
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa
File: NenFa4bKqiECbu3v5BlgK0VE4cY.roa (raw, json)
Hash identifier: 4EXqvrdxmLlE2bGzzzI/w0pLr5nMPVubBhnrfRTqG0c=
Subject key identifier: 35:E9:C5:6B:86:CA:AA:21:02:6E:ED:EF:E4:19:60:2B:45:44:E1:C6
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0236
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa
Signing time: Thu 01 May 2025 01:31:47 +0000
ROA not before: Thu 01 May 2025 01:31:47 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 4713
IP address blocks: 218.44.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:31:47 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=35E9C56B86CAAA21026EEDEFE419602B4544E1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:29:60:e8:74:bb:b8:61:53:65:87:c1:d4:
44:63:fc:73:6d:01:1f:56:e2:a0:16:af:ec:b7:98:
54:20:3f:88:29:99:63:18:25:24:b8:1f:55:10:e6:
12:29:5d:fb:1b:21:7b:47:00:a7:b7:13:d0:d5:f1:
d1:bc:21:f4:b2:21:54:d5:8d:92:cc:ae:b7:a6:5e:
b7:a6:fb:1b:34:e0:e2:6b:a7:34:f7:30:4e:c5:12:
1f:22:f7:21:29:cc:f4:6c:43:d8:c9:c2:2c:be:19:
ea:a0:23:d5:92:ab:f8:ee:10:86:84:60:b5:68:d4:
5f:a5:a8:a2:30:67:a1:7e:aa:f0:60:52:3c:cf:21:
9e:9d:83:02:cf:ee:bc:87:95:f8:6d:9b:df:72:b8:
e7:cf:9e:a1:d4:9d:f2:cd:62:4b:4e:1f:8d:5c:30:
e3:9a:46:e6:4e:53:bc:5d:a3:8c:af:59:8a:1b:d7:
b7:a8:d3:79:8c:16:8c:cf:e4:ec:ac:31:de:a5:bc:
8e:ac:2a:22:85:bd:e9:63:85:66:5e:0b:ea:b5:76:
ae:69:6d:a9:88:2b:68:93:35:2d:29:d9:96:e4:39:
50:c8:ca:d7:37:7a:d5:63:a9:c9:72:7a:7c:ec:e2:
ee:9e:75:e4:f1:7a:31:7e:19:44:9b:ab:2c:1b:5c:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:C5:6B:86:CA:AA:21:02:6E:ED:EF:E4:19:60:2B:45:44:E1:C6
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:77:cf:50:5d:60:ce:61:48:70:8d:1b:80:18:94:d8:7c:40:
cc:07:7c:06:cc:2c:93:92:d6:87:98:f3:5e:0e:24:4f:7a:53:
87:d9:30:91:ca:1e:4a:85:8e:00:2a:a2:82:9a:50:65:e4:b2:
79:ca:2d:10:63:b0:d4:27:30:7f:1f:44:ac:ac:9e:0a:aa:46:
98:d0:28:63:e3:7c:d5:41:63:3a:81:74:29:7e:e0:28:48:69:
6c:78:36:ee:6e:4d:7d:c8:3d:51:42:a8:f7:5a:16:93:53:87:
85:a3:92:62:10:26:d3:91:4b:83:38:25:33:6a:64:e6:44:bb:
55:79:50:f2:fd:bd:d9:bc:c0:ed:5c:7b:35:1e:6a:ce:eb:a4:
a7:77:74:04:92:6d:07:75:fa:9c:cb:00:a2:49:1a:87:51:2a:
2a:42:c9:9c:32:2b:20:ba:fe:dc:24:fb:67:2e:5d:13:49:85:
6f:c0:06:46:92:ae:98:96:1d:21:41:69:f7:91:b2:cc:70:9b:
c4:64:4f:a9:c4:ef:9e:a2:4e:e3:d9:70:e1:f5:46:24:3f:88:
f0:40:ab:db:64:99:c0:d6:a2:1c:a4:e2:d0:cc:d7:cb:0a:5d:
21:03:09:33:51:ed:93:3d:3b:4b:13:5a:f8:d5:48:23:f1:f0:
9a:47:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:33:11 2025 by rpki-client