
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
File: vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa (raw, json)
Hash identifier: vzy9Awjvy2iS8Vo6h+M+/wFce4emA/j1Z31XXVeysyY=
Subject key identifier: BD:6E:00:89:2A:7E:C7:42:07:07:F8:52:FC:6A:CB:28:DC:7C:35:89
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 5B
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
Signing time: Fri 01 Aug 2025 01:29:13 +0000
ROA not before: Fri 01 Aug 2025 01:29:13 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 23805
IP address blocks: 202.76.192.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Aug 1 01:29:13 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=BD6E00892A7EC7420707F852FC6ACB28DC7C3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:8e:22:d7:2a:82:80:87:b2:7a:08:31:e8:
76:2b:86:e1:db:2f:4a:01:c1:b2:2a:3c:e1:10:7c:
e3:4d:52:8d:46:87:1d:c8:aa:05:64:de:31:05:2e:
cb:81:73:f1:d2:83:b0:dd:7b:41:93:17:84:b5:57:
3d:b7:fd:c2:b1:b7:2d:21:7d:8e:7f:7c:12:06:38:
de:e8:22:f2:c0:d8:af:bc:34:71:4b:86:56:7a:ee:
a3:68:7c:2c:0d:e7:d2:19:90:54:4a:1f:79:68:bb:
12:09:ac:5e:6b:08:a8:fb:d7:ea:bc:b8:d2:29:42:
5a:1f:98:b0:1a:9f:4a:26:02:e1:1d:a5:4d:bd:da:
18:5e:9b:8a:c1:14:f7:1d:ca:81:89:24:24:2f:72:
96:5f:bd:99:ec:e9:09:a8:2f:0c:81:1c:6f:21:e1:
c5:50:2a:fa:b3:b1:0a:06:cf:c5:1b:90:b3:7e:0c:
34:49:4e:14:d8:0d:46:f6:cb:d4:9b:0c:6a:e4:ef:
dc:1c:5a:26:84:b4:1a:01:3a:22:3d:f5:dc:c2:25:
d4:0c:9d:a2:f0:95:05:d4:94:1e:51:8a:d1:08:8d:
e6:29:2c:0f:3f:a6:f7:6e:fa:0c:d2:35:50:3c:85:
6f:ac:e2:0b:f4:d3:37:15:e5:ec:7a:52:6e:d4:62:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:00:89:2A:7E:C7:42:07:07:F8:52:FC:6A:CB:28:DC:7C:35:89
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/vW4AiSp-x0IHB_hS_GrLKNx8NYk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.76.192.0/19
Signature Algorithm: sha256WithRSAEncryption
00:2b:b1:f9:ad:db:e4:93:b6:ca:ad:15:fc:06:cd:56:45:14:
b7:0e:65:71:2e:f6:4f:c2:21:85:97:be:d0:78:44:73:b2:04:
dd:35:3b:2d:a6:03:57:fd:43:4b:2b:ae:9a:ee:e1:23:7b:ad:
a3:05:7d:4f:58:5d:78:d0:5b:ea:84:26:5f:ee:31:bd:67:be:
7b:bd:39:ad:ac:be:42:79:ed:68:30:d4:c7:76:9a:88:df:a2:
4a:26:57:54:9c:68:57:28:24:2c:38:01:5a:37:5b:38:b2:96:
b0:1c:d7:e4:fa:0a:0e:4d:86:77:a4:d7:4b:08:60:4a:fa:d3:
45:5b:49:14:7e:d4:80:a7:eb:29:87:88:f2:d2:73:d0:1a:2f:
e4:f5:ab:4c:be:27:9e:9e:d4:bd:2a:cc:5d:5f:39:94:5f:c4:
1e:01:e6:e9:e0:50:37:d9:bd:f3:af:d0:b8:26:74:ac:14:70:
74:a5:32:9f:91:ec:86:83:d4:d0:c3:3c:eb:e1:e7:6c:da:c0:
b8:7a:35:5d:99:13:8b:ff:2b:4f:a1:20:ec:5e:c0:e5:52:bd:
77:71:18:f0:16:9b:11:b4:a0:6b:6e:aa:67:95:03:e7:8d:5d:
1f:06:45:6a:f1:55:c4:cb:05:20:a5:81:c6:1f:a6:fb:a9:a6:
4b:47:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:01:21 2025 by rpki-client