
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa
File: dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa (raw, json)
Hash identifier: Gl3PtD1cwsg+epOCRsG8EhXFh7SuZ/E8vBGG9u96GwE=
Subject key identifier: 74:A3:C8:0B:D4:8C:F4:3C:A3:F7:92:A4:81:FE:52:5F:60:0B:65:44
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F75
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa
Signing time: Tue 10 Jun 2025 11:32:37 +0000
ROA not before: Tue 10 Jun 2025 11:32:37 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 183.73.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:32:37 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=74A3C80BD48CF43CA3F792A481FE525F600B6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:b0:be:e6:22:4f:cd:03:80:f1:b2:03:bd:
e0:aa:99:61:4e:99:f5:26:38:22:7f:45:76:8f:7c:
0c:dc:0e:68:9a:69:ab:9e:98:a5:62:5b:2d:ac:f3:
f8:76:d4:ea:5d:76:db:6a:a2:d8:f2:e6:63:b0:3c:
3c:83:99:6b:1c:7b:6d:22:88:00:13:08:cd:d1:07:
de:ad:61:1b:83:9a:ca:6d:3e:00:c3:90:e9:12:59:
6c:79:52:87:ff:3b:4a:69:f5:98:23:4a:cc:ca:bc:
2f:13:4a:ed:23:43:f4:34:99:fa:af:d4:50:fd:24:
50:19:33:09:66:ee:53:dd:7e:fa:dd:47:f3:23:15:
bf:99:bd:84:29:28:9a:48:2f:9d:5c:e5:05:c4:3d:
c9:d6:01:58:3a:c1:2d:56:dd:f4:5a:46:09:e0:be:
03:1d:8c:82:2c:89:b4:dc:22:c0:96:3a:07:f1:99:
9e:9f:0b:5a:cc:62:a3:eb:48:f3:b5:3d:60:e1:c1:
22:64:54:37:3f:ca:44:9d:d3:2c:8e:bf:71:85:d6:
51:23:88:b2:f6:27:dd:00:0a:50:ad:66:53:ca:bc:
88:d1:64:73:00:d5:90:b5:3a:d5:e0:45:4b:fb:a5:
3a:b8:97:d4:da:0f:ae:22:dc:06:04:d9:e3:7b:54:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A3:C8:0B:D4:8C:F4:3C:A3:F7:92:A4:81:FE:52:5F:60:0B:65:44
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.73.16.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e1:7d:5d:bb:1b:ac:ca:c1:a4:25:64:68:ef:13:d0:71:cf:
b0:10:87:22:74:84:19:53:6d:96:7c:ad:0c:8f:27:bb:ac:75:
1c:22:bb:e8:17:d8:58:9a:7b:b5:19:93:f0:31:c3:cf:af:34:
9f:d3:f5:d0:23:32:c9:06:23:18:41:02:b6:69:23:34:4e:46:
54:60:12:2d:96:ab:4b:f5:a3:f8:59:44:3f:58:13:04:05:fb:
af:e0:94:f9:7a:12:88:17:85:c0:f2:f7:26:01:52:b8:e3:e1:
47:ff:07:e2:a8:69:b4:db:c8:15:d2:6d:0d:44:69:de:a0:b7:
66:ed:6b:00:fc:51:89:43:ef:f8:d0:34:15:73:7f:a3:4f:df:
eb:2c:a9:5d:6d:71:eb:71:9e:50:10:0d:6c:8a:53:f0:3a:65:
69:27:61:ce:0e:6f:ff:2b:d5:8b:d3:75:70:9b:05:52:7c:d6:
21:90:4d:d7:db:f6:19:15:b7:dc:68:c3:0a:2a:3d:de:86:e7:
51:d5:f8:28:51:eb:34:05:a7:9e:7f:53:84:6c:35:cd:24:16:
b5:44:e8:bc:7c:60:86:96:bc:91:0c:6c:68:db:3d:1e:b3:f2:
0a:eb:ed:bf:0e:57:c4:6a:d8:bb:ac:3e:f6:35:9a:0a:6d:7f:
bf:b5:b9:a2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTMyMzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDc0QTNDODBCRDQ4Q0Y0
M0NBM0Y3OTJBNDgxRkU1MjVGNjAwQjY1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC27LC+5iJPzQOA8bIDveCqmWFOmfUmOCJ/RXaPfAzcDmiaaaue
mKViWy2s8/h21Opddttqotjy5mOwPDyDmWsce20iiAATCM3RB96tYRuDmsptPgDD
kOkSWWx5Uof/O0pp9ZgjSszKvC8TSu0jQ/Q0mfqv1FD9JFAZMwlm7lPdfvrdR/Mj
Fb+ZvYQpKJpIL51c5QXEPcnWAVg6wS1W3fRaRgngvgMdjIIsibTcIsCWOgfxmZ6f
C1rMYqPrSPO1PWDhwSJkVDc/ykSd0yyOv3GF1lEjiLL2J90AClCtZlPKvIjRZHMA
1ZC1OtXgRUv7pTq4l9TaD64i3AYE2eN7VHfxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdKPIC9SM9Dyj95Kkgf5SX2ALZUQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RLUElDOVNNOUR5ajk1S2tnZjVTWDJBTFpVUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SRAwDQYJKoZIhvcNAQELBQADggEBADnhfV27G6zKwaQlZGjvE9Bxz7AQ
hyJ0hBlTbZZ8rQyPJ7usdRwiu+gX2Fiae7UZk/Axw8+vNJ/T9dAjMskGIxhBArZp
IzRORlRgEi2Wq0v1o/hZRD9YEwQF+6/glPl6EogXhcDy9yYBUrjj4Uf/B+KoabTb
yBXSbQ1Ead6gt2btawD8UYlD7/jQNBVzf6NP3+ssqV1tcetxnlAQDWyKU/A6ZWkn
Yc4Ob/8r1YvTdXCbBVJ81iGQTdfb9hkVt9xowwoqPd6G51HV+ChR6zQFp55/U4Rs
Nc0kFrVE6Lx8YIaWvJEMbGjbPR6z8grr7b8OV8Rq2LusPvY1mgptf7+1uaI=
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:42:45 2025 by rpki-client