
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
File: L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa (raw, json)
Hash identifier: 4jntrKI85dMOq8/DVEyYs068hR6wn6SImajdixTRO48=
Subject key identifier: 2F:44:0A:16:5E:E1:E9:0C:7B:1D:9D:32:B7:53:74:EA:C9:79:A0:EA
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 022A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
Signing time: Thu 01 May 2025 01:31:42 +0000
ROA not before: Thu 01 May 2025 01:31:42 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 4713
IP address blocks: 210.232.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:31:42 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=2F440A165EE1E90C7B1D9D32B75374EAC979A0EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:ee:73:c1:ad:8c:d8:a7:64:a8:69:df:cc:
38:d1:31:2b:43:7b:f0:4c:71:06:6d:d9:de:7b:66:
b5:ae:83:be:a3:a1:ae:25:ff:91:3d:41:e3:be:07:
1a:f1:3a:a4:74:64:1b:0f:fa:97:c7:6e:07:b4:9f:
9c:91:48:98:6e:7a:ec:56:d6:8a:38:28:8f:41:90:
c2:cd:70:47:de:73:72:be:8c:0d:04:10:79:ca:02:
56:ca:50:3f:ba:c5:46:62:5a:91:53:eb:c8:8c:a0:
d1:f0:3a:92:96:42:f4:ed:59:eb:f8:97:5d:2b:f5:
0e:3a:b1:d4:b7:d1:47:fe:02:86:85:99:67:79:1c:
b1:e8:4b:57:a7:d0:4a:5b:bb:18:06:64:c6:37:78:
2c:34:52:44:b5:9e:30:be:81:fb:43:93:f7:37:97:
ca:ed:00:15:6e:45:da:c9:16:19:d7:1e:18:a3:bc:
6a:4e:d1:39:9d:64:0c:64:0d:02:0e:ab:a4:ce:bf:
c2:80:df:19:67:1b:7a:f2:1b:6c:af:99:9b:fa:f5:
ca:b0:3b:11:fd:c1:e7:f3:44:39:c9:9b:e9:f5:f7:
45:12:0f:e3:48:bc:cb:a0:cd:c9:07:2f:33:cf:8b:
e4:43:38:bb:aa:de:aa:55:4c:99:48:cb:14:d4:e4:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:44:0A:16:5E:E1:E9:0C:7B:1D:9D:32:B7:53:74:EA:C9:79:A0:EA
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L0QKFl7h6Qx7HZ0yt1N06sl5oOo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:1a:69:40:12:ab:5d:3e:da:39:3f:59:c4:1a:c3:41:a9:e3:
9b:41:f9:78:06:d4:c5:c1:12:18:e1:98:a6:47:00:05:41:75:
ed:63:1a:1e:36:df:30:df:87:fd:6e:96:d5:17:e7:b0:75:c8:
96:0d:91:e9:ef:45:0e:4a:41:7d:10:b6:1f:c1:57:c3:0b:a3:
52:ac:1c:57:1a:a6:8d:d8:fc:bf:eb:be:98:47:b3:e1:7b:7d:
e9:f0:b2:d1:a3:0e:8c:fe:a8:a8:9b:f5:c0:ed:a8:7e:76:ec:
1c:04:f4:30:74:87:7a:a4:e8:cd:a9:e6:f7:ec:5c:d2:88:56:
5c:37:67:74:30:99:c3:1f:34:05:52:f4:5f:7f:16:b7:3c:81:
0c:42:1a:e7:fb:ab:3d:7b:d6:7c:36:d6:59:bc:e7:67:5b:8a:
8f:b2:e0:17:99:5a:62:a0:89:14:be:d6:63:ef:70:9f:79:b2:
a3:5e:f4:a4:c2:c2:f9:7b:2e:45:5b:dc:ae:8c:96:30:57:32:
d4:f1:fb:b4:a5:a9:1b:fc:87:e7:80:ae:fa:60:65:17:ce:e7:
a4:a4:4a:34:0c:8b:69:71:08:f1:19:87:83:2e:f5:bd:4a:a6:
e4:9c:50:3c:82:47:a3:4c:ec:0c:1d:fb:3f:2e:d2:d5:c8:ec:
5f:41:eb:c7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw
MTMxNDJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGNDQwQTE2NUVFMUU5
MEM3QjFEOUQzMkI3NTM3NEVBQzk3OUEwRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmc+5zwa2M2KdkqGnfzDjRMStDe/BMcQZt2d57ZrWug76joa4l
/5E9QeO+BxrxOqR0ZBsP+pfHbge0n5yRSJhueuxW1oo4KI9BkMLNcEfec3K+jA0E
EHnKAlbKUD+6xUZiWpFT68iMoNHwOpKWQvTtWev4l10r9Q46sdS30Uf+AoaFmWd5
HLHoS1en0EpbuxgGZMY3eCw0UkS1njC+gftDk/c3l8rtABVuRdrJFhnXHhijvGpO
0TmdZAxkDQIOq6TOv8KA3xlnG3ryG2yvmZv69cqwOxH9wefzRDnJm+n190USD+NI
vMugzckHLzPPi+RDOLuq3qpVTJlIyxTU5DL/AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUL0QKFl7h6Qx7HZ0yt1N06sl5oOowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0wwUUtGbDdoNlF4N0haMHl0MU4wNnNsNW9Pby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDS6DANBgkqhkiG9w0BAQsFAAOCAQEAJxppQBKrXT7aOT9ZxBrDQanjm0H5
eAbUxcESGOGYpkcABUF17WMaHjbfMN+H/W6W1RfnsHXIlg2R6e9FDkpBfRC2H8FX
wwujUqwcVxqmjdj8v+u+mEez4Xt96fCy0aMOjP6oqJv1wO2ofnbsHAT0MHSHeqTo
zanm9+xc0ohWXDdndDCZwx80BVL0X38WtzyBDEIa5/urPXvWfDbWWbznZ1uKj7Lg
F5laYqCJFL7WY+9wn3myo170pMLC+XsuRVvcroyWMFcy1PH7tKWpG/yH54Cu+mBl
F87npKRKNAyLaXEI8RmHgy71vUqm5JxQPIJHo0zsDB37Py7S1cjsX0Hrxw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:37:01 2025 by rpki-client