
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5nRRO3FqY0_z52OteZESkuLt6FU.roa
File: 5nRRO3FqY0_z52OteZESkuLt6FU.roa (raw, json)
Hash identifier: ZqFhyJwcqfVODumtaeWLr7v888Geij5GRQw3vU8aZTE=
Subject key identifier: E6:74:51:3B:71:6A:63:4F:F3:E7:63:AD:79:91:12:92:E2:ED:E8:55
Certificate issuer: /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial: 23
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5nRRO3FqY0_z52OteZESkuLt6FU.roa
Signing time: Sat 01 Nov 2025 01:33:06 +0000
ROA not before: Sat 01 Nov 2025 01:33:06 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 55385
IP address blocks: 202.213.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Validity
Not Before: Nov 1 01:33:06 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=E674513B716A634FF3E763AD79911292E2EDE855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:98:bf:9e:ac:7d:a2:ab:4d:2f:35:21:22:
4f:48:77:d6:75:d7:2e:4d:3d:97:31:96:ff:07:5f:
d1:e6:42:00:11:8f:ef:f7:86:0b:92:fa:ac:ab:a3:
5c:9a:11:17:10:d2:24:88:38:3d:dc:74:99:25:0d:
60:33:65:ab:1e:f1:5c:4f:d7:9d:7f:ec:1b:5c:6e:
b5:64:59:ed:63:13:27:0e:af:7c:07:3c:75:2a:a2:
f3:aa:a7:7a:82:29:94:7e:f4:30:05:be:a2:b7:82:
90:2e:5b:87:77:e9:2c:62:7d:c0:7b:7e:a0:6b:e1:
04:fb:b2:c5:d4:a4:44:40:92:91:c1:a0:e2:db:d9:
8e:fc:72:b6:b3:bb:d0:1a:4e:f7:96:59:70:a5:be:
92:8e:ab:8f:3d:2f:fb:24:a1:8d:39:56:cf:0b:5f:
8c:6c:23:d4:19:76:37:5e:e8:15:bb:27:e5:a3:d5:
8c:79:af:ab:1f:9b:57:6b:17:cc:62:26:e9:98:1d:
1e:8a:d0:e3:28:14:53:f8:1e:c7:ea:d1:48:e3:2a:
93:db:6a:e9:e5:73:d0:30:38:33:e9:16:4c:b9:8e:
74:fe:7c:a9:56:88:ae:0a:5c:3a:9d:92:a4:bf:5c:
01:18:57:b7:3f:44:ef:3a:d7:16:45:a5:0e:05:aa:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:51:3B:71:6A:63:4F:F3:E7:63:AD:79:91:12:92:E2:ED:E8:55
X509v3 Authority Key Identifier:
keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5nRRO3FqY0_z52OteZESkuLt6FU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.213.72.0/21
Signature Algorithm: sha256WithRSAEncryption
73:fa:96:3d:ff:7c:92:ab:89:2e:64:db:c7:0c:40:46:14:8b:
5e:e7:8b:1e:30:aa:70:86:5e:50:c0:5d:7a:a8:06:1b:aa:ff:
8f:c6:1f:f5:34:02:20:95:97:fc:8c:8b:6d:2b:6f:81:58:57:
5a:19:74:8d:e2:29:e1:3c:80:33:df:3e:72:f0:83:2f:99:c5:
d7:63:5e:18:3a:e6:fb:7e:72:0a:c7:01:2f:f1:7f:eb:17:64:
d6:03:65:b8:63:f0:37:a4:3d:47:19:7f:84:6b:c5:44:1e:05:
2f:70:bb:ca:1a:d3:e8:2a:1d:fb:10:86:f8:05:e2:39:3f:b8:
35:47:89:88:07:ef:32:ad:24:b7:60:65:b5:ee:9f:9d:89:23:
51:9f:65:11:2f:51:be:44:23:81:28:81:6f:9a:8b:92:7f:d6:
37:bd:2f:73:73:29:fc:57:df:d4:01:7b:f8:98:7d:76:38:d3:
bd:9b:1d:c5:5c:95:5c:89:9d:18:5d:fe:d5:72:53:4b:01:3d:
6b:f1:8e:9a:0d:e6:18:1b:81:c9:73:63:e6:d1:a7:f2:2b:2d:
bc:3d:15:09:16:1f:3d:12:8b:1a:0a:e1:0a:db:31:5e:71:0f:
bc:15:8a:e9:94:ab:e3:f0:18:83:35:68:41:3e:94:53:0f:7d:
54:dc:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:31:13 2025 by rpki-client