:f8:28:f5:7d:2d:a6:4a:10:9e:
ac:04:ec:ef:3a:16:7f:cd:17:27:d7:02:ac:40:e3:
51:c8:0c:60:df:1c:4b:73:bf:7f:83:ef:fd:ab:e3:
de:9c:d0:36:4a:53:e2:c2:dd:38:9a:38:ea:51:62:
a4:a6:8a:9b:b3:9d:18:54:7c:82:d6:10:8b:e8:ef:
9d:5d:c2:ed:df:10:03:51:b9:ac:08:49:6c:c1:d1:
4f:c4:60:7a:c9:0e:6d:fa:38:25:7c:93:f7:f6:d6:
eb:09:84:51:99:44:77:e2:bd:ad:c6:52:db:c6:20:
d8:70:56:c7:36:44:f8:0d:a1:25:6b:39:e1:17:cd:
dc:d7:9f:78:41:17:02:4f:2a:91:f4:ed:1d:0a:48:
52:2a:f5:04:2a:33:6a:87:95:5f:e7:ce:68:e7:49:
c8:c8:9a:74:a4:97:37:b1:ae:00:9f:f9:c9:c6:0c:
34:b1:bb:66:c9:b5:5c:34:77:2f:d4:31:7f:eb:cd:
45:cc:3c:59:ec:89:d2:54:6f:0b:a1:dd:5f:bb:a4:
08:8b:d1:4c:81:d5:81:f2:71:bb:d8:73:63:4a:8a:
ab:4f:60:0d:df:35:11:85:95:db:db:6e:96:b4:c9:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:33:24:63:DC:D5:45:91:D7:87:A9:32:5E:6B:B9:F2:D3:66:CF
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cp4zJGPc1UWR14epMl5rufLTZs8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:cf:96:42:ab:07:a6:6f:94:6f:c4:ce:84:98:b5:ab:bc:84:
88:ef:61:71:22:87:3c:6b:69:8d:73:89:ad:82:60:be:42:97:
36:0a:63:a6:43:31:18:6c:0c:61:f8:04:db:1c:e1:42:89:97:
ec:45:b3:fb:d9:a9:99:d3:9e:78:bd:ee:8d:54:1d:bd:f3:92:
2a:12:22:2f:e7:29:9b:c7:55:34:9e:22:a4:71:04:68:84:51:
8e:4f:a7:de:1a:05:14:25:bc:33:1a:0e:48:94:3c:21:90:ef:
0f:43:eb:8f:0f:c3:32:7a:5b:78:0d:d9:77:97:23:2f:ad:de:
49:4e:6b:0d:fe:66:74:06:27:ce:a5:5f:bb:29:c5:a7:7c:93:
61:84:48:be:fa:2e:10:97:fd:1e:77:52:c6:ed:ce:60:76:36:
e9:d6:d9:5d:ee:52:db:91:b2:39:38:0e:8e:5f:5b:1f:70:02:
11:02:b2:55:ca:a7:c5:99:72:1a:c1:03:94:24:09:c3:a4:7d:
8a:6a:6f:c3:6b:86:c5:57:8d:8f:1f:25:58:7a:67:a5:b6:e9:
56:a7:49:e2:1a:d6:46:d7:61:41:8a:08:c2:ca:95:62:2d:3b:
32:95:bd:82:3d:75:0a:d2:59:d9:f4:ee:a6:9a:4a:79:b2:a6:
a3:cf:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:15 2025 by rpki-client