
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
File: 35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa (raw, json)
Hash identifier: IQWFrw28m+md+UU5S2Cq4IZ3+EjaYMWJhWL7N+pHQuw=
Subject key identifier: DF:9A:73:BF:64:E3:6C:0F:CC:8F:91:A8:AB:01:E1:09:08:59:03:19
Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial: 4B
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
Signing time: Tue 01 Apr 2025 01:30:33 +0000
ROA not before: Tue 01 Apr 2025 01:30:33 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 59127
IP address blocks: 2401:7ec0:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Validity
Not Before: Apr 1 01:30:33 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=DF9A73BF64E36C0FCC8F91A8AB01E10908590319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:0e:49:63:ab:82:9c:49:0e:d0:b7:c6:4a:
4a:02:a5:13:d5:4d:6e:e9:fa:d9:a5:c7:53:89:07:
c9:c3:ad:a3:8c:71:1e:f1:54:27:f6:7b:42:96:54:
11:47:f6:c0:40:50:d0:ab:dd:cc:a6:0c:9a:07:ce:
89:cc:f4:16:d1:6a:5e:da:4c:66:08:d8:c9:52:72:
3e:fb:2c:2d:cb:30:32:da:b8:85:4f:be:38:b1:38:
6a:dd:14:fc:7d:47:eb:13:81:59:ba:9d:e6:8f:b3:
4f:96:7d:c2:4f:6e:11:61:bc:65:69:e2:a2:fa:cd:
5c:0a:23:5b:a1:20:d6:a2:e6:20:93:41:1e:d3:6d:
41:5a:2e:97:30:9a:84:16:20:d2:02:72:39:b8:c7:
9e:d0:84:9a:15:cb:c1:62:89:a0:0e:24:0f:b0:f4:
b1:60:3b:5c:15:ac:f3:2d:b0:99:f7:d7:7c:d4:63:
1d:fb:21:77:fe:cd:e9:3d:7f:7b:a2:d9:01:9f:be:
69:ce:18:61:29:bd:2c:2c:5b:0f:e9:84:4f:d3:92:
ee:93:81:08:27:bf:36:9c:40:8f:40:ba:2d:22:4a:
97:61:2f:36:03:e6:61:36:ee:a9:06:62:6f:66:36:
01:ab:1a:95:f1:ff:d5:d6:b1:03:b8:62:0b:dc:ae:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:73:BF:64:E3:6C:0F:CC:8F:91:A8:AB:01:E1:09:08:59:03:19
X509v3 Authority Key Identifier:
keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7ec0:d000::/36
Signature Algorithm: sha256WithRSAEncryption
4b:e5:2b:f0:24:2d:18:32:16:20:bb:c7:cd:4e:bf:ec:6c:83:
12:31:49:c4:d9:66:07:4e:11:69:e1:e9:b0:c8:f2:ee:d7:d7:
2c:46:5d:34:95:28:03:13:f2:94:32:25:e7:a9:25:11:ff:f8:
7f:28:c1:c3:08:21:ae:a9:f6:62:c8:46:5b:b2:d8:cc:be:13:
4e:e9:50:7d:b4:11:6f:7d:54:bb:de:8b:dd:1f:70:65:41:3a:
aa:ae:a3:5d:06:71:a7:96:66:cc:b3:fc:59:af:bd:91:9f:db:
95:e3:70:96:de:bc:6e:9a:a3:43:8a:e0:03:79:44:0c:19:54:
31:df:55:98:2c:bd:ea:61:80:82:4d:94:6a:b2:96:fc:8a:7d:
b1:da:49:59:b0:18:ed:a3:1c:a7:66:cd:5b:98:e6:e2:f1:8b:
e2:aa:7a:ca:c2:eb:52:8f:55:52:c3:72:5e:ad:be:8f:50:82:
96:f9:2a:6a:7f:50:2c:1f:f8:3c:f6:70:aa:a5:8a:2d:00:35:
93:65:1d:92:ce:4c:bf:45:a8:91:ee:98:44:5c:b6:68:57:ff:
ad:69:b7:27:dc:2e:7c:76:2b:0e:be:7e:a2:d0:4a:97:6f:47:
10:24:95:3f:b6:02:56:ac:9d:18:42:c5:d2:f2:a5:35:7f:44:
89:da:4c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:48:13 2025 by rpki-client