
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/D8aAE4HrDfkzTHlQkIHI8zN4naM.roa
File: D8aAE4HrDfkzTHlQkIHI8zN4naM.roa (raw, json)
Hash identifier: Cm3bWmUyOmVAOTKR8JdK2jAhJDvpAXIex44Z2oX0qOE=
Subject key identifier: 0F:C6:80:13:81:EB:0D:F9:33:4C:79:50:90:81:C8:F3:33:78:9D:A3
Certificate issuer: /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial: 5F
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/D8aAE4HrDfkzTHlQkIHI8zN4naM.roa
Signing time: Sat 01 Mar 2025 01:30:37 +0000
ROA not before: Sat 01 Mar 2025 01:30:37 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 7530
IP address blocks: 2405:f000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 09:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Validity
Not Before: Mar 1 01:30:37 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=0FC6801381EB0DF9334C79509081C8F333789DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:79:ca:8e:cc:67:8b:97:76:05:f2:ba:10:
5b:72:dc:4b:ca:8e:84:69:2e:87:22:a7:29:b2:01:
d2:a7:06:57:1b:68:c0:5d:39:4d:65:6f:b2:59:c0:
da:a0:ff:59:9c:66:9a:e1:30:95:e3:d2:5d:fe:fb:
47:58:92:25:d9:5b:c1:c4:54:35:f8:c0:2a:a3:4d:
cd:48:4f:75:14:67:be:d9:81:1e:cb:4e:ee:50:5f:
38:55:8e:f6:d3:3d:6e:d5:f8:61:ad:42:cb:8d:ef:
6f:2b:5d:db:70:8a:81:08:72:e2:48:c5:77:be:0d:
2c:7d:b9:a7:b3:a4:32:74:39:01:2c:10:3c:84:62:
4f:5a:37:50:13:6c:65:4a:53:5f:9c:2d:38:54:a1:
fa:82:92:4a:e5:f8:3b:9e:f9:69:5b:ae:aa:04:e0:
71:66:34:ab:fe:58:ef:2b:93:a0:e9:f3:8e:98:e7:
0c:91:d2:34:d6:0d:70:b2:e7:46:86:f1:33:52:55:
27:75:27:97:9e:bf:d2:26:9f:d3:c3:c0:e8:86:de:
1c:e0:64:ca:1d:fb:dc:40:4b:15:5b:b9:3b:ad:6d:
d8:e2:b0:49:47:07:88:9c:eb:0c:ec:7d:89:9f:58:
10:c0:64:ba:23:30:8a:79:1d:ca:68:e8:5b:c0:58:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:80:13:81:EB:0D:F9:33:4C:79:50:90:81:C8:F3:33:78:9D:A3
X509v3 Authority Key Identifier:
keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/D8aAE4HrDfkzTHlQkIHI8zN4naM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:f000::/32
Signature Algorithm: sha256WithRSAEncryption
77:3d:47:e4:05:32:d8:f4:00:db:c1:dd:40:ae:47:58:55:59:
3f:7f:e5:3f:fc:a3:21:f1:70:3a:a9:41:a7:97:d2:4e:f3:02:
71:d6:7d:f6:15:db:78:83:19:2c:32:aa:0b:4a:45:a6:be:53:
9f:3a:a2:d6:cb:30:67:d4:f8:b5:92:bf:bf:c9:f8:9a:7b:70:
6c:9c:60:a5:1a:47:c4:5a:3c:3e:2b:2a:11:bf:72:1f:a8:58:
97:57:9e:63:f4:0b:f3:34:40:00:12:69:fd:20:fa:53:fb:86:
e5:e0:f0:f3:3a:75:52:66:a4:8a:fb:fa:94:28:cb:9c:ea:ff:
e9:b5:3e:01:2a:43:27:49:6c:22:61:6e:dc:d3:5c:70:8d:fe:
b2:3a:a0:c2:06:f7:50:42:77:dd:a3:24:a2:7b:77:77:e5:c1:
2a:1d:02:0c:56:eb:73:71:ca:d6:18:69:4d:fd:11:24:4c:fc:
0f:d2:7d:2a:a9:41:70:af:bd:84:10:f7:5a:8d:17:eb:a5:2a:
36:ef:34:18:31:4b:c0:22:bd:69:0d:bd:13:08:06:f1:aa:43:
fc:0f:5b:85:81:f7:19:d4:80:a0:b6:fd:91:42:98:e2:26:c3:
55:69:ca:ce:c0:90:32:8d:3f:74:9e:83:80:98:c1:5c:f0:0f:
bb:e1:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 11:53:35 2025 by rpki-client