
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
File: pbEctq6LCW9lubZCdVevNj6GmNg.roa (raw, json)
Hash identifier: eI86DYKAo3+6oE1F6SlJvtI2sH07B7b93+N1O+LvTGs=
Subject key identifier: A5:B1:1C:B6:AE:8B:09:6F:65:B9:B6:42:75:57:AF:36:3E:86:98:D8
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 021C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
Signing time: Thu 01 May 2025 01:31:34 +0000
ROA not before: Thu 01 May 2025 01:31:34 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 4713
IP address blocks: 180.0.0.0/10 maxlen: 10
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:31:34 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=A5B11CB6AE8B096F65B9B6427557AF363E8698D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:1b:11:b5:7c:01:70:42:83:f0:6d:2a:7a:
b0:f7:57:42:26:82:1e:b0:da:c2:ed:3c:83:55:35:
d3:90:76:34:a7:38:83:50:8a:95:a8:43:76:b5:83:
ab:1a:cd:34:b4:4d:16:0a:c2:1d:1f:31:a1:f3:8a:
e3:be:ac:bf:7e:7b:17:fa:d4:ac:b6:31:1c:77:5e:
d1:c1:f1:0c:f2:41:42:06:5e:82:48:68:84:11:2d:
bb:ce:3d:9b:77:b5:9c:ca:b8:08:e3:49:83:37:85:
e0:a0:80:30:ab:64:de:23:10:13:20:de:a0:e2:f9:
6e:60:fa:23:9a:db:c2:f0:17:a9:1b:77:db:03:05:
07:7e:42:5a:0c:be:02:d2:c3:98:5c:3d:fa:c6:39:
6b:aa:14:45:6c:d5:9d:55:a9:c6:d0:68:d9:48:d6:
c9:d1:82:13:de:c3:bc:cc:20:73:a4:29:07:10:d3:
70:be:e1:26:e3:a4:67:14:ab:35:82:89:36:b8:85:
bf:b5:98:05:eb:f3:61:40:53:be:2d:9d:8d:88:b6:
b9:42:ae:9d:64:61:ca:bb:11:49:fd:9a:c5:76:f8:
15:fd:41:77:98:8b:17:93:8e:44:bb:7d:77:97:ad:
da:95:80:ab:b6:4f:a8:79:52:69:c6:7b:f3:30:22:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B1:1C:B6:AE:8B:09:6F:65:B9:B6:42:75:57:AF:36:3E:86:98:D8
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.0.0.0/10
Signature Algorithm: sha256WithRSAEncryption
4b:5f:48:32:51:38:5b:91:f4:bf:85:ab:84:09:40:86:87:50:
5f:bb:d1:12:34:49:88:68:cb:0b:4d:09:a4:1d:3c:81:8d:23:
b8:c5:6f:88:d4:c4:13:02:9c:8c:d2:27:53:54:e2:b4:d4:52:
71:1b:20:34:49:2a:eb:89:35:a6:28:f4:ce:95:d0:31:3a:80:
1b:49:33:1a:8a:c0:ca:ad:d2:ba:84:f5:50:80:6e:ab:b6:16:
8d:3f:d8:5c:ec:e5:af:0d:50:55:9c:e6:4e:4b:27:93:93:ac:
a3:aa:35:de:51:00:55:68:01:44:69:8a:af:46:36:88:40:77:
9e:b7:3f:ba:33:dd:56:d2:84:9a:a1:eb:c6:10:dd:41:b0:11:
a0:c5:65:02:a7:df:98:ff:e5:7c:df:31:bf:a2:e0:db:02:f2:
c9:ac:d1:5e:a9:90:47:32:65:83:64:7d:30:4c:38:f7:ef:4a:
b8:ae:f5:0f:bb:47:fc:7b:d8:82:90:5c:3c:a9:5b:14:c6:83:
66:11:15:6d:c9:37:3f:d2:9f:06:37:55:e6:7d:25:42:3e:98:
bb:6f:08:c3:bc:13:74:5b:84:6f:40:9b:cb:08:29:d8:ca:a6:
0b:5b:fa:c9:b2:a0:db:e8:9c:f5:1c:ac:f2:a0:5f:42:b0:ee:
c8:1b:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:36:59 2025 by rpki-client