
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
File: 0VZJAMbTd91jHXgkChNqbWJSXzo.roa (raw, json)
Hash identifier: zqKIY88oJaLxGpdEBYcjbKVGiB9icL4iatZZ/hAgc1Q=
Subject key identifier: D1:56:49:00:C6:D3:77:DD:63:1D:78:24:0A:13:6A:6D:62:52:5F:3A
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0219
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
Signing time: Thu 01 May 2025 01:31:33 +0000
ROA not before: Thu 01 May 2025 01:31:33 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 4713
IP address blocks: 153.240.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:31:33 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=D1564900C6D377DD631D78240A136A6D62525F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:0f:97:2d:5a:34:6e:f5:81:7d:e7:20:ec:
fb:87:d4:3a:ab:df:9d:9a:ec:26:3d:0f:fa:5f:6a:
59:3e:e4:6f:17:2d:4c:f4:b8:f2:fd:39:17:68:c8:
cc:f2:97:73:8f:33:db:7b:78:09:70:9d:fd:c6:b4:
90:40:d7:7a:d3:91:0c:9c:71:10:79:1d:85:1b:e5:
ea:3f:cf:46:11:c9:f6:b7:87:6a:4d:15:7a:1e:bb:
23:c4:f7:c0:13:c1:83:67:4a:4a:56:b5:ac:67:94:
83:41:e1:42:c5:98:41:a6:ff:31:23:e5:fd:24:da:
9b:5d:60:0d:04:32:9b:cc:47:89:22:8f:11:42:73:
ab:b5:71:50:74:87:c6:ce:24:2d:ef:ab:bc:6b:d7:
04:13:cb:04:cb:1e:69:25:56:6a:4b:87:b9:3a:99:
3b:d8:6f:6b:05:39:74:7e:28:3d:65:86:22:95:e1:
32:d8:11:e8:3d:70:92:7e:ea:ba:ae:e1:d9:aa:9a:
72:e5:0e:c8:d0:c3:00:39:40:0d:57:3c:02:e3:d4:
91:98:24:d1:db:08:fd:40:35:d2:26:59:be:fe:43:
4c:40:27:7c:02:5f:17:cd:c3:af:fe:2e:be:55:18:
df:2b:9f:d7:23:84:a4:b0:b6:01:c2:32:75:82:44:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:49:00:C6:D3:77:DD:63:1D:78:24:0A:13:6A:6D:62:52:5F:3A
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0VZJAMbTd91jHXgkChNqbWJSXzo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.240.0.0/13
Signature Algorithm: sha256WithRSAEncryption
63:01:24:fe:75:ac:57:13:16:c7:63:74:da:d0:22:4e:50:e6:
d5:d0:89:1a:48:a0:f8:fa:b7:76:97:2a:82:2c:a3:d2:b1:94:
fe:97:5e:17:01:83:3d:1b:25:b5:da:dc:79:f9:84:2c:b3:4c:
3c:98:89:85:cd:ef:70:96:c4:3f:53:ba:52:7f:7b:0e:94:fc:
fa:15:17:42:db:91:cb:f1:30:f3:52:62:37:ab:3c:4d:0c:9d:
2d:90:9b:99:93:d6:25:54:06:69:e1:79:44:95:64:56:e1:7f:
48:5e:5d:98:a2:b8:7f:22:c7:7f:6a:a4:b7:b5:ba:dc:b5:28:
d6:a3:87:c4:30:26:e5:fb:b4:27:69:88:78:21:da:43:c5:2f:
30:b0:75:35:da:41:32:12:65:33:3b:d8:6d:b4:d0:81:3e:26:
3d:27:f5:d2:c8:a1:62:c0:30:df:09:ab:70:db:1b:68:8e:91:
19:f5:66:61:d9:52:41:f5:37:3f:3c:87:01:af:fa:76:0c:67:
45:5d:d8:81:88:f7:35:e9:cc:7f:13:07:76:2e:d6:67:42:98:
47:3e:4e:e8:3a:3d:67:3a:ad:cc:96:c7:f3:7d:ec:1b:21:e1:
5d:f7:da:46:e8:63:60:8f:a3:a1:a7:1a:0e:27:c8:03:69:45:
ae:33:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:33:13 2025 by rpki-client