
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
File: JPad5V2HX-C25677l0GQmfstWpA.roa (raw, json)
Hash identifier: 8XZSDbZE67v1gS6RkGEuYHW1UfmIzK6SWgDlr7Aiu5Q=
Subject key identifier: 24:F6:9D:E5:5D:87:5F:E0:B6:E7:AE:FB:97:41:90:99:FB:2D:5A:90
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E90
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
Signing time: Tue 10 Jun 2025 10:56:54 +0000
ROA not before: Tue 10 Jun 2025 10:56:54 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 49.111.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3728 (0xe90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 10:56:54 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=24F69DE55D875FE0B6E7AEFB97419099FB2D5A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:8b:f1:98:bb:85:f0:d0:d9:a0:3f:a6:df:
82:11:0f:66:bc:a4:38:32:42:d3:8f:9b:d6:21:be:
7f:2e:7a:93:6c:68:2a:ae:5b:96:ea:22:1c:c3:f1:
7d:67:e0:d6:1b:d8:8c:86:c9:49:f9:19:4d:d6:8a:
4e:21:e3:76:83:61:a9:f1:8d:1c:28:85:b6:34:f8:
5b:b2:15:26:b5:95:93:a3:1d:64:64:f6:c6:89:c5:
94:3b:68:91:aa:92:12:dd:94:36:4f:c3:6d:e2:6b:
85:54:9b:6a:25:10:eb:3e:00:19:15:7d:b7:16:fa:
28:6d:1c:a9:00:78:ed:d4:d5:ae:7d:82:eb:1c:19:
82:59:b6:b3:3e:f8:d9:46:77:84:28:c5:51:a3:f2:
5d:83:ee:7f:b1:ba:e3:5b:49:1b:f6:90:0b:74:42:
da:0b:4e:fb:d7:64:35:57:2e:ad:4d:af:78:dd:5a:
07:27:f4:3a:cf:7e:b0:c4:38:ab:f4:0f:1f:ef:67:
5c:3d:f2:57:fe:6f:99:23:4d:85:7e:9a:8f:cb:ea:
61:18:2a:15:ee:c2:de:6d:34:63:30:93:af:14:ed:
ee:43:f9:f1:98:1a:3b:52:42:9c:f1:dc:66:99:ca:
48:5c:b5:2d:47:98:0e:1d:f8:b6:ee:dc:77:30:8c:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:9D:E5:5D:87:5F:E0:B6:E7:AE:FB:97:41:90:99:FB:2D:5A:90
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.111.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c7:c0:aa:6a:20:00:9e:45:4b:8c:0d:b0:a2:3d:fc:fb:98:63:
23:d1:4c:1b:ce:e2:c9:e1:46:46:48:12:2c:18:87:6d:08:53:
0e:4c:91:2d:7d:32:0b:5d:87:94:f5:a3:c2:56:9d:59:fa:36:
f9:2e:9f:1e:9d:9a:71:76:24:bc:92:32:f9:42:0c:e4:b6:0f:
a4:61:10:ca:8e:b5:cb:ba:10:7e:fb:6d:11:ba:5d:52:42:5b:
fa:79:89:99:2b:8d:93:58:ba:e0:21:ac:81:7a:21:c8:b3:50:
6d:18:7d:5d:64:cc:af:75:ed:d1:a0:d0:db:de:69:65:fd:3a:
22:b3:c2:29:8e:aa:52:a3:0c:09:7d:79:7e:bb:b3:e1:45:a8:
96:e4:42:7f:83:9b:2a:4f:8e:ac:57:69:7c:07:c4:ba:1a:c6:
86:2c:d9:84:ef:12:d2:3f:29:90:9f:dd:71:6c:f7:88:24:31:
1b:4e:d2:c9:99:51:e5:6b:e3:56:a6:76:0b:a1:7b:ad:b8:dd:
ac:df:dc:ea:16:63:7a:ab:41:6f:a6:ab:5c:48:5a:fb:b3:d6:
ad:3b:f9:12:b3:b7:87:01:1b:6e:72:3a:fc:aa:44:27:03:e7:
9d:ef:f6:74:2d:49:71:e3:22:a1:ef:71:bf:da:f4:51:7c:4f:
18:de:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:45:14 2025 by rpki-client