
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
File: -g2EO2ghjKgG4SmQS_DcxKzexoY.roa (raw, json)
Hash identifier: Dfgg441H7c2wDjnbxDKVXhUSp17aK+b3+K16tyK5svc=
Subject key identifier: FA:0D:84:3B:68:21:8C:A8:06:E1:29:90:4B:F0:DC:C4:AC:DE:C6:86
Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial: 69
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
Signing time: Mon 01 Sep 2025 01:32:50 +0000
ROA not before: Mon 01 Sep 2025 01:32:50 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 18131
IP address blocks: 2402:c800:ff7b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Validity
Not Before: Sep 1 01:32:50 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=FA0D843B68218CA806E129904BF0DCC4ACDEC686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:05:d5:6b:10:89:f0:fa:43:e3:e8:da:52:
ea:91:b1:76:8d:0f:f8:09:e5:d3:79:66:05:88:1e:
70:a9:c6:15:dd:1f:9e:f9:bd:d4:49:78:d3:9a:d8:
33:84:3b:7c:37:bd:b5:62:b5:55:cd:b1:c8:0c:0e:
e2:a0:79:f3:b3:cf:1e:09:49:36:69:1a:f8:94:e9:
fd:c7:f6:ac:9a:46:3c:5e:27:cd:d3:81:ad:e0:30:
03:a5:11:62:35:27:29:ec:b6:ca:a1:00:c7:23:e3:
23:53:dc:9c:a8:7e:b7:13:f4:36:de:99:05:a7:9f:
36:4b:cc:72:c5:d0:d0:f9:a4:32:91:51:80:a5:f3:
28:f6:b5:a8:b9:2c:10:3b:1a:3b:35:4a:e3:00:0d:
47:2b:2d:b9:ae:e9:da:10:43:63:da:56:76:72:3f:
b7:bb:f9:15:28:94:7d:16:c2:96:c1:bd:32:a6:0e:
b7:d6:32:fd:19:df:11:b1:cf:7f:cf:d9:46:82:fc:
44:44:92:b8:09:4c:81:ec:b9:a2:d0:00:2e:b9:89:
37:15:ba:39:1e:24:19:06:e5:d9:56:a9:32:cf:34:
5e:8e:ab:d9:5a:3a:a0:f6:a5:2e:0b:c5:ed:0a:e6:
18:fc:2b:aa:31:32:f8:fc:cb:26:21:82:0f:87:0b:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:84:3B:68:21:8C:A8:06:E1:29:90:4B:F0:DC:C4:AC:DE:C6:86
X509v3 Authority Key Identifier:
keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c800:ff7b::/48
Signature Algorithm: sha256WithRSAEncryption
79:30:13:b8:48:d7:02:03:0a:b4:be:1f:5d:be:c4:bc:ab:7f:
79:52:af:47:31:ec:cc:7c:61:e6:3d:5c:53:a9:fc:25:c5:99:
cd:8e:60:30:47:ad:a8:0b:30:7b:73:6b:2d:c7:9c:9b:4f:7f:
c8:d0:58:1e:63:63:e1:80:33:18:a3:70:4f:d5:c9:7c:34:34:
4c:2d:00:25:b3:29:39:e4:37:a3:5f:f0:2c:65:b2:f5:07:8b:
ec:79:84:56:a5:59:9d:f0:f5:aa:b0:72:64:bb:23:e1:e8:e0:
ac:e1:e9:55:64:43:fa:20:64:48:5b:97:63:e6:b0:15:1b:26:
54:3a:8f:e5:ed:07:45:76:02:a6:c9:9c:80:94:6c:4d:27:7b:
b5:28:f1:bb:6a:a3:01:5b:b9:e9:3d:07:35:19:1e:85:19:7e:
81:36:49:80:9f:52:8b:99:f3:75:4b:00:16:64:e9:89:84:1f:
af:22:c4:d6:c8:9a:f5:2c:65:3f:6b:b4:48:7d:70:86:92:c2:
72:32:4d:d2:82:88:23:40:3f:d8:e0:92:0f:89:01:3d:63:43:
28:c6:f3:4c:f8:52:2e:f2:c9:e9:42:fd:a7:e9:3e:e0:72:30:
3b:85:96:ec:80:9e:74:30:b5:97:8a:4f:4f:b3:11:c0:7a:c3:
e1:da:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:36:00 2025 by rpki-client