
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
File: d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa (raw, json)
Hash identifier: 14LCYv+M1QAE6geWjma/muR7/AjjGBrPv4rInpw3ZD4=
Subject key identifier: 77:F5:20:D5:A8:9B:3A:57:C1:3F:A4:CD:0B:53:7F:64:CF:74:3E:7A
Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial: 68
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
Signing time: Sat 01 Nov 2025 01:28:12 +0000
ROA not before: Sat 01 Nov 2025 01:28:12 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 131971
IP address blocks: 202.1.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Validity
Not Before: Nov 1 01:28:12 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=77F520D5A89B3A57C13FA4CD0B537F64CF743E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:98:73:2d:f5:d1:a8:35:5e:c7:df:eb:a1:
33:d5:f3:b4:52:92:72:e0:1c:03:29:f2:44:9b:b8:
9d:a4:9d:3f:b6:12:c7:46:28:e7:a8:eb:dc:5b:b3:
ff:10:23:11:68:a7:b8:c2:85:4d:70:7c:60:a6:d7:
e4:3a:7c:75:e6:75:d5:c8:6a:77:63:a5:35:4a:15:
1e:a0:c0:b0:a6:59:04:41:60:d1:da:a9:73:9b:73:
23:6c:b7:8e:12:32:7d:ec:6d:d9:1d:6a:54:6f:17:
38:45:31:e8:6b:60:83:dc:ef:1e:7f:7e:d7:a9:da:
16:4f:29:55:7b:23:09:cd:e6:96:90:86:b1:32:88:
90:e0:97:16:3a:ff:25:77:f7:39:65:9f:37:6a:5f:
c0:c3:14:5e:c7:41:18:04:f4:44:c7:c0:e8:48:f8:
41:7f:55:e0:68:f7:3c:0c:ba:ed:41:5b:9d:f9:54:
9c:40:61:e0:dc:45:c0:62:f5:08:bb:96:ea:de:6a:
7e:2b:31:d8:61:3b:17:be:75:6a:8c:50:d6:30:dc:
2e:8a:3f:dc:a0:72:1c:e7:64:5f:72:5e:ba:fa:5a:
29:45:10:c1:3d:43:b3:73:bd:f8:c2:cb:b4:99:77:
05:ef:e4:ff:70:3e:b8:84:77:a9:5e:25:50:ca:d0:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:20:D5:A8:9B:3A:57:C1:3F:A4:CD:0B:53:7F:64:CF:74:3E:7A
X509v3 Authority Key Identifier:
keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.1.215.0/24
Signature Algorithm: sha256WithRSAEncryption
90:73:2d:8c:85:32:12:a0:3f:2c:cf:1f:b0:ea:d3:ce:b2:12:
fe:8e:d3:74:91:e8:93:a4:ae:40:0b:61:7b:36:c4:d3:16:9a:
7b:e2:0f:d7:94:00:08:56:27:5d:e2:1e:b3:99:bc:ad:9e:b8:
e0:40:3f:71:cb:16:40:d7:04:76:1b:bd:ea:89:de:ef:b4:42:
da:07:44:13:87:26:f0:e1:c6:7b:fa:1a:05:52:c7:c7:90:62:
d1:4c:95:e9:8d:91:14:78:9e:4b:73:47:36:f8:a2:e6:bf:e2:
5b:f3:58:7c:40:75:0a:fa:50:5f:5d:12:43:77:d2:44:05:c0:
64:47:51:2b:e6:cb:be:1f:e6:fc:63:5f:ee:52:d7:84:45:93:
87:4c:9f:65:c0:f3:26:c9:c9:6b:43:15:c0:6b:3e:23:38:fe:
a0:a2:b9:73:38:37:34:4e:7c:fb:c2:d6:97:e4:d8:3e:82:c0:
44:32:96:31:71:af:c1:72:5d:54:37:82:a8:36:b7:dc:2d:fd:
2e:93:55:e5:d0:62:0c:77:f6:ec:c3:ca:b2:49:d0:91:cd:58:
86:93:e1:ea:59:41:b0:14:dd:7c:e9:23:fb:df:67:71:d4:d6:
7c:4a:4e:4e:ff:f9:e3:52:e2:ea:e5:cf:1c:8e:9e:43:d6:37:
40:ac:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:10:38 2025 by rpki-client