
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
File: 8MqMY6cugCX5FMhF1bonYH7Of2M.roa (raw, json)
Hash identifier: knd4395KboAKrVGtrXxme87axar3HC2YtqkMGZtfxaw=
Subject key identifier: F0:CA:8C:63:A7:2E:80:25:F9:14:C8:45:D5:BA:27:60:7E:CE:7F:63
Certificate issuer: /CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Certificate serial: 30
Authority key identifier: 07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
Signing time: Tue 01 Jul 2025 01:33:30 +0000
ROA not before: Tue 01 Jul 2025 01:33:30 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 45677
IP address blocks: 192.92.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Validity
Not Before: Jul 1 01:33:30 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=F0CA8C63A72E8025F914C845D5BA27607ECE7F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:b1:5d:df:e9:92:e1:46:5a:b0:23:37:51:
7f:18:33:1a:45:a5:94:48:41:e9:8b:6d:b9:ad:44:
3c:4e:91:52:e3:cb:f1:53:65:67:84:68:e5:df:0b:
17:b9:56:c3:e0:79:17:79:fa:45:cd:f1:3c:1e:c1:
f7:66:c1:ba:3c:1e:78:92:74:84:1d:83:e0:e4:8f:
d9:32:28:52:7e:59:27:2e:5b:e0:bd:ba:dc:9c:5b:
34:2c:fa:8c:6f:0a:a5:8a:34:05:17:3e:bb:e6:be:
6f:15:ef:95:67:d4:94:25:cc:3c:4a:b1:f2:b5:93:
38:73:a8:a6:4e:00:f1:d4:32:2e:55:35:68:68:f0:
aa:4c:ff:4e:21:5f:50:a2:d8:3d:31:16:4e:1e:29:
ef:54:16:88:c6:08:c9:0e:c4:07:5a:f6:54:16:cd:
b4:fc:d0:ba:37:9a:3d:73:b8:55:e6:c0:c4:a0:1c:
6c:79:97:e3:96:42:c8:39:5c:45:11:99:bc:42:ef:
a2:cf:46:ea:1c:45:11:b1:fe:f5:13:df:a0:f2:13:
3e:4a:56:e4:c5:23:13:73:c3:f6:a8:ac:86:4b:5c:
e5:62:f7:68:6a:5f:7c:03:d5:e7:2b:c7:35:3a:2a:
b9:ff:3f:77:61:2d:c8:72:f1:38:0e:56:7d:88:87:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:8C:63:A7:2E:80:25:F9:14:C8:45:D5:BA:27:60:7E:CE:7F:63
X509v3 Authority Key Identifier:
keyid:07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.92.248.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:58:d1:dc:4b:d3:63:10:b8:67:3a:5b:18:d5:21:61:33:6a:
6d:fc:2e:34:53:7c:7c:f4:b2:41:91:1c:ab:ea:cf:c9:28:0f:
31:22:cb:6a:f0:4d:5d:0d:f4:a6:5b:f7:ce:82:72:64:75:b6:
e9:43:ca:55:fb:41:d7:11:da:a7:d5:71:64:91:67:f2:79:13:
72:60:58:e4:8b:55:1e:d4:6f:f0:95:10:e0:20:c9:1f:7f:dd:
aa:f6:08:48:43:23:9f:93:b3:d8:30:57:e9:6b:39:60:c0:47:
a4:b4:ee:87:cd:10:50:89:74:05:cb:2b:c7:ad:d9:2c:a7:29:
33:d0:0c:9a:3c:fe:6e:37:28:01:be:60:bf:fe:75:42:58:03:
ff:8c:86:e6:ac:81:65:78:d5:10:e9:91:1a:77:ff:a6:56:26:
56:07:fc:30:79:e3:07:48:5b:02:af:eb:f1:1e:9d:52:c5:0d:
55:10:8c:b9:b2:41:09:cd:d1:d8:f1:14:3c:8b:27:e1:f8:c4:
86:78:7d:6b:e6:7b:e6:a8:d0:f7:b5:8d:6e:b9:2d:a9:e6:0f:
a7:70:72:c5:a3:f2:bb:e6:bf:46:2e:cf:bb:a8:78:8f:20:5b:
98:5b:f5:43:07:5b:3a:7a:b8:ee:05:ea:d4:3e:51:df:c3:d6:
39:2f:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:02:19 2025 by rpki-client