
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
File: sDRrIailKsw2x5Hx5AueVoZY_fE.roa (raw, json)
Hash identifier: hqrO0n8R9IV/tS+ncadzJAX3DIcMk7HZrRtkhKOAAh0=
Subject key identifier: B0:34:6B:21:A8:A5:2A:CC:36:C7:91:F1:E4:0B:9E:56:86:58:FD:F1
Certificate issuer: /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial: 1B
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
Signing time: Thu 01 May 2025 01:30:13 +0000
ROA not before: Thu 01 May 2025 01:30:13 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 9354
IP address blocks: 2405:7000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Validity
Not Before: May 1 01:30:13 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=B0346B21A8A52ACC36C791F1E40B9E568658FDF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:4a:f2:aa:e4:06:58:19:c9:7d:11:64:7e:
15:6b:a5:83:2e:8b:d0:8d:b8:64:33:ce:4e:9f:17:
cd:f0:25:a8:da:2a:04:48:f9:24:d0:84:56:e9:0a:
29:13:7b:7f:17:c2:08:73:71:7b:1e:08:8b:33:db:
01:9a:7c:13:31:64:a9:05:85:6a:5d:72:2c:ab:e4:
b1:4b:14:da:ef:83:15:d7:dd:6d:79:92:15:23:2c:
fc:03:ee:3f:3e:60:11:2f:21:b5:e5:62:7f:fc:68:
f3:fb:35:c9:70:78:03:a3:bc:d2:aa:eb:d1:63:51:
cd:f8:35:17:4e:fc:32:69:09:f7:ed:05:80:26:53:
fe:f3:b2:a6:ac:16:d4:71:6b:93:16:78:f8:70:a7:
9b:cd:89:41:89:dd:b6:e6:a1:bd:33:37:90:e6:df:
35:08:8c:4d:24:00:61:ec:de:3a:a9:6f:43:9e:be:
a2:46:91:3e:f9:68:e1:4f:ba:db:b0:d6:60:ef:65:
e8:47:e5:c4:bf:63:30:a6:3c:c5:8c:38:73:06:6e:
6a:0c:39:3f:1b:6f:c9:dc:fe:e5:2a:47:12:c9:a8:
88:58:c3:5d:f2:63:be:cd:2b:57:7c:ce:a3:ad:ed:
15:b3:81:1e:9b:bf:cb:40:51:74:98:7d:22:a9:23:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:6B:21:A8:A5:2A:CC:36:C7:91:F1:E4:0B:9E:56:86:58:FD:F1
X509v3 Authority Key Identifier:
keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:7000::/32
Signature Algorithm: sha256WithRSAEncryption
73:24:41:bc:49:3b:01:ae:7e:a1:b0:c4:e4:40:82:1b:5e:dc:
8b:80:e8:9c:e6:d5:d0:0f:07:33:57:aa:0b:93:56:91:8e:69:
db:94:47:fa:4f:29:33:9a:6a:c8:33:ea:51:ed:24:65:08:6a:
be:ea:8e:51:13:9a:79:20:db:f3:d4:4d:98:c1:f5:fc:7a:11:
27:95:4c:b1:20:d3:55:ce:8a:a3:8a:f8:2b:57:1c:48:ba:cd:
60:20:e1:12:3f:3e:8e:dc:15:60:2b:0c:ca:6b:5b:23:d4:e2:
8d:b4:ef:ac:9d:ce:1d:45:76:6f:a9:18:f3:7c:4b:f3:cf:8a:
b3:3b:1d:e5:c7:01:0d:f9:33:ae:87:d0:72:70:c4:95:5b:1e:
e1:6f:86:95:9b:11:90:f0:a1:b9:a2:65:46:df:c1:b8:32:23:
d0:9e:b8:d4:84:05:40:7a:c0:86:aa:36:61:9e:cf:75:9c:04:
55:af:db:d6:81:e0:0b:69:76:f8:42:77:42:40:8b:01:55:85:
be:39:3b:6e:55:58:ad:e5:6a:fa:31:ac:44:8e:66:03:5c:33:
7b:e8:0e:81:75:44:b7:2f:f4:06:91:87:3d:4e:25:b6:14:c6:
68:0b:3f:0a:86:0a:5f:98:4a:64:92:e1:11:4d:e2:d6:25:17:
75:34:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:12 2025 by rpki-client