
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa
File: Tg8PZoIof4hdUds-IDtG1hUkS00.roa (raw, json)
Hash identifier: ldRLfdb6OpaYh66+YzS4YAigBY/X0ERDxfS7i/EYylg=
Subject key identifier: 4E:0F:0F:66:82:28:7F:88:5D:51:DB:3E:20:3B:46:D6:15:24:4B:4D
Certificate issuer: /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Certificate serial: 14
Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa
Signing time: Thu 01 May 2025 01:30:22 +0000
ROA not before: Thu 01 May 2025 01:30:22 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 131921
IP address blocks: 210.158.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Validity
Not Before: May 1 01:30:22 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=4E0F0F6682287F885D51DB3E203B46D615244B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:48:c7:85:3d:cd:c2:0a:7e:67:1d:41:10:34:
63:68:af:60:33:49:81:fc:eb:92:70:09:58:67:6c:
18:d0:93:46:5a:3b:77:25:48:07:ff:dc:6d:53:c7:
da:df:ae:51:8a:ce:af:d5:4d:8d:4e:c0:7d:5a:3f:
49:b1:54:ed:c8:2a:59:fe:d6:77:2c:5b:c4:27:97:
1f:7d:f4:4d:3e:e0:af:58:5c:8c:4c:a4:21:48:0e:
16:f4:00:4b:37:3c:fb:7c:8e:51:35:a7:fd:9d:95:
33:7a:49:c9:22:52:2a:bc:50:a1:68:61:d9:2f:3e:
12:c7:0b:d5:75:db:e4:47:e8:d0:d8:7f:c5:88:0f:
4c:b5:01:36:76:94:25:84:e0:1d:45:e2:74:16:3d:
ed:00:3b:97:14:33:23:89:db:62:a3:61:5a:a3:7d:
99:1c:f0:ac:64:a3:e3:8c:3f:73:df:43:ff:d2:4a:
9e:eb:1f:a6:53:a6:22:83:e6:1b:9f:21:33:ef:7f:
bf:eb:eb:dc:6f:60:72:37:23:3b:2a:a1:77:ec:0c:
97:fe:07:3c:49:92:2c:92:57:24:f4:45:34:87:b9:
f4:93:60:99:cc:0d:eb:82:1a:68:cd:d1:d2:3d:7d:
b2:78:7d:ba:a0:6f:6d:ac:e5:58:74:08:3d:64:df:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:0F:66:82:28:7F:88:5D:51:DB:3E:20:3B:46:D6:15:24:4B:4D
X509v3 Authority Key Identifier:
keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/Tg8PZoIof4hdUds-IDtG1hUkS00.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
04:cf:9f:87:c7:e6:70:ed:cc:ce:2c:53:c2:9d:27:3f:8d:83:
86:2c:67:7e:03:46:5e:46:64:b1:de:5a:2b:07:db:9c:20:2d:
25:e8:94:ce:19:e3:f5:53:13:80:53:02:e6:95:02:0d:94:e7:
5c:17:0d:71:e5:cd:af:94:89:f0:9b:ab:88:d8:31:6f:49:ef:
a1:e8:9c:88:dd:7b:a1:26:0d:99:65:61:50:45:c5:b3:74:fa:
3f:10:3d:31:61:18:d0:5f:61:73:1f:da:05:56:58:74:8a:6a:
24:45:05:54:a2:c2:bf:3a:e9:bf:9d:b2:be:3f:49:95:e4:12:
92:54:66:ff:bd:12:68:f7:83:12:31:47:54:d7:76:0a:74:8e:
94:6f:52:80:d4:93:27:0b:bc:bb:c1:75:71:06:6b:16:ef:cc:
95:48:f9:07:7c:52:d2:97:f1:6f:59:e4:c9:52:e5:6f:36:f4:
0c:d3:1a:4a:b8:93:1c:c5:39:9d:0b:ed:3c:ad:8b:e5:43:bf:
dd:5e:f5:68:e3:90:66:9b:0e:88:3d:00:71:ab:77:f9:eb:16:
be:f3:de:75:c0:a5:d7:78:58:09:f2:d4:24:97:37:36:51:d4:
c0:49:13:18:28:52:61:f9:63:82:d0:33:73:c7:d4:57:ab:15:
36:d3:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:59:48 2025 by rpki-client