
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa
File: B0dhDlniNHegjP-Ag-4Jy6JX598.roa (raw, json)
Hash identifier: 35g0HFsXla9gopKccLh7WTMcmCqUNtcCPB5yndlzf3Q=
Subject key identifier: 07:47:61:0E:59:E2:34:77:A0:8C:FF:80:83:EE:09:CB:A2:57:E7:DF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0C7D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa
Signing time: Tue 01 Apr 2025 02:00:41 +0000
ROA not before: Tue 01 Apr 2025 02:00:41 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:00:41 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=0747610E59E23477A08CFF8083EE09CBA257E7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:37:2f:9c:c0:19:6a:23:0b:ee:84:6b:fa:
ee:ee:b2:a6:cd:ce:f1:5e:fa:6f:04:18:99:14:83:
a6:7e:13:78:72:9e:4b:b2:1b:a9:27:8f:88:79:94:
6c:26:8f:12:85:62:29:59:e3:46:0a:3d:3a:57:cf:
ef:85:26:70:08:fd:dc:e4:00:4a:1c:53:54:f9:12:
ec:4e:77:f8:4a:5f:80:47:2b:dc:a7:48:df:c3:61:
c6:19:a9:9e:43:78:be:7c:36:a8:a3:3f:4e:d5:f6:
0d:93:4f:ff:e8:d6:74:2a:bb:f7:2d:dc:eb:5c:c8:
59:d7:5e:9b:8b:b6:7e:e4:9f:1d:ca:c5:ba:35:a6:
f1:84:4c:23:3e:5e:5a:5b:48:2d:43:c5:18:32:25:
13:e8:1c:02:d8:dc:49:06:6a:8b:49:b8:b2:68:41:
15:d4:51:81:88:29:59:fc:83:08:a1:a3:ee:f4:eb:
2e:d4:ae:43:00:b7:47:ed:ac:07:79:54:23:ca:3b:
56:86:0c:92:84:ab:06:84:4c:ff:c9:f2:03:be:08:
8d:89:0c:fc:94:cb:e2:ad:33:8e:57:20:0f:e5:f0:
99:b7:33:ae:6a:5d:7e:d1:74:68:5f:18:05:d6:49:
0c:48:68:2c:8f:4a:5f:89:21:c5:0d:68:c6:c9:f9:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:61:0E:59:E2:34:77:A0:8C:FF:80:83:EE:09:CB:A2:57:E7:DF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:77:09:8a:8b:60:05:56:7a:13:b1:0b:b8:fc:1a:81:e4:71:
b8:90:35:97:65:44:c2:ac:82:4b:85:83:ce:04:61:5a:48:db:
f8:fb:5c:1b:83:f4:e0:04:cc:79:30:a9:e2:37:ff:f9:86:23:
5c:03:2a:92:c4:bf:0e:5c:0b:20:73:ec:40:af:e2:a1:92:26:
ad:ec:38:50:70:44:cb:98:fe:82:5b:18:10:fa:b0:6d:74:d5:
a6:b6:39:c0:8b:ae:5b:76:22:0e:78:d9:3b:8d:6c:af:87:f7:
59:5e:ae:e3:66:cd:de:5c:1e:30:7b:69:7f:70:8c:e3:1f:ea:
98:ea:d9:51:ca:67:c0:57:5b:fd:cb:1a:1e:68:76:3c:72:86:
64:45:d9:c5:db:80:87:15:7b:83:d6:7f:ac:df:a1:89:a0:bb:
a9:85:6a:6d:7c:91:52:68:03:53:17:8f:6a:3e:a8:80:f8:43:
93:31:46:fd:17:1e:c6:2a:65:1f:0d:1d:7b:d7:fb:8e:38:fe:
87:d6:6f:a5:75:7b:96:0f:c6:3b:3c:ea:35:14:de:c0:c2:e1:
cf:f0:6e:c5:0f:b1:c8:4a:f2:4d:0a:d9:d0:1c:da:cd:0a:e8:
87:a9:08:df:be:7a:be:fc:86:6d:20:24:a9:8a:9e:f7:ef:91:
71:78:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:45:08 2025 by rpki-client