
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
File: QPCz49nIDTj5AxfojpKdxYRNX2U.roa (raw, json)
Hash identifier: GZfZd4tAMQfzfiO1N/UuZdEAz/ydA1QQJBeBDtjXCQI=
Subject key identifier: 40:F0:B3:E3:D9:C8:0D:38:F9:03:17:E8:8E:92:9D:C5:84:4D:5F:65
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: DD
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
Signing time: Thu 01 May 2025 01:29:14 +0000
ROA not before: Thu 01 May 2025 01:29:14 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 2518
IP address blocks: 27.127.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: May 1 01:29:14 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=40F0B3E3D9C80D38F90317E88E929DC5844D5F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:0a:57:8e:30:f5:18:69:fd:c5:6e:01:30:
04:14:fa:ba:2e:03:e0:99:6f:84:25:18:d6:b7:49:
6d:67:8b:f7:11:2f:e3:15:47:a2:28:16:fe:7f:85:
59:4f:a2:5d:f4:cf:2a:96:c0:f7:12:6a:2e:1d:c2:
e7:7b:bb:be:f6:8b:48:7f:0c:ec:c8:f7:09:2a:54:
09:18:ed:50:75:f2:38:ba:bb:62:1d:b7:c9:5e:99:
5b:a2:f7:ee:10:be:c5:7b:3b:5e:29:cf:67:82:5f:
ec:4e:78:a0:55:e0:27:44:e2:cf:ab:ff:63:fb:4d:
15:40:d6:e8:e1:92:b7:f4:7f:d8:b7:40:52:dd:db:
f9:48:90:22:1f:b9:f8:8c:3e:f9:86:e1:a5:5e:7a:
5e:f9:c4:72:90:1f:13:e6:c5:c9:6f:25:fe:c3:9d:
cb:31:2b:f1:88:21:0f:20:17:a9:27:bc:35:73:5f:
68:d0:4a:a9:3f:76:15:ab:86:cd:23:2e:31:fb:9c:
82:cb:67:3f:5d:04:db:94:0f:02:cc:53:f9:c0:3f:
1e:aa:22:82:6a:5d:c6:11:94:d0:57:3f:a3:1b:a4:
19:4f:8a:15:3f:9c:80:6b:5a:18:30:be:e7:39:31:
e3:70:e9:81:0a:1e:b6:14:36:2b:13:d9:fb:08:87:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:B3:E3:D9:C8:0D:38:F9:03:17:E8:8E:92:9D:C5:84:4D:5F:65
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QPCz49nIDTj5AxfojpKdxYRNX2U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.127.0.0/17
Signature Algorithm: sha256WithRSAEncryption
be:45:01:64:7e:34:df:7e:50:70:54:93:df:6b:2e:3a:fb:63:
7c:6e:d5:7f:d4:1f:73:92:06:7f:cf:a7:42:d4:4d:35:81:cb:
03:c2:1d:8d:f9:32:a1:6a:04:f0:31:75:7c:e2:69:dd:38:35:
f6:f9:00:a8:a3:cd:17:d6:a5:27:81:26:16:60:2b:d8:49:2f:
b0:1c:d2:e0:3a:b9:5d:18:0d:e4:52:ff:b3:60:87:0a:06:b8:
6a:90:be:ba:18:73:24:7e:63:4c:73:6c:ea:a1:60:2f:a2:25:
b6:5f:8a:d5:17:ca:99:73:5e:4b:10:9e:eb:a9:ae:d7:92:5f:
10:b1:3e:8b:26:63:e7:0b:1f:68:64:9b:2c:93:58:88:39:9f:
6e:b5:cc:57:a2:2a:fa:8b:d0:9f:69:3b:cf:46:ea:5f:a2:a1:
29:c0:fa:ad:f8:ea:8d:2f:54:49:44:94:d1:be:8c:6a:a5:fd:
56:fe:49:85:ef:86:17:20:23:ff:70:11:fa:81:c3:43:9a:a8:
57:e5:0f:0f:65:45:7d:c9:a7:9b:a6:5d:5a:d5:ec:29:19:d6:
2f:78:3b:90:8b:5a:7c:87:52:88:d9:7d:73:ca:5b:62:9f:62:
07:23:a1:9a:6f:26:1c:ca:28:41:77:18:63:c2:79:f0:ae:98:
0a:ea:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:53:16 2025 by rpki-client