
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
File: nI838UGau49QEdF4UQd8z8wBXHA.roa (raw, json)
Hash identifier: 9Pl6rblN4qMxLJmSc+W3wZVGSr6xp9NgQu/OOSgBcI8=
Subject key identifier: 9C:8F:37:F1:41:9A:BB:8F:50:11:D1:78:51:07:7C:CF:CC:01:5C:70
Certificate issuer: /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Certificate serial: 15
Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
Signing time: Sat 26 Jul 2025 13:07:47 +0000
ROA not before: Sat 26 Jul 2025 13:07:47 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 63801
IP address blocks: 2401:b420::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Validity
Not Before: Jul 26 13:07:47 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=9C8F37F1419ABB8F5011D17851077CCFCC015C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:35:83:9e:a1:48:50:a8:8d:db:82:5c:69:
99:27:bd:c4:f7:e0:d3:37:6b:f1:00:19:6c:e7:f0:
f5:5d:a2:e0:8d:81:77:4f:e1:8e:5a:7f:ae:43:c3:
8f:c8:ac:2d:a1:5a:7d:94:20:c9:cd:45:e4:09:46:
cd:1c:df:b7:42:91:d9:d3:8c:0b:c5:32:bc:4f:f1:
84:90:77:8c:89:7e:b1:6c:55:11:95:b0:0d:de:29:
d3:8a:fa:b0:aa:bd:59:47:7d:35:a0:82:6d:ed:e7:
f2:81:3b:9c:b1:1d:6b:50:ef:f4:8b:00:8a:18:63:
b4:97:2e:13:18:79:19:6f:fd:ea:45:b4:56:2e:3c:
c8:b5:90:17:f5:02:0a:46:67:4e:43:ec:ad:9c:83:
c3:34:0b:e7:00:01:e5:5e:d8:51:17:66:e5:bf:c4:
36:a3:d4:05:d7:95:60:8a:82:ca:dc:c7:a6:99:c1:
dc:54:cb:ef:d7:d7:3d:5e:22:ec:22:a5:71:26:05:
83:b0:a4:ff:11:cb:88:65:70:92:6b:f4:8d:1e:a6:
1c:34:b4:6a:8b:ab:6a:d2:f5:66:06:27:56:e4:39:
56:1c:21:d1:6e:55:48:bc:90:34:1d:4a:44:9f:22:
38:68:84:58:14:da:8b:e5:1a:51:e3:a8:37:84:b9:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:37:F1:41:9A:BB:8F:50:11:D1:78:51:07:7C:CF:CC:01:5C:70
X509v3 Authority Key Identifier:
keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b420::/32
Signature Algorithm: sha256WithRSAEncryption
95:85:87:11:a7:ec:62:04:48:cd:05:c1:41:91:86:1c:db:b2:
53:e6:9b:83:89:bb:25:53:70:91:cb:18:ca:12:5b:b5:07:39:
d1:2d:9b:e4:e3:37:bd:8a:ae:19:56:45:00:90:a3:19:d1:fa:
8f:d8:7b:63:5f:39:cc:db:47:02:21:97:ca:c0:69:1c:9b:b5:
35:93:bc:31:a6:a8:e3:1b:3b:79:ca:25:54:a2:bd:e8:c3:28:
ee:ff:14:54:ed:97:dc:13:e9:98:9f:0e:10:64:d8:16:32:69:
f8:b7:f9:bd:09:01:72:38:b8:a3:a9:fe:9a:2c:48:92:e5:2c:
0c:e8:d2:ad:16:f2:ef:f9:ec:f8:65:9e:fd:d9:1e:b9:6e:be:
6e:9f:ab:ee:9f:d3:ae:bf:93:73:d2:2c:24:b6:0b:21:8e:03:
51:7c:fe:c6:4d:4d:3b:81:77:f8:4d:8b:99:65:03:f5:2d:d1:
c3:2a:8b:b2:0c:5a:7c:15:73:d7:db:43:59:89:13:a2:49:88:
96:8a:09:3d:89:d7:c4:69:dc:9f:f0:61:d3:0e:17:85:29:7e:
48:44:c6:77:13:11:e7:87:de:cb:43:5a:7e:5f:0a:80:b3:ae:
87:6a:88:72:bf:f5:d5:87:5c:2e:f0:f9:07:3b:4c:69:e8:82:
70:bc:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:12:54 2025 by rpki-client