
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
File: yWdQTtmU-sUgh5-206QpqUzZ97g.roa (raw, json)
Hash identifier: bwODzsVE11BEDCv5QQPQ+HVIWozbolkBvi6CPAP/3wI=
Subject key identifier: C9:67:50:4E:D9:94:FA:C5:20:87:9F:B6:D3:A4:29:A9:4C:D9:F7:B8
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0207
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
Signing time: Sat 01 Mar 2025 01:31:06 +0000
ROA not before: Sat 01 Mar 2025 01:31:06 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 118.0.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 12:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:06 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=C967504ED994FAC520879FB6D3A429A94CD9F7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:09:ea:e2:89:19:ff:67:d9:2f:21:50:f9:
80:87:64:f2:74:ab:92:e0:b9:74:0d:0f:35:04:0f:
e0:22:af:76:e6:a0:d0:bd:fa:99:08:9e:c7:4f:d5:
6a:9b:f3:eb:d8:05:0d:f8:96:be:f3:be:38:3f:cb:
48:61:89:5a:84:ea:22:bb:2a:d5:42:fe:a3:26:74:
09:06:a0:84:4a:49:69:f7:cd:20:c1:7f:1a:e3:a7:
06:8d:79:45:7e:36:f4:a7:ba:cb:26:34:22:91:fe:
12:f3:b7:ac:93:02:9e:96:7f:8d:de:b2:6f:96:ec:
8e:6c:36:57:6f:cc:db:52:96:4d:d7:f7:9f:18:06:
aa:55:44:ef:98:01:66:3a:af:63:47:d7:6c:0f:15:
75:33:6b:7f:be:ae:a1:2f:30:6e:d5:d8:40:a1:ff:
42:c9:6d:d9:63:20:c9:5e:63:00:3d:29:61:c8:d6:
dd:e6:78:73:8d:f6:21:0d:28:eb:ef:23:b1:8e:d5:
3d:3a:18:bf:9f:51:37:5f:f2:50:79:51:87:d0:1f:
7e:e5:57:d6:b2:93:4c:03:3a:38:b9:c5:40:fe:03:
2b:7e:67:e1:10:b6:d8:30:ef:fa:a6:38:3a:c0:44:
5e:f1:f6:e7:c0:b2:21:bd:9c:91:57:38:30:3f:8f:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:67:50:4E:D9:94:FA:C5:20:87:9F:B6:D3:A4:29:A9:4C:D9:F7:B8
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yWdQTtmU-sUgh5-206QpqUzZ97g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.0.0.0/12
Signature Algorithm: sha256WithRSAEncryption
b6:30:57:79:cd:82:fc:f2:ad:19:9b:de:da:bf:8a:71:7c:6a:
56:ca:d1:2c:f3:bd:53:9b:b2:1c:80:96:a6:b5:bb:84:81:40:
fd:7d:dc:6a:5a:8f:dc:65:21:36:e5:ba:02:cc:a7:c9:c8:7d:
78:f2:eb:39:da:e8:5a:3d:11:d5:a9:02:72:84:4e:96:dc:b0:
73:e3:07:e8:c4:de:de:a9:d5:e1:09:1d:bb:ad:00:ce:c2:b0:
15:da:26:12:ad:f7:a5:6b:7c:87:8e:86:a2:08:f6:6b:3e:60:
26:81:d0:f2:f4:7c:52:81:35:0b:27:bb:5f:47:20:88:dd:38:
c5:f4:07:58:79:fa:90:68:9c:a8:41:89:31:45:50:b1:91:00:
7d:4b:d3:6d:87:c0:58:4e:57:80:5d:79:4c:54:9a:3f:3f:6f:
7f:1f:7b:f0:6b:ee:5e:02:84:30:95:bb:4c:26:96:4a:c2:25:
0b:3d:c9:c1:44:3d:12:35:32:ac:92:c1:2b:ef:a4:35:be:29:
0d:44:36:9c:62:fd:5b:61:e8:d9:ce:51:9a:ac:eb:3a:ec:fa:
33:e5:9a:ba:28:16:76:c9:18:f0:b5:fb:1a:d3:59:35:08:bd:
ce:62:5e:6c:cf:f3:77:09:13:8d:44:1e:57:34:32:95:44:f1:
b2:9b:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:37:02 2025 by rpki-client