
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa
File: tyro0xVFy9QJokdJbyHFcI6cAKA.roa (raw, json)
Hash identifier: jOxMOrDUMbMHuAYN3nQlfnuho1xo/6w0PyZoEOssJ80=
Subject key identifier: B7:2A:E8:D3:15:45:CB:D4:09:A2:47:49:6F:21:C5:70:8E:9C:00:A0
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0225
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa
Signing time: Thu 01 May 2025 01:31:39 +0000
ROA not before: Thu 01 May 2025 01:31:39 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 4713
IP address blocks: 210.164.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:31:39 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=B72AE8D31545CBD409A247496F21C5708E9C00A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:e6:18:ed:d0:ce:f7:d4:06:b3:ab:c1:39:
8e:f0:0f:29:85:83:7a:33:60:4e:e5:3a:26:78:9e:
29:98:d9:d3:f5:f6:78:bb:47:0f:14:b1:da:a0:ce:
76:90:e6:fd:e8:94:0f:9a:f2:68:df:60:9f:f6:a6:
49:db:c4:0e:6e:20:e2:87:8c:02:ec:20:2f:b7:4e:
73:50:6d:e4:1f:2a:81:5a:9c:96:61:44:a8:b3:6d:
77:71:21:1b:0e:52:9d:cf:2e:62:2e:85:e6:64:cc:
cb:ac:f6:aa:fb:6d:72:db:da:35:c5:df:a0:94:4a:
f3:78:89:92:72:68:5d:99:39:79:c9:c0:15:1c:77:
e3:a8:21:ca:d0:6d:bc:28:b7:ce:74:73:2f:63:2b:
28:e3:68:1d:c5:7e:11:11:3f:43:93:ef:b8:78:6e:
ab:52:c6:a8:05:f9:0c:51:11:d2:18:e5:e5:bd:9c:
f9:15:07:30:45:b1:17:49:a8:27:20:ff:81:91:23:
b4:35:79:ab:9d:45:96:14:06:9e:34:11:f1:92:94:
b9:aa:df:16:28:a9:7a:01:23:70:20:e8:15:c5:ac:
3e:13:a8:59:e5:91:53:b5:19:ed:36:3e:34:5c:fb:
41:a6:bb:ee:b5:18:a4:f1:5d:64:f7:ec:0f:1d:39:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:E8:D3:15:45:CB:D4:09:A2:47:49:6F:21:C5:70:8E:9C:00:A0
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tyro0xVFy9QJokdJbyHFcI6cAKA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:b9:e9:29:75:df:23:aa:b4:32:c0:8f:24:44:3d:90:fd:7c:
58:72:2c:dc:58:bc:67:d5:13:00:5b:22:d0:ca:f3:5a:95:cc:
52:67:2d:d3:ae:a6:b6:51:9f:af:09:57:a3:09:d3:56:b1:f7:
c1:50:05:95:23:81:f3:62:53:55:85:a7:f3:bb:03:2d:6e:30:
6e:49:28:7f:5c:9b:a4:7b:e1:55:6b:50:40:a6:67:bd:5d:10:
f5:20:28:5b:4d:9a:03:52:07:39:41:15:ee:49:9a:f0:6f:a9:
d4:37:36:0e:fc:e2:1a:de:3e:53:9b:19:84:1d:9a:32:57:83:
90:1d:d6:84:05:82:88:08:2c:3f:8a:f6:3d:86:df:b9:7b:70:
89:8c:31:5b:5d:58:a3:14:b4:f6:d4:26:fd:e3:8b:3a:9c:8e:
7b:1f:3c:22:7c:d1:39:a3:32:a2:55:74:0f:39:c7:3f:28:19:
7a:02:dd:07:b5:24:1b:23:4a:37:24:8c:04:f3:3b:5d:79:83:
4c:56:ed:5d:8f:d1:84:85:96:a1:e8:bb:08:72:17:d8:72:31:
d1:2c:2e:4e:1e:db:22:0d:d5:8a:49:38:cb:5a:21:5c:1f:0f:
93:83:7a:5f:93:e6:d7:ab:02:24:6f:04:e4:72:81:44:f2:79:
d3:45:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:37:00 2025 by rpki-client