
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
File: ooClMkmcEbkZbj8gmTR10u33PLY.roa (raw, json)
Hash identifier: kZmvLXeBX+cCZgybTZPBQSkloCNeJKFuLgNZmz15EQA=
Subject key identifier: A2:80:A5:32:49:9C:11:B9:19:6E:3F:20:99:34:75:D2:ED:F7:3C:B6
Certificate issuer: /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial: 17
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
Signing time: Sun 05 Oct 2025 00:02:41 +0000
ROA not before: Sun 05 Oct 2025 00:02:41 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 18526
IP address blocks: 160.25.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 23:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Validity
Not Before: Oct 5 00:02:41 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=A280A532499C11B9196E3F20993475D2EDF73CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:07:63:02:18:ba:07:6a:e1:ad:58:7b:f5:
c5:e0:f3:7e:39:8f:17:37:0e:c9:5e:20:c5:07:9c:
df:99:7c:11:95:0a:f2:17:b9:e9:ba:e2:df:f6:ba:
34:79:2c:01:74:10:78:60:bd:38:8a:60:e7:50:5e:
e3:3d:c2:cb:52:a4:5a:bc:8b:7f:be:86:6e:a3:08:
73:1e:45:63:48:47:85:36:85:c1:a5:25:ce:e9:f2:
a9:86:85:ca:e9:5b:cb:64:12:59:97:2a:f6:7f:70:
1d:c5:ac:d3:2f:4d:f2:1c:9a:6d:84:2f:52:11:bf:
12:04:58:ca:ff:63:34:33:b8:fe:f1:cf:e8:89:42:
1b:d2:fa:bd:86:8d:00:77:bb:d6:b3:87:54:bd:82:
19:17:9a:b9:33:88:7c:7e:ef:be:11:21:47:96:9f:
e9:fa:c1:4b:ec:b4:13:21:ae:dc:09:72:99:aa:be:
24:db:75:8b:1e:d4:f4:2d:06:00:59:4d:7b:89:15:
b5:dd:9c:14:5f:1b:aa:18:87:4f:b3:98:8e:3b:1b:
d1:03:60:d7:ee:cc:01:7d:2a:6e:dd:4a:0f:cb:32:
d8:58:12:95:cd:14:d4:17:96:c6:db:95:bc:66:fd:
98:57:85:67:f7:dd:ed:99:5a:64:85:49:bb:f0:ea:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:A5:32:49:9C:11:B9:19:6E:3F:20:99:34:75:D2:ED:F7:3C:B6
X509v3 Authority Key Identifier:
keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.134.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:f6:6e:39:b4:64:7a:04:47:d7:c1:5a:cc:19:f1:3e:f0:ea:
6f:ae:88:7f:ba:fb:37:66:ef:7e:ad:60:71:f8:9f:3c:47:6a:
ba:d7:4c:a1:e4:5f:7a:83:54:90:22:6b:51:f2:03:75:6d:92:
e0:1e:04:91:68:8f:1a:ae:93:19:23:f5:d5:21:0e:08:b8:9a:
04:52:88:4c:a4:bd:da:e1:51:16:69:d0:51:b1:68:eb:fc:e7:
e3:ec:79:ce:2c:ac:bd:8c:f2:51:ef:13:e8:00:bf:b0:4c:6f:
45:e3:99:38:01:ca:c8:f2:d8:95:5c:91:e4:ec:64:fd:28:5f:
4b:0c:6e:b4:fd:4a:fd:15:71:58:74:12:7a:3d:ad:fb:06:39:
e6:5f:67:25:5d:1f:80:01:89:8a:32:59:05:5f:8c:c7:69:a1:
89:81:46:7d:7b:da:a5:03:41:5a:ee:bb:3d:96:3a:9c:7e:c3:
fc:fe:93:82:e0:e0:15:43:11:ce:b0:00:35:4d:84:46:eb:87:
9e:c3:c1:89:fc:9d:0f:01:50:a8:ff:bb:94:9f:57:e3:fc:86:
b9:91:3a:b5:57:5c:5c:80:05:0c:95:9b:e8:3f:98:24:51:74:
e9:67:3f:56:ac:87:31:9e:bf:ca:0b:fb:2b:7d:f7:d5:07:36:
f1:57:40:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 25 03:45:31 2025 by rpki-client