
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
File: NUGW5NHly6P8gC7EV2OFf-3uxdw.roa (raw, json)
Hash identifier: Ahn61O7kRfpUWbKm5QExvsUXtTzW3OaQ3/AweG0KRe4=
Subject key identifier: 35:41:96:E4:D1:E5:CB:A3:FC:80:2E:C4:57:63:85:7F:ED:EE:C5:DC
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0417
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
Signing time: Thu 01 May 2025 01:48:43 +0000
ROA not before: Thu 01 May 2025 01:48:43 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 10013
IP address blocks: 182.163.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 1 01:48:43 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=354196E4D1E5CBA3FC802EC45763857FEDEEC5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:b8:7d:e4:f7:f5:0e:80:b7:de:f5:d1:de:
de:75:cf:8f:5e:49:cc:31:3c:86:00:d4:ed:be:fb:
b7:1d:0a:f5:3e:2a:48:a6:8b:14:ce:95:09:90:51:
3b:47:32:ac:a7:9a:f1:53:da:b1:4c:63:bc:79:12:
4b:01:a1:e4:9c:78:46:36:cd:06:a6:67:32:91:f0:
94:0a:f1:1d:bb:7a:01:81:a4:91:b0:ec:bb:0c:96:
f0:e4:6c:82:7b:96:c3:27:e9:82:46:30:7c:bd:25:
93:a0:56:97:b7:ff:12:52:eb:58:db:e8:9b:4f:8b:
a8:4b:58:d3:04:ac:28:ff:b6:c2:78:27:00:02:07:
15:d5:20:3e:16:52:5b:d0:c1:0f:c3:52:8b:3b:d5:
6c:bf:2d:8e:f9:3a:8a:fc:74:6f:8a:e4:dd:eb:b1:
c7:4d:e6:9c:a8:1d:f8:aa:d6:35:fc:bc:0b:67:a7:
1d:13:df:4d:1a:8c:23:31:13:4f:ce:2a:b0:29:5f:
ee:bf:b2:49:e9:a7:17:a7:30:ad:16:2f:81:05:07:
a7:4f:b0:91:cd:8c:57:e9:41:ed:9f:c3:9d:53:61:
50:21:1c:bb:2a:65:dc:7f:9b:b6:36:0b:d8:75:38:
e6:aa:ca:1b:bc:dd:00:25:df:2b:79:a6:84:a4:28:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:96:E4:D1:E5:CB:A3:FC:80:2E:C4:57:63:85:7F:ED:EE:C5:DC
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.163.32.0/19
Signature Algorithm: sha256WithRSAEncryption
32:3f:83:9e:7f:9a:b5:94:09:19:70:78:5b:8f:d0:92:ad:b2:
89:1c:26:5b:2b:87:59:45:cd:07:34:02:d8:88:0b:1e:11:0d:
d7:5e:f5:07:b7:6e:68:d8:64:a9:0d:35:fe:e7:55:b6:c2:c4:
79:4a:4a:22:36:80:93:3c:a2:5b:92:57:ab:df:0d:04:68:58:
e6:3b:3e:31:61:5c:3a:22:53:d1:ef:43:a1:39:2a:48:56:1c:
33:fa:d1:bc:6d:7e:cb:3f:6a:cc:93:54:d8:12:87:4d:c8:14:
d6:04:ed:c2:70:c0:28:e0:dd:0b:9b:fe:8c:75:bd:22:df:26:
de:eb:1e:af:bf:f4:e9:37:b5:99:fd:97:45:6e:d3:f6:18:e7:
92:28:e4:40:48:8d:c1:8b:9f:5e:ff:63:05:d1:42:38:8b:f4:
86:d8:b9:db:21:71:60:8a:3f:df:c7:1b:ac:ea:5c:6b:31:82:
ed:c9:93:9b:15:0a:14:12:8f:2d:fe:c4:3f:5a:b1:95:43:5b:
6a:70:47:b5:5e:d5:ba:75:75:96:f4:50:73:44:7b:08:32:cc:
a9:fa:54:a5:15:99:d5:40:33:b2:ec:2d:f0:24:89:3d:ce:a4:
1e:eb:a6:f0:58:f2:da:59:76:a1:dd:6a:23:d3:b9:10:88:b5:
25:95:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:17 2025 by rpki-client