
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
File: flacSQbCKzhgD7iq2_gsEX8j5Ms.roa (raw, json)
Hash identifier: cqr+1jtZQ87Ezm3rPuibCYDK5ucJemaltZvrt2wU/Vs=
Subject key identifier: 7E:56:9C:49:06:C2:2B:38:60:0F:B8:AA:DB:F8:2C:11:7F:23:E4:CB
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 82
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
Signing time: Thu 01 May 2025 01:31:59 +0000
ROA not before: Thu 01 May 2025 01:31:59 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 7684
IP address blocks: 153.120.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 15:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: May 1 01:31:59 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=7E569C4906C22B38600FB8AADBF82C117F23E4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:a9:40:e5:cc:49:a0:7c:6f:1a:86:77:3f:
a5:b5:68:4c:5e:de:48:9e:80:8d:2e:f1:cf:31:b2:
60:5d:73:fe:1f:c5:de:82:00:ac:43:94:0c:77:44:
b6:d3:b3:a3:ef:eb:59:c4:9e:85:fa:aa:fe:52:c5:
14:69:be:14:7c:b2:3d:06:1c:8a:b4:0b:0d:05:25:
57:4a:2c:9c:54:f5:88:54:a6:86:dd:94:1f:4d:f5:
ed:20:1a:2c:b5:7a:3a:e7:e9:36:f2:d3:e7:b1:d6:
6c:48:71:fb:68:00:3c:b9:7c:d0:24:29:e7:21:e4:
49:a7:e5:af:35:63:66:79:71:52:86:31:71:3b:52:
a2:31:e6:af:cd:34:9f:21:e4:50:b3:bf:63:53:4f:
c9:90:a3:16:0d:29:40:61:e7:1b:dc:f5:f7:ad:38:
7a:b0:93:44:5c:7a:fb:31:97:3c:c0:39:a5:dd:31:
cd:79:1f:ae:cb:a1:c0:8b:52:11:fc:f5:0d:42:20:
50:77:23:88:40:01:75:53:56:21:33:57:ab:5e:26:
c6:ad:c3:dd:99:6f:b7:8f:e1:21:ac:b0:73:24:0a:
f2:09:b9:2b:37:05:27:b2:f6:d5:b6:91:28:d5:14:
60:1a:b1:86:55:d6:ae:6d:3b:ab:c3:de:4d:a0:8f:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:9C:49:06:C2:2B:38:60:0F:B8:AA:DB:F8:2C:11:7F:23:E4:CB
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/flacSQbCKzhgD7iq2_gsEX8j5Ms.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.128.0/18
Signature Algorithm: sha256WithRSAEncryption
73:a4:21:e3:1e:2b:c4:bb:28:8e:23:57:b6:de:e4:83:96:3a:
73:13:01:b3:5b:40:4f:1a:8f:2c:ee:d5:6d:0d:76:31:54:ab:
97:84:1d:0c:71:a1:a9:f7:67:76:33:e5:ec:b2:46:5f:47:49:
54:c5:0f:4a:53:ad:f5:ea:3e:da:21:a4:59:51:af:98:3c:03:
92:19:4d:1c:b8:c3:a7:7a:ae:18:bf:2f:f5:0c:61:dc:b3:f6:
1d:98:e4:2f:aa:30:96:44:c8:5d:59:06:81:bb:77:ac:ca:ab:
ad:97:ca:7a:2f:f7:93:c5:e0:db:bc:34:f0:65:6c:ff:a1:d3:
44:08:d5:96:34:83:58:52:f3:60:67:7b:06:59:80:b1:ba:10:
7b:7e:c7:24:04:a6:d5:d7:b8:b9:28:7e:e7:ab:e2:9e:82:f6:
9c:e2:f3:4e:c9:02:eb:8b:b4:c9:a9:12:84:bb:3d:37:8f:ca:
08:c3:cb:41:01:8e:b3:92:32:f0:b7:a6:08:c6:85:08:92:02:
b9:7c:89:43:38:81:b3:c5:db:8d:94:6a:af:d1:89:4e:03:bc:
d5:74:c1:b2:90:4c:c1:04:85:2d:07:ef:ad:41:72:cb:02:4a:
a4:78:ae:8c:d0:97:1c:72:d6:c8:0d:54:0e:ef:39:7c:18:8f:
47:1c:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:33:34 2025 by rpki-client