
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa
File: 61Frb8VkXvWK16g1aH8Z0x8sHOY.roa (raw, json)
Hash identifier: zlOIho0xTv92MFgTLdk4Bo6rbYqyjiGzHz7IKJov2cw=
Subject key identifier: EB:51:6B:6F:C5:64:5E:F5:8A:D7:A8:35:68:7F:19:D3:1F:2C:1C:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E7C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa
Signing time: Tue 10 Jun 2025 10:56:43 +0000
ROA not before: Tue 10 Jun 2025 10:56:43 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 219.122.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3708 (0xe7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 10:56:43 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=EB516B6FC5645EF58AD7A835687F19D31F2C1CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:d2:83:44:42:13:93:8d:00:3e:37:b6:94:
3d:99:93:a2:e3:4c:ee:df:6d:e9:59:44:4d:2e:a4:
c2:cc:02:cb:f5:03:f0:50:fa:8c:aa:d8:23:0f:89:
21:35:e2:42:91:bd:fd:e0:9c:86:12:d1:d1:0b:fe:
d7:e2:c6:65:31:f1:d8:07:2c:4e:b5:96:e8:8c:d0:
d5:28:37:a5:b9:81:47:a5:bf:55:54:81:76:c7:a4:
31:23:cf:d8:70:2d:1b:7f:64:82:c2:05:a3:8a:37:
a4:0f:35:31:b4:72:24:02:f6:58:5d:fd:08:64:ce:
85:50:ca:70:90:ee:fd:70:aa:98:ad:e0:70:80:0a:
d4:89:e8:eb:ad:21:f7:74:89:ae:30:fa:09:76:59:
a1:2c:93:f3:aa:71:ec:86:9d:57:72:a4:6c:29:e3:
8e:9f:d3:4c:11:e2:a7:1f:41:ff:30:52:46:d9:da:
b7:c3:e3:37:56:41:c9:5f:3d:6e:92:97:6c:3c:28:
97:5d:6e:24:b6:1e:03:f2:1b:16:ad:e1:10:e8:2a:
e4:9d:44:bc:ce:b8:15:6f:57:08:82:04:75:95:88:
48:b4:8a:ec:97:7c:02:b0:7c:c0:56:66:99:75:42:
5a:52:6f:35:8c:c6:a1:23:33:2f:d8:89:a8:5a:e6:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:6B:6F:C5:64:5E:F5:8A:D7:A8:35:68:7F:19:D3:1F:2C:1C:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.122.68.0/22
Signature Algorithm: sha256WithRSAEncryption
29:af:3c:16:3b:b0:00:bc:a4:b7:29:d2:f4:d0:54:bc:a8:1d:
14:9e:49:f7:c6:f3:59:b0:9c:78:91:0d:70:96:6e:db:1c:94:
15:83:71:a5:62:89:52:31:8b:43:41:3e:51:ec:f0:55:25:91:
42:d9:4a:95:97:e3:3c:38:f1:66:07:5f:af:dd:04:71:46:5f:
a7:b8:a6:80:85:76:0c:0e:f6:01:d5:46:ab:a5:9b:f3:b0:2b:
cf:9c:d7:a2:17:4f:3e:be:f2:51:fd:ac:40:1d:b6:ec:59:d2:
57:eb:3f:48:be:2c:3d:14:60:16:21:a8:6e:dc:d3:16:b9:8c:
4e:2b:66:ff:4d:6d:e0:6d:b7:73:89:45:c8:cc:d7:4f:a3:19:
ba:cb:cb:c1:57:eb:0c:b7:af:9d:07:a1:90:52:7e:4d:5a:31:
8e:15:dc:19:25:ea:0b:87:f4:e2:a7:bd:93:01:9f:3b:ba:9f:
56:41:20:c7:26:85:aa:7a:e0:c4:f8:7d:4d:b7:7a:11:49:a9:
37:41:b0:cf:70:1b:37:10:a7:f6:0e:e0:9e:82:0c:31:66:d2:
b4:4d:d7:03:00:76:bb:2e:ef:1e:00:b9:f5:dc:77:d1:3d:81:
17:5f:db:1c:b5:57:f0:cf:a2:ea:5f:f0:f4:f7:f1:ad:34:3c:
66:d9:f9:ff
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MDU2NDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEVCNTE2QjZGQzU2NDVF
RjU4QUQ3QTgzNTY4N0YxOUQzMUYyQzFDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSwdKDREITk40APje2lD2Zk6LjTO7fbelZRE0upMLMAsv1A/BQ
+oyq2CMPiSE14kKRvf3gnIYS0dEL/tfixmUx8dgHLE61luiM0NUoN6W5gUelv1VU
gXbHpDEjz9hwLRt/ZILCBaOKN6QPNTG0ciQC9lhd/QhkzoVQynCQ7v1wqpit4HCA
CtSJ6OutIfd0ia4w+gl2WaEsk/OqceyGnVdypGwp446f00wR4qcfQf8wUkbZ2rfD
4zdWQclfPW6Sl2w8KJddbiS2HgPyGxat4RDoKuSdRLzOuBVvVwiCBHWViEi0iuyX
fAKwfMBWZpl1QlpSbzWMxqEjMy/Yiaha5kd5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU61Frb8VkXvWK16g1aH8Z0x8sHOYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzYxRnJiOFZrWHZXSzE2ZzFhSDhaMHg4c0hPWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALbekQwDQYJKoZIhvcNAQELBQADggEBACmvPBY7sAC8pLcp0vTQVLyoHRSe
SffG81mwnHiRDXCWbtsclBWDcaViiVIxi0NBPlHs8FUlkULZSpWX4zw48WYHX6/d
BHFGX6e4poCFdgwO9gHVRqulm/OwK8+c16IXTz6+8lH9rEAdtuxZ0lfrP0i+LD0U
YBYhqG7c0xa5jE4rZv9NbeBtt3OJRcjM10+jGbrLy8FX6wy3r50HoZBSfk1aMY4V
3Bkl6guH9OKnvZMBnzu6n1ZBIMcmhap64MT4fU23ehFJqTdBsM9wGzcQp/YO4J6C
DDFm0rRN1wMAdrsu7x4AufXcd9E9gRdf2xy1V/DPoupf8PT38a00PGbZ+f8=
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:47:34 2025 by rpki-client