
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
File: 0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa (raw, json)
Hash identifier: Csptne5iB38rREhi8M/5mFHfz07P6gc07q1kH2vnfz0=
Subject key identifier: D2:9C:58:48:22:A4:E5:81:1B:51:18:A9:37:83:EA:DD:39:26:D0:CD
Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial: 6A
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
Signing time: Wed 01 Oct 2025 01:28:13 +0000
ROA not before: Wed 01 Oct 2025 01:28:13 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 4774
IP address blocks: 2001:300:fff6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Validity
Not Before: Oct 1 01:28:13 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=D29C584822A4E5811B5118A93783EADD3926D0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:0a:1c:93:f7:6e:c7:02:e2:97:89:25:2e:
1c:9a:64:e0:ad:43:d5:1f:42:f6:26:34:93:3d:8b:
db:08:a3:0e:a5:ed:64:76:dd:97:1a:a8:86:57:6b:
11:86:61:9c:74:43:db:5d:b0:6b:a4:8a:41:bc:d9:
cf:01:82:c9:a8:94:0b:56:ec:3a:eb:86:89:ec:61:
3f:61:05:09:f4:9c:b8:8e:1f:25:9e:5c:1a:65:0c:
a8:ad:06:01:25:d7:56:66:c0:db:30:c2:eb:3e:38:
df:39:de:a7:12:4d:7e:d8:a8:fa:29:49:50:de:97:
56:c1:7f:ea:8b:22:f1:de:2d:a9:f7:e9:eb:c8:de:
7e:b2:2b:e8:eb:01:7a:94:b9:92:e5:70:35:cd:92:
f4:68:24:6a:55:6d:5d:73:99:f8:3d:57:6a:10:13:
c4:6b:bc:96:20:32:74:ae:70:aa:af:cb:69:62:6e:
ee:89:a7:d7:39:99:55:ec:6f:01:80:38:8f:4c:a2:
aa:2a:70:53:b6:32:73:94:39:f2:21:d1:b9:54:0a:
6b:57:0b:03:76:d8:f7:bb:d4:1a:a5:0f:55:f9:4f:
1e:75:5c:71:63:16:d8:d1:dc:d6:91:b4:2d:b1:2f:
45:6c:82:68:30:b9:2b:fa:5f:c7:64:14:22:5c:75:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:58:48:22:A4:E5:81:1B:51:18:A9:37:83:EA:DD:39:26:D0:CD
X509v3 Authority Key Identifier:
keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:300:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
51:85:17:b0:79:ca:1c:74:a2:47:18:a9:cb:0f:c1:7c:81:25:
7a:c0:bf:32:ba:bd:33:ee:2b:b3:3c:0a:d4:12:3d:f7:c8:9c:
d2:22:09:d7:6b:9f:8a:0b:d4:eb:be:a5:72:5d:46:ca:52:ea:
70:a7:79:e8:7e:bc:80:2f:8a:94:40:33:5c:ab:ef:a4:34:bd:
5d:9c:ff:64:07:90:d5:c8:8f:c6:36:bb:f1:a8:1b:df:a2:d4:
8f:7f:f4:61:6f:f2:fb:1b:a7:c7:52:3e:cf:45:08:6b:e3:79:
88:49:64:0a:bf:77:53:4e:a0:23:84:2a:44:ee:2d:07:8e:03:
56:e1:d7:bf:d0:7a:6f:79:08:4c:5f:8f:31:c5:fb:55:7e:cc:
d1:17:30:0b:7d:02:f1:66:78:33:2c:06:ca:d4:b1:eb:b9:e4:
17:ac:71:50:98:8f:d8:fa:f2:57:a2:6e:1e:c4:d7:3a:a5:fa:
ec:a5:16:3b:36:9e:25:4e:ad:54:a3:cc:69:01:6b:a4:c3:12:
6f:5e:a8:e7:6b:26:53:2b:d0:3f:6e:ad:11:48:19:07:56:0f:
4c:19:25:93:dc:ec:8b:b1:13:f9:e2:7b:50:22:ad:70:e2:bc:
84:a9:d0:39:86:ce:f7:7f:e2:ff:ff:d6:0e:93:94:b3:1b:2f:
51:ac:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:33:31 2025 by rpki-client