
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
File: vjVbwXy9JIg8HRIYR4mrThPKHCM.roa (raw, json)
Hash identifier: Y1fn9LhQerhOzDxeenujpFc9xIE/rJ38gWF5ZdMOSII=
Subject key identifier: BE:35:5B:C1:7C:BD:24:88:3C:1D:12:18:47:89:AB:4E:13:CA:1C:23
Certificate issuer: /CN=4C59DFB8820120EE459B07034008992439D4E7B3
Certificate serial: 3C
Authority key identifier: 4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
Signing time: Tue 01 Jul 2025 01:36:19 +0000
ROA not before: Tue 01 Jul 2025 01:36:19 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 17675
IP address blocks: 2405:e800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C59DFB8820120EE459B07034008992439D4E7B3
Validity
Not Before: Jul 1 01:36:19 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=BE355BC17CBD24883C1D12184789AB4E13CA1C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:fe:00:cd:30:f3:22:91:8d:b6:c2:ca:66:
63:81:51:58:90:1a:c9:55:7a:6e:66:af:30:18:af:
70:c6:8d:57:ea:f6:e0:11:d9:4e:ab:2c:0e:5d:37:
8e:9c:70:6f:7e:0a:ce:26:1b:45:92:26:13:33:f4:
4c:18:81:d5:d2:8f:77:af:21:8a:e7:43:9c:4b:82:
a5:1f:eb:4a:a8:4d:39:80:99:4c:e6:23:6e:b2:4e:
fd:28:9e:a8:22:c0:5b:57:f1:2f:87:5f:49:34:81:
b8:89:48:a3:52:f4:3d:47:3b:0b:c1:d9:b0:51:7d:
c1:b7:23:f3:2c:27:87:c9:26:71:c2:10:00:b4:f5:
20:9f:7d:48:6b:47:03:3d:20:26:db:07:54:86:3f:
20:96:96:b3:65:f1:b9:cd:13:45:98:5f:4b:e3:bf:
7a:9e:60:32:21:cc:47:0c:3a:14:d7:64:10:3f:a6:
10:0c:0e:c4:3d:2b:68:c7:b9:ab:ea:16:9c:d5:35:
d9:40:96:53:dd:3c:9e:61:0b:ba:2c:85:84:d2:39:
ad:01:b0:83:28:fe:20:8f:13:dc:6c:04:f5:0b:c8:
95:79:12:84:c3:77:93:45:c3:1c:fa:a6:ea:f9:9f:
67:a9:41:88:33:95:8d:b2:58:1c:4c:f4:a6:4e:22:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:5B:C1:7C:BD:24:88:3C:1D:12:18:47:89:AB:4E:13:CA:1C:23
X509v3 Authority Key Identifier:
keyid:4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:e800::/32
Signature Algorithm: sha256WithRSAEncryption
09:e3:19:c4:fb:3d:bd:a8:a7:2b:a7:3e:a3:f7:e2:7f:6f:07:
fa:31:3c:3b:dc:20:61:9d:ec:77:4f:88:b4:e4:c4:75:25:55:
08:7a:0f:00:12:3d:92:d1:58:ab:8d:50:f7:9c:5a:1d:ca:92:
f8:18:95:0e:7c:a1:b7:ce:01:fd:ef:31:37:d8:cd:26:bb:54:
3a:2f:4a:54:8c:11:67:4f:c3:37:c4:e9:ec:77:82:de:5f:76:
b2:9b:fd:b1:02:89:d7:1c:c1:50:91:2c:89:e4:8b:37:85:10:
e8:33:dd:29:35:98:d5:8f:f1:1e:d0:ae:28:8e:98:f9:dc:d3:
12:41:1f:52:70:35:63:54:e9:7a:cb:dc:41:1e:bc:fd:91:ec:
78:f8:1c:36:94:d5:76:78:3b:12:ef:7a:92:8d:86:a1:fb:b4:
25:aa:07:4c:e1:c5:ec:da:be:e7:58:c1:12:33:cd:b8:7a:3a:
6f:b9:b9:84:f7:b6:02:cf:73:8a:73:e2:b4:74:52:4d:b9:50:
7d:19:33:bc:ad:02:09:a0:38:86:74:f9:62:4b:0d:85:c1:d1:
74:ea:ed:1b:42:cc:4b:4a:63:09:a7:3c:ef:9c:2e:24:d0:e4:
55:de:f7:a1:58:5a:fe:b2:39:66:ad:0b:45:1f:c6:1e:c1:81:
a5:51:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:41:43 2025 by rpki-client