
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
File: -3A-mVGI_yU2zMapCthWdyWd8HA.roa (raw, json)
Hash identifier: Xt8wb/YeOP+Mnx0T18mhjNb8MuBZj/Ng1j3FqhtRARw=
Subject key identifier: FB:70:3E:99:51:88:FF:25:36:CC:C6:A9:0A:D8:56:77:25:9D:F0:70
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0ED0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
Signing time: Tue 10 Jun 2025 11:09:09 +0000
ROA not before: Tue 10 Jun 2025 11:09:09 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 183.75.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3792 (0xed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:09:09 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=FB703E995188FF2536CCC6A90AD85677259DF070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:6c:45:20:e2:07:aa:78:25:9f:36:41:9c:
97:77:80:66:d7:69:17:41:61:5e:25:df:01:4f:7e:
02:22:c7:c5:7e:7b:72:3b:f4:4b:66:2d:cb:00:93:
0a:4c:11:cc:cf:d4:97:a6:0b:c3:21:0d:ea:5b:09:
7a:74:06:eb:7d:44:85:52:dd:7f:6f:2e:a2:48:8e:
8e:d1:23:b8:12:a0:5e:ae:ab:cc:ae:5a:4a:7d:69:
52:bb:1f:bc:ed:73:c1:d1:62:e3:79:9e:ee:2b:ca:
d0:71:a4:10:24:70:af:7c:b5:62:ab:6c:d5:35:67:
4e:b5:0d:8a:1d:a4:cd:2a:b8:d8:e9:f0:ae:a6:a1:
8a:73:1e:09:43:67:f1:86:4f:21:e5:bb:48:de:9f:
4e:c3:f4:38:88:b8:a9:fd:b3:08:2d:d8:d4:e7:15:
93:c4:1e:91:e4:fd:60:ed:11:7c:d1:76:a4:a2:ef:
32:90:26:6d:de:d3:5a:3a:9c:d6:94:f7:ae:04:42:
f1:7e:55:17:00:8f:c1:25:6a:71:81:66:db:e1:0d:
93:07:95:59:cc:53:35:3a:6c:b6:af:00:e4:35:e4:
af:1d:84:1c:b7:91:ea:b1:8e:35:8b:7e:da:df:ca:
e0:6c:5c:fa:85:e1:f3:e9:23:fc:df:a7:0e:37:6b:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:3E:99:51:88:FF:25:36:CC:C6:A9:0A:D8:56:77:25:9D:F0:70
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.75.0.0/18
Signature Algorithm: sha256WithRSAEncryption
55:79:e4:05:a5:a0:d4:f1:03:fb:57:fc:6f:d1:54:70:90:b6:
e8:8d:ed:a8:08:38:f7:17:49:71:65:07:12:4c:cf:93:03:d2:
02:5e:63:ae:bd:f2:9e:af:c4:db:c1:c1:65:cb:ab:ea:50:bd:
94:43:83:b6:e2:da:52:c3:2d:15:67:6f:e1:44:17:90:ff:1f:
ad:f8:99:46:de:19:6a:68:54:04:c2:6f:d9:ef:46:cb:8f:a9:
51:61:88:e1:aa:7c:db:49:29:26:b0:0a:8f:2b:15:e0:7d:39:
e8:26:d4:86:8a:d5:19:4e:37:0b:e2:96:ab:f1:73:7c:e7:37:
48:0b:43:65:9b:10:da:91:a6:ed:28:77:97:26:2d:95:32:70:
45:3c:25:2d:49:e7:f0:4c:d6:dd:8e:f9:7d:d1:f7:53:41:65:
c2:56:e9:3e:fc:f2:92:6a:e1:e0:ca:3b:3a:61:22:9f:02:85:
8a:03:eb:8e:e6:90:a2:e5:9a:18:b8:d5:19:70:7c:3e:f1:51:
d3:14:94:20:cf:43:88:13:4f:ca:7c:8b:c1:1b:09:09:9e:fa:
05:e1:50:59:e9:bf:78:31:58:0e:76:63:25:41:c6:9b:fa:49:
ad:9a:55:fb:a7:12:a2:29:37:d0:0f:16:31:3d:31:85:8b:60:
59:69:b5:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTA5MDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZCNzAzRTk5NTE4OEZG
MjUzNkNDQzZBOTBBRDg1Njc3MjU5REYwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRp2xFIOIHqnglnzZBnJd3gGbXaRdBYV4l3wFPfgIix8V+e3I7
9EtmLcsAkwpMEczP1JemC8MhDepbCXp0But9RIVS3X9vLqJIjo7RI7gSoF6uq8yu
Wkp9aVK7H7ztc8HRYuN5nu4rytBxpBAkcK98tWKrbNU1Z061DYodpM0quNjp8K6m
oYpzHglDZ/GGTyHlu0jen07D9DiIuKn9swgt2NTnFZPEHpHk/WDtEXzRdqSi7zKQ
Jm3e01o6nNaU964EQvF+VRcAj8ElanGBZtvhDZMHlVnMUzU6bLavAOQ15K8dhBy3
keqxjjWLftrfyuBsXPqF4fPpI/zfpw43awKLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+3A+mVGI/yU2zMapCthWdyWd8HAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Ly0zQS1tVkdJX3lVMnpNYXBDdGhXZHlXZDhIQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAa3SwAwDQYJKoZIhvcNAQELBQADggEBAFV55AWloNTxA/tX/G/RVHCQtuiN
7agIOPcXSXFlBxJMz5MD0gJeY6698p6vxNvBwWXLq+pQvZRDg7bi2lLDLRVnb+FE
F5D/H634mUbeGWpoVATCb9nvRsuPqVFhiOGqfNtJKSawCo8rFeB9Oegm1IaK1RlO
Nwvilqvxc3znN0gLQ2WbENqRpu0od5cmLZUycEU8JS1J5/BM1t2O+X3R91NBZcJW
6T788pJq4eDKOzphIp8ChYoD647mkKLlmhi41RlwfD7xUdMUlCDPQ4gTT8p8i8Eb
CQme+gXhUFnpv3gxWA52YyVBxpv6Sa2aVfunEqIpN9APFjE9MYWLYFlpteM=
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:47:59 2025 by rpki-client