
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
File: 8DU5-cjzJjA-36jBkNxTX-P62Q8.roa (raw, json)
Hash identifier: DE5xMAle+NwQawZqvvEGF9LIE8lVHRrTFQuBvNU4RWk=
Subject key identifier: F0:35:39:F9:C8:F3:26:30:3E:DF:A8:C1:90:DC:53:5F:E3:FA:D9:0F
Certificate issuer: /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Certificate serial: 15
Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
Signing time: Thu 17 Apr 2025 02:35:51 +0000
ROA not before: Thu 17 Apr 2025 02:35:51 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 37922
IP address blocks: 118.91.192.0/19 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Validity
Not Before: Apr 17 02:35:51 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=F03539F9C8F326303EDFA8C190DC535FE3FAD90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:b1:60:ac:dd:77:cb:c8:49:b0:55:f1:f4:
f3:0d:85:8c:61:63:98:7d:9b:c6:db:3b:65:b3:9b:
e4:3d:6f:69:bb:cd:23:28:0f:29:88:65:5f:e2:e1:
39:35:ae:a4:d8:4a:d6:70:9f:3a:aa:40:d9:5f:83:
0d:04:e6:47:9a:95:92:d4:9e:56:19:74:8b:2e:47:
1c:89:f1:13:41:03:e1:1b:0c:88:8c:2c:93:3a:90:
fe:fe:6e:0f:9b:61:b7:4d:bd:38:df:cf:0a:d3:22:
36:78:c7:3e:ac:a9:b8:1f:50:27:59:16:5a:3e:7f:
59:d0:b3:08:ed:2a:ff:54:ad:1a:ba:76:f2:77:9a:
3f:eb:aa:dc:c4:22:c1:97:4b:6d:16:57:26:45:d8:
e8:db:32:f5:af:4b:a4:d7:06:b1:b3:ca:b9:e5:f7:
d6:55:23:ed:21:4a:8f:1d:49:96:5c:39:ea:a1:af:
c4:63:fc:5e:59:cd:0c:89:67:31:dc:8c:74:54:bf:
ad:e6:3c:e1:ac:07:a5:9b:14:c1:26:19:69:5e:da:
99:18:a9:5f:82:45:42:aa:f9:b2:d6:2a:38:05:7c:
db:c8:5a:17:b1:f8:b9:a9:dd:96:7e:14:9c:3e:3d:
ce:9c:fa:f3:db:e1:bc:ab:78:59:6e:dc:f8:28:81:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:39:F9:C8:F3:26:30:3E:DF:A8:C1:90:DC:53:5F:E3:FA:D9:0F
X509v3 Authority Key Identifier:
keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/8DU5-cjzJjA-36jBkNxTX-P62Q8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.91.192.0/19
Signature Algorithm: sha256WithRSAEncryption
40:ed:5b:4e:ab:9a:55:02:1d:d1:d6:7d:e7:cb:27:02:92:2b:
1f:7e:95:b3:37:49:7d:5d:3a:c2:c7:be:9f:cb:e2:df:8a:a5:
c4:e1:40:e6:d5:1f:20:c4:35:7c:e4:76:09:4a:94:51:33:cf:
ca:ce:68:20:59:f1:0d:d8:86:2c:f2:84:e8:8f:12:66:cc:dc:
28:ca:f5:ba:04:94:95:6f:6b:30:23:f3:25:2e:ae:d2:70:8f:
e4:a5:dc:69:e0:f3:af:4f:01:d7:32:ab:81:9a:99:84:18:2e:
c2:d2:29:04:0f:68:11:3b:0e:83:80:f3:83:c9:b2:52:db:be:
f9:0f:aa:19:5e:52:fe:df:14:b4:ad:82:ea:b6:73:29:00:4d:
ec:fa:45:e0:11:01:99:e1:37:0f:60:ae:20:d8:43:b5:94:92:
4f:2f:30:39:1f:29:48:8e:9c:65:e3:4f:6a:81:e7:a0:a6:21:
36:9d:e7:74:8e:87:47:a7:1b:d9:3e:b4:09:bb:d9:b8:01:e5:
a6:61:14:68:82:f6:1f:b7:5d:a7:27:d5:b8:78:de:61:38:2a:
dd:cb:59:cc:bc:c1:86:59:80:ed:78:3b:b7:12:4d:7a:eb:ad:
88:0d:51:56:40:80:16:0f:b2:1d:7f:76:a4:7f:17:09:57:72:
a8:83:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:16:42 2025 by rpki-client