
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
File: Q7qvLUge3kw80SSDZDhugkFJgvc.roa (raw, json)
Hash identifier: +cxD77Dw45xy07J9cR2YIRb+z3xoKY5jaKt5GWHSIM0=
Subject key identifier: 43:BA:AF:2D:48:1E:DE:4C:3C:D1:24:83:64:38:6E:82:41:49:82:F7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 048D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
Signing time: Tue 01 Apr 2025 01:45:43 +0000
ROA not before: Tue 01 Apr 2025 01:45:43 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 240a:6b::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 1 01:45:43 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=43BAAF2D481EDE4C3CD1248364386E82414982F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:d1:06:f3:8c:cb:13:a4:09:a4:5c:b5:f8:
9b:65:a5:48:ec:21:a5:4c:fb:e8:9e:f2:b9:d8:b6:
d8:84:e9:a3:c6:a6:ee:65:c6:e3:b2:58:c6:f5:fd:
f9:c5:b9:3c:0c:cc:8b:be:c3:8e:7a:10:5a:81:d3:
55:34:32:f8:1b:9a:91:40:99:c0:f4:2e:39:85:55:
95:aa:75:e3:e2:8b:ed:f8:95:e3:a8:53:9b:83:55:
3e:16:8a:3f:68:2e:de:59:a7:7a:fc:41:f3:3a:1b:
5b:c8:f1:96:5d:c8:4b:3f:2f:9f:8d:66:88:4d:50:
de:4e:1d:58:2b:d1:29:5c:7d:84:62:bf:21:17:55:
37:f0:aa:16:96:6a:62:d1:e0:a4:fb:a8:de:f9:04:
97:f8:77:28:a9:3f:c6:86:37:b8:d4:1e:03:c8:7f:
0d:76:87:ef:ed:48:cf:cb:a0:af:bd:89:85:70:4a:
35:b4:92:85:76:e9:a7:11:1c:44:35:62:ac:0c:d5:
18:c7:dd:7f:11:f5:a0:2d:c8:c2:ad:44:64:a7:4b:
7b:9a:c4:85:e4:e2:d7:07:a8:0e:98:4c:56:67:03:
08:7d:e6:26:7c:56:01:61:4a:54:7c:e0:c7:64:65:
48:43:f1:0b:77:75:d4:1e:36:aa:55:ee:ba:02:79:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:AF:2D:48:1E:DE:4C:3C:D1:24:83:64:38:6E:82:41:49:82:F7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b::/40
Signature Algorithm: sha256WithRSAEncryption
2c:af:07:fd:e4:be:8d:01:c8:a9:f3:c2:1a:d7:d0:cc:7a:9b:
58:50:f1:7f:ed:3d:af:74:1f:09:61:93:2a:b6:a2:88:18:83:
82:48:df:0f:6a:7f:6d:fb:2b:57:4d:93:29:f5:31:2d:86:01:
5b:13:aa:92:07:4d:c2:75:ab:82:de:0b:d0:d1:38:6b:06:8d:
66:82:2b:7e:6c:eb:89:c7:8a:05:80:28:f7:1a:03:b4:0f:58:
b1:cd:5b:b4:40:0f:d0:f3:bb:05:b0:28:4d:dc:aa:23:57:00:
d3:13:89:6e:b4:84:53:48:76:4c:80:7b:68:af:db:54:42:0e:
fa:91:e9:04:24:26:ab:e0:14:8f:74:69:42:7f:c2:1a:c0:c3:
74:b3:2a:26:bd:68:13:d4:76:91:66:f0:2a:f4:78:3f:e5:a5:
a1:15:76:08:d2:38:97:ba:47:cf:1a:28:26:d8:d4:3f:44:1e:
9c:20:44:a2:db:af:f7:56:db:c7:33:34:4c:3f:5a:e3:57:3e:
53:6b:56:4b:c8:04:ad:ab:d1:6a:a0:8f:45:4f:c5:59:27:c0:
10:6e:57:0f:d7:ea:34:89:cc:cc:71:8b:14:6c:f3:98:3e:c4:
e1:ec:79:f3:7f:60:13:75:7a:05:c3:58:f4:9b:4a:e8:a3:5d:
07:36:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:32:58 2025 by rpki-client