
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/lFynpGj1fQD3UFh9NiL1pRWEYCU.roa
File: lFynpGj1fQD3UFh9NiL1pRWEYCU.roa (raw, json)
Hash identifier: djOVWtPGj3ctMPsgYrCCz59qGBRYZdylwqQ+8AZMgt4=
Subject key identifier: 94:5C:A7:A4:68:F5:7D:00:F7:50:58:7D:36:22:F5:A5:15:84:60:25
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: D4
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/lFynpGj1fQD3UFh9NiL1pRWEYCU.roa
Signing time: Thu 01 May 2025 01:29:10 +0000
ROA not before: Thu 01 May 2025 01:29:10 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 2518
IP address blocks: 125.192.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: May 1 01:29:10 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=945CA7A468F57D00F750587D3622F5A515846025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:e0:e8:39:29:be:9f:3b:44:23:77:27:91:
d4:62:48:5e:6a:74:18:0f:b7:6d:f9:f8:b7:6c:11:
1a:58:09:86:17:82:0e:74:c0:01:8e:5e:b4:9f:dd:
42:90:46:eb:8d:f4:0e:0d:6e:95:2e:19:12:97:7a:
0d:30:87:75:9c:12:fc:40:1d:7a:48:e8:a2:74:ca:
80:da:09:41:cc:58:76:64:5d:cc:81:40:6b:dc:64:
61:5d:37:f4:25:3a:36:d2:7d:4e:d7:35:20:c7:81:
6b:a1:e8:e4:a9:f6:cf:00:0f:ee:4d:a5:ea:75:88:
76:8f:f8:0e:52:b5:a0:4d:e8:77:d9:1d:08:c1:0a:
e0:ac:bd:d4:e5:a1:c5:cf:68:32:54:38:0d:d6:a0:
71:20:ba:92:56:e1:32:e3:de:a1:32:ae:b7:b9:84:
f5:8f:b6:87:76:a7:7a:4e:c1:cd:41:5c:7e:53:45:
a2:03:3d:32:fb:b6:11:24:6f:22:e8:4c:16:48:9a:
90:ac:4f:3d:1a:50:60:3e:60:c7:d3:05:39:bf:12:
50:79:18:35:92:d4:76:7d:f0:52:2a:aa:59:2c:0c:
f2:c0:0e:35:2c:ba:89:79:0d:0f:97:86:a0:cd:5c:
a5:d2:59:12:4d:9e:79:d5:c2:40:0c:c9:34:a0:bd:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:A7:A4:68:F5:7D:00:F7:50:58:7D:36:22:F5:A5:15:84:60:25
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/lFynpGj1fQD3UFh9NiL1pRWEYCU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.192.0.0/13
Signature Algorithm: sha256WithRSAEncryption
16:b3:ba:8d:ba:38:75:08:68:6e:8e:a5:aa:08:b4:1e:e7:95:
e5:0d:0a:71:40:47:87:d0:58:52:4e:6b:e1:7c:ff:c3:ce:94:
70:06:cf:a7:de:b4:d1:6e:26:de:12:78:fa:1e:a9:ed:4e:45:
42:a9:2e:19:1f:9f:89:cd:f0:5f:51:d3:3b:c4:ff:aa:97:1c:
3e:4b:4b:a7:04:f6:bb:07:a7:f7:06:6c:6b:02:c6:e0:0f:09:
74:20:8f:4b:f3:4a:51:5d:48:8b:df:3f:d2:9f:ba:82:a6:76:
3b:d4:75:09:8b:00:e5:70:b8:71:0d:91:d3:8e:d4:2e:65:b0:
4a:52:fd:19:28:17:a6:0d:34:01:47:3f:56:7e:fb:08:51:c1:
11:65:6a:bb:cc:bd:39:ef:a6:27:fa:a2:a7:35:8d:7d:1b:e5:
29:91:56:02:4d:4d:31:e4:1c:cf:f6:ff:3d:c1:86:e6:71:c4:
13:67:23:43:87:88:c1:80:f9:0e:e0:51:49:6c:dd:5f:33:60:
75:fd:e0:55:b6:82:3a:f0:d1:50:ca:03:31:c5:15:68:bd:df:
06:78:cb:ef:91:90:13:0b:fb:d9:0c:20:d1:fc:fc:de:27:a2:
e2:66:21:97:13:3b:1d:9a:00:78:a6:3a:54:03:b9:7f:bb:75:
40:3d:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:54:59 2025 by rpki-client