
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa
File: R5u91oNedQQfb-FWpf4x0qT_z2Y.roa (raw, json)
Hash identifier: nz0MarThB97UvcwMc7fkd/AWopdlBdyX8y0383ubUhI=
Subject key identifier: 47:9B:BD:D6:83:5E:75:04:1F:6F:E1:56:A5:FE:31:D2:A4:FF:CF:66
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0DCB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa
Signing time: Tue 01 Apr 2025 02:27:18 +0000
ROA not before: Tue 01 Apr 2025 02:27:18 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:27:18 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=479BBDD6835E75041F6FE156A5FE31D2A4FFCF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:40:9d:46:ca:b4:51:2a:c6:fc:66:db:b2:
36:3a:6b:77:f0:81:f1:e9:5f:e2:6f:78:38:80:0a:
a4:b1:04:e5:ef:88:7e:91:3e:32:8a:90:7d:c8:57:
58:27:b4:e5:94:2f:0e:f3:e9:3f:46:ac:51:8f:86:
29:38:8a:33:f1:bf:78:b7:ef:c7:a4:37:d2:e5:91:
45:e2:1f:b6:ce:7f:7e:ce:12:7e:fd:2f:31:4b:5b:
5d:cd:bb:e1:38:d6:a9:ca:a2:cf:16:2d:56:64:03:
df:59:bf:56:95:4b:bb:45:32:de:9a:6f:6b:4f:d0:
9a:6d:ee:48:76:af:ec:00:f5:f5:7e:9b:61:68:76:
ff:de:19:7d:72:0b:b8:e7:fd:19:d1:31:c8:2b:ed:
5a:3d:e2:78:51:0f:09:38:51:db:02:50:ce:5c:78:
ca:43:8b:aa:4a:b8:51:e0:2d:99:cd:0f:e0:36:f6:
c0:ba:f9:3c:5f:7b:af:53:51:e6:c8:db:ab:5e:88:
2e:68:92:f4:4f:8b:0f:30:eb:5a:2e:0e:51:06:26:
af:eb:f4:2f:97:2c:06:94:b5:8b:fe:27:b2:58:4b:
43:ce:28:b0:4c:f2:47:1a:09:3d:77:2d:3d:ad:f5:
42:9a:fa:1a:76:95:d4:1b:ea:35:d1:46:7d:a1:be:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:BD:D6:83:5E:75:04:1F:6F:E1:56:A5:FE:31:D2:A4:FF:CF:66
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.104.0/21
Signature Algorithm: sha256WithRSAEncryption
55:4b:c8:98:f1:e6:70:8d:09:74:59:86:84:5a:5b:88:c1:9a:
40:c2:f3:2e:e8:42:43:5f:6e:93:08:9d:59:b3:09:cb:cb:f1:
e2:21:f6:2e:45:55:7c:b0:b7:eb:59:fd:3c:d2:c1:2a:81:59:
e3:b6:13:6c:f3:db:46:68:f2:1b:b5:87:f4:c9:31:38:bf:9f:
4b:ee:28:35:6f:96:e9:e4:83:18:74:11:d7:3a:e2:8b:63:7d:
2d:fa:0d:dc:23:cb:a0:58:2a:e5:23:75:b4:1f:30:9a:bc:ca:
6b:35:57:4d:8d:be:b1:73:77:15:fd:07:25:a0:56:2e:d2:0a:
14:5a:ea:ee:62:37:6e:83:7d:5f:34:da:66:6c:ea:72:27:81:
1b:fc:1f:c0:3f:67:63:99:e9:98:68:4d:8d:20:79:03:25:37:
d0:b1:bd:d4:0f:0d:75:25:e4:54:c7:29:6f:b9:cd:60:39:65:
21:23:f2:dc:8f:f7:1d:0e:b9:a7:ff:dc:58:be:59:9e:2e:25:
5f:ab:fc:f8:bf:af:eb:eb:e2:4e:43:9a:3f:9a:01:87:1d:71:
c8:45:ff:a5:2d:a7:c7:3f:31:ba:64:4e:32:e2:1c:02:aa:56:
94:7f:80:38:c3:8c:f0:65:8e:08:38:b4:0e:b3:6f:53:a5:2a:
7c:4e:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:00 2025 by rpki-client