
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa
File: d0X00Uj050OJh7qtS97gjpttywY.roa (raw, json)
Hash identifier: feoB7de/3DEi/RkcZ0s41ooaWlo8aCQiDRqVshMAzJk=
Subject key identifier: 77:45:F4:D1:48:F4:E7:43:89:87:BA:AD:4B:DE:E0:8E:9B:6D:CB:06
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 1E
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa
Signing time: Fri 12 Sep 2025 07:31:33 +0000
ROA not before: Fri 12 Sep 2025 07:31:33 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 2907
IP address blocks: 157.1.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 17:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Sep 12 07:31:33 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=7745F4D148F4E7438987BAAD4BDEE08E9B6DCB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:be:12:b5:4f:a7:6c:93:10:df:f9:73:d6:
75:3b:69:67:ca:71:f3:0b:9e:5a:43:cc:f3:ea:b5:
12:ef:69:7c:b3:3f:24:8f:a2:06:50:ae:8b:91:20:
aa:4d:ea:0b:3a:e8:5e:37:d1:97:1f:a7:7f:be:93:
3e:f1:00:76:62:99:5c:09:e0:5a:58:c7:6d:46:41:
e5:3e:f0:65:43:9e:2a:fd:ec:e1:29:f3:aa:45:e0:
fa:0f:a7:c6:1e:1c:df:7f:b3:33:82:66:67:89:ab:
24:f9:c6:24:55:0d:20:9b:99:b6:70:97:cb:ae:3f:
65:c9:78:bf:e3:c3:c9:37:19:6e:11:46:ad:b4:5d:
1e:3f:03:46:3d:f7:98:33:4b:45:b2:20:d1:5a:3b:
34:2d:ef:54:95:23:3a:ef:94:41:e3:00:b4:a3:70:
d0:89:44:58:bd:54:64:90:38:8e:10:d7:18:0f:03:
9d:a8:f1:95:49:35:f5:3a:65:86:95:55:1d:6d:28:
da:ad:94:33:99:70:34:34:51:98:b7:a0:a4:8b:12:
1b:75:ac:f9:68:7f:ff:51:c2:b4:01:bb:3c:d9:8f:
53:f7:b0:56:f4:02:17:c4:f3:8d:37:fd:04:5f:5d:
40:50:8f:b5:9d:86:53:e5:8c:11:46:95:85:05:58:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:45:F4:D1:48:F4:E7:43:89:87:BA:AD:4B:DE:E0:8E:9B:6D:CB:06
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:72:f6:b1:f2:e2:08:6c:57:10:ea:8f:35:c5:30:71:69:e3:
e4:81:be:ba:eb:42:7c:91:22:92:9f:0d:06:41:a9:99:03:c0:
ec:15:ea:fb:ee:47:39:ef:11:dd:4c:44:31:40:49:11:75:68:
b8:71:41:65:5e:ce:69:62:9a:17:3d:06:9f:90:e9:bc:81:e3:
a0:5e:98:fe:15:12:49:13:b4:e0:c2:ff:1e:4a:81:4d:f0:7f:
51:b8:45:05:64:b4:8a:47:44:f1:d2:38:31:56:2c:fb:06:59:
17:3b:c6:25:b1:16:4f:f5:18:dc:2b:0f:7f:32:31:04:c0:5c:
35:5d:53:59:52:a0:a0:1b:cd:30:97:14:c0:87:40:36:16:64:
ac:49:8d:e2:5c:4a:1c:ce:15:2d:ee:8b:87:b4:da:30:de:d7:
5d:57:63:83:34:55:fb:c8:6c:64:7a:da:78:e0:30:08:c4:02:
77:de:74:c7:42:9c:ed:c8:1a:d3:81:cc:20:b3:42:3e:03:56:
1f:32:21:95:af:49:bb:d3:78:3a:07:0b:68:d1:65:17:d5:43:
42:e6:37:94:8d:be:a5:62:08:54:bc:1f:87:ed:00:d1:4f:2f:
d7:f7:76:aa:aa:7a:b7:f7:75:36:c1:80:ff:b4:11:49:4f:76:
15:16:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:38:18 2025 by rpki-client