
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa
File: SRw5jwxGIUc9kGcTyexNZmNm4k4.roa (raw, json)
Hash identifier: KSyfW/NgHqg93Ix5kgXP6y5qlHrwSnkUlhIVDtNANe0=
Subject key identifier: 49:1C:39:8F:0C:46:21:47:3D:90:67:13:C9:EC:4D:66:63:66:E2:4E
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 71
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa
Signing time: Fri 31 Jan 2025 01:31:42 +0000
ROA not before: Fri 31 Jan 2025 01:31:42 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 45680
IP address blocks: 218.100.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Jan 31 01:31:42 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=491C398F0C4621473D906713C9EC4D666366E24E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:4a:6c:79:c8:0d:74:91:ab:a3:05:ae:f3:
23:2c:0c:6f:a8:f9:b2:31:99:e9:2a:31:5a:3a:20:
81:01:37:eb:09:e0:0b:b5:71:13:fd:b1:97:80:00:
26:a8:63:7f:25:2a:53:5b:9a:be:a6:47:e5:59:75:
d6:9f:c3:d3:fc:2a:79:32:fb:81:3f:aa:7b:cd:01:
1d:b6:3e:39:39:7e:53:31:6d:09:86:1b:25:00:35:
cb:ee:35:be:74:40:3e:5b:b7:ad:93:83:72:20:90:
61:90:bd:94:12:b4:28:98:75:1c:46:db:a5:42:24:
ce:78:0d:7a:ad:50:d5:20:e1:2a:a2:a8:2c:58:f4:
86:b1:60:db:d7:14:1d:2e:f0:2a:3c:79:12:64:73:
3c:e7:7e:52:73:00:b5:f7:51:34:20:d2:43:5f:56:
cb:20:ff:19:a1:f7:8b:3a:c2:75:58:40:a9:ef:3b:
7f:f8:84:95:5e:89:63:da:61:bc:24:36:c9:1b:1c:
e8:09:a8:77:f1:5f:b9:cb:38:de:73:05:44:5f:05:
6d:a8:0c:74:9b:2f:c7:af:e2:7b:5e:d8:16:bf:7e:
69:a4:b1:d1:19:90:92:e6:1b:00:a2:6e:f7:81:2c:
01:1d:64:be:cc:95:7f:07:67:9e:d0:54:ec:2d:fc:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:39:8F:0C:46:21:47:3D:90:67:13:C9:EC:4D:66:63:66:E2:4E
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/SRw5jwxGIUc9kGcTyexNZmNm4k4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.100.67.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7f:8f:b3:58:15:a4:21:b7:cd:12:19:2a:0c:8f:bf:01:34:
da:fd:48:42:17:b9:63:9c:67:92:66:07:93:0a:81:fd:d5:aa:
17:81:a5:04:45:cb:f6:9d:ff:0d:6b:e7:0d:22:3e:b2:d4:e8:
c4:22:f7:55:fd:c4:1d:c4:b2:8e:a9:e2:35:8a:4e:a4:01:09:
cb:38:a1:1b:d8:7e:46:49:af:12:0d:f8:c1:82:49:4c:54:8c:
f1:ad:85:20:7f:52:05:9d:75:95:3c:33:5e:15:18:2e:57:f4:
42:42:19:34:b9:00:44:de:53:da:39:77:46:3b:c7:36:f1:a0:
77:cc:06:55:fe:67:03:44:17:cb:b5:7c:33:12:e1:6d:33:5b:
0f:a3:64:d1:02:ff:89:95:8c:89:09:5b:0f:f3:f1:d3:2f:25:
be:19:20:f5:61:c8:89:0a:07:40:48:84:ea:33:0c:57:76:42:
45:78:aa:54:b0:03:15:1e:19:68:ba:71:8c:3d:0d:3f:b5:84:
da:73:44:41:3f:9b:bc:dc:90:cd:8a:2f:87:18:31:1e:f9:1e:
3c:0a:1e:39:ac:ff:74:f7:b6:fa:73:35:8b:ed:34:49:2b:0c:
ae:74:e2:1d:b9:4c:53:5c:ee:2a:f7:f7:ed:1b:ac:95:4e:37:
fe:05:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:40 2025 by rpki-client