
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
File: ryU8g5LonAEuIKsNIEjYFfZe7h0.roa (raw, json)
Hash identifier: As/EaBYCkr8s9gzSqfW64gFifN1DLsn35We7Lhw66Uw=
Subject key identifier: AF:25:3C:83:92:E8:9C:01:2E:20:AB:0D:20:48:D8:15:F6:5E:EE:1D
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 83
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
Signing time: Wed 01 Oct 2025 01:34:12 +0000
ROA not before: Wed 01 Oct 2025 01:34:12 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 7514
IP address blocks: 113.192.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Oct 1 01:34:12 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=AF253C8392E89C012E20AB0D2048D815F65EEE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:81:46:e8:34:c2:de:c6:7a:29:a2:fd:0c:
5f:e0:b0:e9:1b:7a:93:ea:9f:4c:96:d5:00:88:f5:
30:5b:b9:96:6e:7f:32:12:53:62:c7:d5:ef:c2:88:
f1:0b:9a:9c:a6:f6:3c:fb:dc:b6:f8:0c:84:f3:b2:
73:e0:38:ec:ca:aa:61:09:39:a5:c1:f7:d6:71:6f:
47:6e:12:ab:16:ae:15:67:83:91:37:3a:59:18:ce:
1d:b6:1c:ab:77:ff:1f:f0:ee:a4:29:e5:59:32:51:
35:1e:e3:9e:3f:b5:f9:85:c0:8a:2a:d9:50:f5:7e:
20:20:51:c0:3d:92:4d:21:8a:b9:6a:2c:a7:27:ed:
13:37:95:93:44:1e:39:9e:e7:8f:07:4d:2a:7c:1d:
70:3f:80:e9:ee:79:ca:a4:9f:8d:3b:20:fd:5d:d5:
73:03:cb:7b:cd:8c:8e:5a:8d:8a:3e:39:26:80:22:
3d:06:11:d0:b8:e7:ff:ee:b6:22:5b:83:8a:a4:d6:
01:a0:8b:e6:a4:25:70:33:b4:fd:cb:ff:e2:43:98:
8b:3c:98:84:7d:e0:99:cd:d2:a3:0d:69:35:e7:2a:
3d:0b:02:f2:7f:2d:62:ae:00:dc:02:0f:54:2a:5b:
c2:24:23:22:18:a4:27:76:12:59:b0:39:6a:a9:9d:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:3C:83:92:E8:9C:01:2E:20:AB:0D:20:48:D8:15:F6:5E:EE:1D
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.192.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:ad:a2:a6:53:5a:16:ec:d2:18:e6:32:e9:e4:86:17:c5:db:
ca:9e:f2:60:d9:7a:ce:e4:0e:27:ca:bc:9c:d4:67:45:24:ae:
69:b1:fb:e0:50:aa:f4:30:c4:d5:4e:79:27:a4:bf:57:3a:d8:
30:c6:8b:82:0b:68:fb:46:30:14:a5:b7:f1:29:37:c0:df:69:
5a:e8:2a:c1:f5:96:6b:52:3e:a1:a2:d9:af:06:4e:b6:a4:7f:
76:aa:70:d7:aa:fc:62:3a:05:f9:ba:a1:9a:2e:2b:6a:0d:f9:
c7:06:d1:18:9e:6a:40:4c:f6:4c:47:d2:98:6c:01:0c:30:85:
d6:c5:7f:c4:48:6a:c3:6f:db:dd:87:be:33:02:4f:f6:04:50:
9f:f0:b4:cb:5a:fd:c2:85:88:b3:cb:c4:27:6f:ce:9f:5e:bd:
ba:cb:08:a8:f1:cb:39:c7:c8:f4:75:c2:3c:e4:34:d3:f8:51:
dc:c9:b8:ca:e6:d1:bc:1f:d7:8b:37:70:76:07:75:3c:4b:19:
10:26:d2:85:29:18:cd:6a:da:9c:ef:ff:e7:36:58:32:25:29:
e6:de:91:ef:17:87:14:e1:2d:fa:d5:45:0e:9c:f1:5a:4b:93:
03:1a:08:c7:72:c7:e3:e9:25:dc:d6:80:85:c5:50:de:55:3e:
64:ed:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:41:59 2025 by rpki-client