
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
File: GXjzuv14HLHDR4ilrwX79eY3Rjo.roa (raw, json)
Hash identifier: lP6AD3NtTBOV7FH6vQfcOKHXEuSPktONSHOVp/d8cYU=
Subject key identifier: 19:78:F3:BA:FD:78:1C:B1:C3:47:88:A5:AF:05:FB:F5:E6:37:46:3A
Certificate issuer: /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial: 0B
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
Signing time: Tue 15 Jul 2025 07:08:16 +0000
ROA not before: Tue 15 Jul 2025 07:08:16 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 152858
IP address blocks: 2401:b720::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Validity
Not Before: Jul 15 07:08:16 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=1978F3BAFD781CB1C34788A5AF05FBF5E637463A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:15:8b:a7:4f:5b:e3:6d:e5:c7:62:5f:0a:
26:59:e0:c8:5b:80:aa:55:31:20:fb:f1:e3:7f:25:
8b:8b:7b:b9:59:78:d5:fb:80:22:d4:8c:6d:33:c8:
8c:c2:5c:55:50:08:00:14:1e:07:72:57:a9:31:8e:
7d:b1:bc:e0:ec:6d:94:02:9e:12:43:74:5a:9a:c1:
65:ec:6b:9c:51:cf:ad:39:7f:b8:63:46:50:eb:3c:
9b:8b:bb:df:37:1a:6d:86:99:1a:2d:b7:44:51:d9:
74:ab:2c:e5:84:40:fe:a2:a8:6f:9c:e6:77:68:2d:
ab:99:e8:8b:8f:a6:c4:da:4f:6e:48:78:d2:21:db:
dc:8c:b5:51:6f:9a:ce:33:5c:ec:04:1d:4e:d5:cd:
0a:90:c8:d1:50:cc:45:a9:89:0c:fb:11:b1:29:8f:
eb:98:66:f1:84:ab:36:e3:86:f7:f9:d8:d7:f8:b2:
89:31:cc:c3:47:3d:2c:01:4f:f9:13:e5:bc:3a:f5:
74:f4:96:33:e9:28:f2:6c:40:06:5c:33:80:14:dd:
39:04:63:4f:70:a8:6f:62:40:c2:6f:0c:3f:46:7c:
b5:36:fc:b7:02:91:d2:4a:c9:87:28:16:41:56:53:
37:48:fb:fa:42:95:d1:5d:ad:1d:6a:51:70:e6:41:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:F3:BA:FD:78:1C:B1:C3:47:88:A5:AF:05:FB:F5:E6:37:46:3A
X509v3 Authority Key Identifier:
keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b720::/33
Signature Algorithm: sha256WithRSAEncryption
38:bb:47:b3:3a:07:1c:03:6a:b6:67:8e:8e:57:52:c1:84:68:
23:16:8f:c0:51:69:43:d1:8a:d4:5d:5d:e0:37:8c:b5:d1:11:
73:4c:f9:c2:cf:d4:94:a5:ef:11:ae:b5:a6:59:c5:09:76:ef:
4a:cb:cf:af:06:93:51:5b:f7:dd:1b:eb:11:37:39:37:ce:a5:
04:fe:83:6b:89:f0:5e:a8:ab:73:ee:83:c4:50:98:54:ed:6a:
8b:72:01:02:6a:f2:47:48:bf:89:70:8b:bb:22:a4:f6:f7:45:
53:2c:30:0c:db:21:cf:b7:38:40:45:df:20:db:ac:a2:47:31:
7c:39:f4:5b:8d:5d:cd:a9:6a:a5:48:91:0c:76:a2:e4:e1:6a:
51:2f:a6:d5:fd:50:e3:76:cd:c4:0f:30:23:2b:0f:7a:4d:9c:
c6:a8:b9:b5:28:a2:b7:1e:f4:f3:3b:e5:cd:db:b6:5e:f3:5e:
3b:b0:e5:0b:ed:f0:30:67:93:a1:c7:6f:32:e2:28:c1:e3:82:
ce:eb:f3:e7:06:7b:ff:01:1f:19:a5:25:66:7e:df:a2:d7:98:
a2:55:8d:80:b0:2b:41:b2:e1:7b:b5:a5:d9:c7:e9:1e:b2:84:
08:fa:46:df:64:1e:5d:9b:15:04:0a:72:ce:90:f5:65:68:4c:
da:41:02:f1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDdF
QjMzMjgyM0UxQzEzMjlEQ0U3NEFFOEVEN0QyNjBDQThGRDgyMB4XDTI1MDcxNTA3
MDgxNloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMTk3OEYzQkFGRDc4MUNC
MUMzNDc4OEE1QUYwNUZCRjVFNjM3NDYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKWPFYunT1vjbeXHYl8KJlngyFuAqlUxIPvx438li4t7uVl41fuA
ItSMbTPIjMJcVVAIABQeB3JXqTGOfbG84OxtlAKeEkN0WprBZexrnFHPrTl/uGNG
UOs8m4u73zcabYaZGi23RFHZdKss5YRA/qKob5zmd2gtq5noi4+mxNpPbkh40iHb
3Iy1UW+azjNc7AQdTtXNCpDI0VDMRamJDPsRsSmP65hm8YSrNuOG9/nY1/iyiTHM
w0c9LAFP+RPlvDr1dPSWM+ko8mxABlwzgBTdOQRjT3Cob2JAwm8MP0Z8tTb8twKR
0krJhygWQVZTN0j7+kKV0V2tHWpRcOZBZZUCAwEAAaOCAiowggImMB0GA1UdDgQW
BBQZePO6/XgcscNHiKWvBfv15jdGOjAfBgNVHSMEGDAWgBQUfrMygj4cEync50ro
7X0mDKj9gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NDAvRkg2ek1vSS1IQk1wM09kSzZPMTlKZ3lvX1lJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRkg2ek1vSS1IQk1wM09kSzZPMTlK
Z3lvX1lJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDQwL0dYanp1djE0SExIRFI0aWxyd1g3OWVZM1Jqby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgckAbcgADANBgkqhkiG9w0BAQsFAAOCAQEAOLtHszoHHANqtmeOjldS
wYRoIxaPwFFpQ9GK1F1d4DeMtdERc0z5ws/UlKXvEa61plnFCXbvSsvPrwaTUVv3
3RvrETc5N86lBP6Da4nwXqirc+6DxFCYVO1qi3IBAmryR0i/iXCLuyKk9vdFUyww
DNshz7c4QEXfINusokcxfDn0W41dzalqpUiRDHai5OFqUS+m1f1Q43bNxA8wIysP
ek2cxqi5tSiitx708zvlzdu2XvNeO7DlC+3wMGeTocdvMuIoweOCzuvz5wZ7/wEf
GaUlZn7foteYolWNgLArQbLhe7Wl2cfpHrKECPpG32QeXZsVBApyzpD1ZWhM2kEC
8Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:01:09 2025 by rpki-client