
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
File: ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa (raw, json)
Hash identifier: +M7pRiOl6geNetCI0h6eTfGidx1rqu64SAjlgUO37/s=
Subject key identifier: 65:3F:9F:AE:40:B3:0C:C7:C3:00:81:FB:44:2D:20:CE:01:DC:A5:1E
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 038A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
Signing time: Fri 01 Aug 2025 01:50:56 +0000
ROA not before: Fri 01 Aug 2025 01:50:56 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 4721
IP address blocks: 182.50.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Aug 1 01:50:56 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=653F9FAE40B30CC7C30081FB442D20CE01DCA51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:78:4b:cb:8b:c3:2c:b3:53:4b:9e:c7:33:
68:76:45:15:22:88:30:f3:09:f8:3e:8e:b8:00:15:
25:2d:5a:32:79:a5:a5:36:e4:58:a0:df:7b:2d:57:
fa:f4:70:9a:75:b5:72:4d:cb:d1:79:37:f5:13:d1:
4d:e8:be:a5:b5:14:a1:a4:67:f8:c4:4d:7f:84:a8:
66:78:7c:f3:38:c8:83:05:3f:cd:7f:30:d0:b6:dd:
a1:8b:28:9f:65:8e:5e:aa:77:52:55:d3:05:1b:04:
67:76:1a:20:38:a5:0f:2d:fb:f0:9c:92:f3:37:21:
57:ba:82:4e:55:9f:d1:ec:e2:08:4b:eb:0e:d2:e9:
d5:ba:9b:e7:e9:31:f7:cb:b5:27:58:23:48:44:6b:
28:77:6c:65:14:f9:00:c8:91:74:a4:5d:92:0c:59:
77:9a:3b:4c:3d:8f:d4:8d:c7:b9:86:85:65:89:9c:
f0:b2:1c:2d:4a:91:66:14:57:f6:07:de:9a:ba:d9:
cb:48:33:f3:c2:4c:ae:25:db:15:46:ed:91:bf:dd:
80:c6:f6:34:df:09:65:1e:ce:8f:c8:20:c3:e8:cf:
7d:bf:c0:09:b5:54:9e:7f:a2:14:dc:b7:0e:a8:49:
4d:17:15:b2:31:34:f2:66:3d:3e:72:12:12:3d:92:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:9F:AE:40:B3:0C:C7:C3:00:81:FB:44:2D:20:CE:01:DC:A5:1E
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.50.224.0/20
Signature Algorithm: sha256WithRSAEncryption
28:b1:6f:1d:26:80:fd:d9:18:bb:cb:2c:39:78:ce:9a:a5:a5:
04:8d:6a:41:9c:78:f7:ff:fd:24:77:4f:f8:53:0a:1c:67:1f:
c3:fc:52:2f:45:5b:d7:99:05:f6:d3:2a:3c:f0:55:9f:69:d9:
37:e5:74:9a:ab:da:a3:5f:40:47:25:2e:bc:47:a6:ce:7c:ed:
9a:44:8f:a0:66:8d:3b:74:49:9c:27:2a:fd:58:78:5b:db:19:
ac:7c:6f:7c:3c:0f:3c:9e:8b:87:5a:33:c8:d0:ee:b2:b1:4b:
d2:10:e8:33:03:bb:3b:1c:b3:a9:20:8e:d4:5b:7b:53:09:c7:
83:e4:fc:9b:ed:d8:66:ec:38:cd:c2:aa:33:18:6e:76:cb:bf:
9d:8f:af:3c:48:93:27:35:1a:80:36:a3:24:7c:6d:76:ed:ea:
38:7c:08:1c:ff:0b:9c:8c:ed:d1:51:ab:44:43:c9:bb:44:49:
1b:61:cd:e0:15:83:9c:63:2c:77:87:29:04:e7:3d:55:f2:b6:
c5:e7:eb:65:a1:c9:12:43:d6:84:7f:df:4e:8e:2e:5f:95:03:
af:c4:a6:a6:a7:37:1c:0b:09:31:f7:f1:b6:47:0e:38:3c:0a:
f3:4c:7e:a3:bb:2a:5d:55:f0:b0:39:7a:77:9d:20:71:8e:31:
5e:7d:1c:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTUwNTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDY1M0Y5RkFFNDBCMzBD
QzdDMzAwODFGQjQ0MkQyMENFMDFEQ0E1MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi13hLy4vDLLNTS57HM2h2RRUiiDDzCfg+jrgAFSUtWjJ5paU2
5Fig33stV/r0cJp1tXJNy9F5N/UT0U3ovqW1FKGkZ/jETX+EqGZ4fPM4yIMFP81/
MNC23aGLKJ9ljl6qd1JV0wUbBGd2GiA4pQ8t+/CckvM3IVe6gk5Vn9Hs4ghL6w7S
6dW6m+fpMffLtSdYI0hEayh3bGUU+QDIkXSkXZIMWXeaO0w9j9SNx7mGhWWJnPCy
HC1KkWYUV/YH3pq62ctIM/PCTK4l2xVG7ZG/3YDG9jTfCWUezo/IIMPoz32/wAm1
VJ5/ohTctw6oSU0XFbIxNPJmPT5yEhI9kgGXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZT+frkCzDMfDAIH7RC0gzgHcpR4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1pULWZya0N6RE1mREFJSDdSQzBnemdIY3BSNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS2MuAwDQYJKoZIhvcNAQELBQADggEBACixbx0mgP3ZGLvLLDl4zpqlpQSN
akGcePf//SR3T/hTChxnH8P8Ui9FW9eZBfbTKjzwVZ9p2TfldJqr2qNfQEclLrxH
ps587ZpEj6BmjTt0SZwnKv1YeFvbGax8b3w8Dzyei4daM8jQ7rKxS9IQ6DMDuzsc
s6kgjtRbe1MJx4Pk/Jvt2GbsOM3CqjMYbnbLv52PrzxIkyc1GoA2oyR8bXbt6jh8
CBz/C5yM7dFRq0RDybtESRthzeAVg5xjLHeHKQTnPVXytsXn62WhyRJD1oR/306O
Ll+VA6/EpqanNxwLCTH38bZHDjg8CvNMfqO7Kl1V8LA5enedIHGOMV59HOU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:16 2025 by rpki-client