
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
File: lS2zz44HtzCeuKIcILK-k6GyPwY.roa (raw, json)
Hash identifier: n9A0s4kPkBaR1Zfv5lIvNTkkT3/0hCYAemOM74TNkCw=
Subject key identifier: 95:2D:B3:CF:8E:07:B7:30:9E:B8:A2:1C:20:B2:BE:93:A1:B2:3F:06
Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial: 91
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
Signing time: Wed 01 Oct 2025 01:33:36 +0000
ROA not before: Wed 01 Oct 2025 01:33:36 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 18260
IP address blocks: 119.30.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Validity
Not Before: Oct 1 01:33:36 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=952DB3CF8E07B7309EB8A21C20B2BE93A1B23F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:e8:ae:a4:72:87:70:cf:c1:bb:56:67:3c:
fc:92:a8:48:89:7d:68:1d:4b:f6:45:4e:51:fc:5b:
23:12:25:88:7c:ba:a6:7e:64:65:25:0a:14:b0:15:
48:26:29:b1:0d:47:1e:be:2c:b0:e6:9c:4a:56:dd:
6c:b1:28:47:49:dc:72:b9:b5:0f:23:ff:4b:f1:e2:
64:7b:5a:02:6b:d6:f8:fb:08:90:2b:c1:f4:d8:17:
2d:ff:af:6a:f8:c6:db:3a:81:25:be:a7:30:67:05:
42:67:1f:cf:9d:0c:97:55:41:49:33:c3:c5:8d:7a:
4d:0d:da:63:8d:cc:f5:6d:ef:6b:2e:bc:6d:74:ef:
82:df:92:ae:34:3d:5d:0c:d0:6e:b3:31:3e:a3:8c:
92:20:7e:be:7b:d1:44:f2:cc:03:42:07:58:3f:b4:
67:f9:d3:d3:4a:00:fd:e6:be:69:65:44:a6:16:79:
38:dc:49:3b:8c:7a:b3:72:c2:78:4c:3b:b0:d4:d4:
ff:20:5d:fc:bf:be:d7:e3:89:5c:64:07:e8:4d:35:
7c:f5:3e:6f:e2:97:c1:00:9d:7d:83:61:82:ce:e6:
ad:cc:65:f9:8b:80:25:28:f5:47:b9:3d:a9:a3:fe:
37:b2:46:ac:7d:16:14:59:c2:48:5b:db:ac:20:18:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:B3:CF:8E:07:B7:30:9E:B8:A2:1C:20:B2:BE:93:A1:B2:3F:06
X509v3 Authority Key Identifier:
keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.30.14.0/23
Signature Algorithm: sha256WithRSAEncryption
04:7c:6b:79:41:15:93:ab:d0:49:26:de:2b:ba:32:3a:6a:98:
12:24:f9:86:37:0c:a7:f9:91:2e:a8:33:29:27:3b:87:33:89:
f4:ce:59:e3:91:1f:64:8b:9a:71:6d:4e:af:85:e6:8e:3e:b2:
81:07:3f:de:74:22:02:5f:82:51:bf:a7:6f:83:8d:5c:c4:29:
9b:5e:3a:6b:4b:03:3f:68:cf:c7:9f:b8:30:a1:50:ed:a1:3f:
4f:4d:f3:ca:7b:f8:a4:14:c7:ce:57:a9:8b:87:71:a4:9c:e8:
2a:17:cf:1e:25:c5:d3:58:bf:98:80:3e:d3:a1:b7:cb:97:d7:
7d:71:0c:99:5c:27:2e:89:91:13:47:58:15:18:e4:34:55:d5:
5e:30:a0:77:c6:5d:76:2b:19:76:22:84:78:7f:4d:ca:c7:82:
f9:7a:ab:e7:1c:18:1f:e1:ab:06:1e:9e:f3:f8:37:de:26:7c:
2a:82:6e:a5:f4:43:1c:fa:d9:91:da:48:be:ed:63:f9:38:5d:
e3:d0:8d:1b:83:88:f1:c8:25:72:20:0d:c3:46:7e:8d:79:e8:
28:04:ef:6e:b3:c9:3f:65:99:f3:50:fb:7f:e8:06:65:14:6b:
80:72:f0:0b:4a:f4:31:26:64:e6:a4:cd:5e:27:b4:47:b8:a9:
74:83:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:52:29 2025 by rpki-client