
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
File: HLqoiMZmumxFyuVo_nxWbepNzbQ.roa (raw, json)
Hash identifier: K7bglTYp5jUzwQl6iIDQbNzjZ81kgbXhm+wyb6h+7dY=
Subject key identifier: 1C:BA:A8:88:C6:66:BA:6C:45:CA:E5:68:FE:7C:56:6D:EA:4D:CD:B4
Certificate issuer: /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial: 53
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
Signing time: Tue 01 Jul 2025 01:35:50 +0000
ROA not before: Tue 01 Jul 2025 01:35:50 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 38651
IP address blocks: 103.109.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Validity
Not Before: Jul 1 01:35:50 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=1CBAA888C666BA6C45CAE568FE7C566DEA4DCDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:f7:dc:4c:35:80:28:ad:b6:ba:d4:43:5a:
ac:85:3c:8b:4e:d2:6c:c7:81:20:24:35:c9:27:7d:
ee:c8:a2:2f:a9:3a:fa:ab:29:bd:92:a3:6b:8f:7a:
e0:78:5f:c3:be:d3:fd:c1:76:06:38:cd:7b:d6:31:
18:c0:cd:54:e2:0c:f2:18:d4:7c:fa:97:eb:e4:af:
c8:3a:5a:8b:27:66:ab:73:f6:90:7b:1b:e3:05:02:
59:c6:04:6b:25:ea:6c:dc:6a:42:fa:61:97:38:a7:
f8:48:53:0b:eb:c1:94:cb:17:08:9a:ae:10:a4:68:
b4:06:b9:64:53:a4:77:a9:75:5a:c1:b5:dd:30:7f:
cc:32:b2:3d:4a:85:cc:92:06:08:19:a4:62:f1:22:
0d:b7:10:bd:ef:05:f2:c3:b6:39:23:13:75:5c:d9:
c0:29:9d:35:08:9a:0a:c3:ba:9e:ed:9b:e4:20:37:
9a:7b:fc:6a:62:7e:f0:f8:23:2c:db:1f:9a:4d:ad:
cd:7f:a8:fd:12:e8:2b:3e:9d:c4:6f:2e:9d:98:db:
c8:7e:b0:34:fa:ef:f7:46:4b:42:f6:b6:18:11:da:
c8:43:ff:8b:03:77:ca:33:19:96:3a:0c:bd:ea:1d:
15:d4:e1:ed:61:47:6c:5e:43:4b:70:e1:4d:c2:54:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:A8:88:C6:66:BA:6C:45:CA:E5:68:FE:7C:56:6D:EA:4D:CD:B4
X509v3 Authority Key Identifier:
keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.240.0/22
Signature Algorithm: sha256WithRSAEncryption
85:0d:2a:9d:e4:17:d2:1c:85:e4:49:05:98:84:0d:4c:cc:77:
85:76:f1:15:71:3b:82:25:e5:dc:ad:fd:32:92:1d:c3:63:91:
72:22:53:62:cd:fc:36:1e:20:a8:bf:60:12:69:a3:76:5c:e3:
4e:3a:6d:6e:16:37:0b:9d:10:e2:0d:2b:10:86:29:3b:3a:74:
46:68:86:d0:68:62:dd:de:f1:d0:48:2a:d3:f6:fb:2d:2c:2f:
46:d2:1d:12:dc:cc:ab:d9:63:10:ee:a9:11:2f:a9:80:24:c6:
55:1a:0b:2e:42:2d:b3:06:a1:6d:0f:08:63:a7:e5:7a:e7:73:
1c:e9:4a:6d:59:ff:bd:d0:4f:c3:79:fd:09:61:20:55:66:82:
85:99:ad:79:13:75:f6:ee:2e:4c:d5:20:ee:5f:ed:83:6e:0c:
97:b5:35:2c:19:f1:ea:d5:f6:65:b8:4b:1e:ab:95:7e:82:b7:
35:c5:19:71:0d:60:2d:f7:56:77:20:73:dd:fd:8d:eb:82:dc:
91:91:f3:0e:c8:6c:2c:a0:b6:a2:6c:a7:ec:c3:4f:58:0b:2f:
26:a9:a2:4b:9f:40:f0:14:28:bb:7b:26:c0:30:9e:dd:e2:25:
79:f0:cf:06:76:72:7a:b0:45:7a:43:f4:1a:e8:e6:ef:81:0c:
17:20:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:55 2025 by rpki-client