
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa
File: Zp5DvRDWgjOi3leIzMEZiEGFE74.roa (raw, json)
Hash identifier: PRy1Fr7OlD9F5U62wh1Gz33mSiu7tG/TQg36rb9k2jE=
Subject key identifier: 66:9E:43:BD:10:D6:82:33:A2:DE:57:88:CC:C1:19:88:41:85:13:BE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0BE8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa
Signing time: Tue 01 Apr 2025 01:47:43 +0000
ROA not before: Tue 01 Apr 2025 01:47:43 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.74.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:47:43 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=669E43BD10D68233A2DE5788CCC11988418513BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:54:dc:13:58:66:97:2e:a5:87:7f:96:c5:
3a:ea:90:da:cc:9a:92:4e:eb:ce:ce:4a:16:82:4c:
6c:9e:7c:56:ee:cd:4f:dd:21:b0:64:27:b7:c6:54:
03:e6:3e:c6:2a:fc:5e:07:5b:40:f4:74:3d:ba:7f:
cb:92:90:92:4e:98:6f:fc:d2:91:93:08:71:64:b1:
05:90:da:06:6f:68:d7:24:19:50:3f:f5:89:fe:23:
97:57:46:2e:6f:b6:0a:83:9e:00:87:56:cf:47:2d:
71:c5:e0:40:12:a4:83:ae:ff:16:75:75:38:eb:13:
5a:80:c4:59:db:42:3e:ab:40:a1:a8:25:dc:9c:94:
bc:5a:c3:fb:c9:52:ba:40:f6:bb:25:4b:fc:11:ec:
1c:d4:c9:61:a6:d1:e8:e5:2f:89:89:28:73:e2:a5:
17:09:ef:38:69:25:0e:51:10:7e:d8:25:f2:f2:f2:
00:e5:dc:be:5e:72:c6:eb:c3:24:00:49:2c:8a:d2:
ee:df:70:7a:c1:1d:96:7d:14:fa:62:b8:45:70:82:
e8:61:4a:a5:ba:60:07:0c:03:71:63:cd:67:f5:aa:
11:9a:8f:a0:95:0e:44:ad:34:d4:89:01:e8:33:d8:
ff:04:de:67:36:7f:1f:d4:97:c4:b5:14:2d:19:50:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:43:BD:10:D6:82:33:A2:DE:57:88:CC:C1:19:88:41:85:13:BE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.74.198.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:13:9e:8a:bc:76:9e:18:b4:61:86:db:a3:1c:e7:28:2a:82:
b8:1e:72:6d:83:85:36:e8:87:5d:21:b2:9d:53:34:1b:73:c2:
93:4f:fd:26:4b:9a:bb:96:53:7c:16:c9:cf:3a:97:c3:a4:ae:
8a:db:28:41:ef:ac:d8:65:70:2f:f0:17:8b:cf:5d:f1:b1:81:
f9:bc:09:07:50:d7:71:e8:0f:6d:08:6a:fb:4e:41:a0:37:d5:
ae:51:11:71:89:44:47:a2:7b:07:b2:8a:7a:b2:37:3c:31:ae:
29:fa:33:0d:e6:f5:9e:58:47:25:13:20:25:e3:8f:dd:0a:00:
83:78:dc:0b:2a:b3:91:27:48:e6:02:94:d3:7d:60:3a:2e:5a:
9f:58:c4:5d:fe:0c:a4:0a:2a:d8:5b:05:cc:14:23:da:15:e5:
fc:98:1f:21:26:99:0d:bc:92:6e:eb:b3:1a:94:55:5a:39:6f:
b2:9e:b0:1b:82:34:ef:3c:f5:8d:8f:e8:5d:35:53:c4:51:87:
b9:3c:4c:a3:34:10:ee:bc:fc:85:2c:24:b7:36:f8:e3:ea:ce:
27:bc:f8:18:b4:86:0a:bb:20:d3:4e:85:22:bc:e0:7a:00:1e:
6c:8d:1b:d3:13:7d:9a:87:7a:9e:c5:47:68:1a:8c:f1:34:5e:
fb:c8:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:42:47 2025 by rpki-client