
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
File: rVlSzRY4UmSLwNCpmLS8VOObp98.roa (raw, json)
Hash identifier: BMyTgaq0lPHa7TI3CJEWfzUfTBQBnKDJqfitSBEiOtw=
Subject key identifier: AD:59:52:CD:16:38:52:64:8B:C0:D0:A9:98:B4:BC:54:E3:9B:A7:DF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0E05
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
Signing time: Tue 01 Apr 2025 02:29:16 +0000
ROA not before: Tue 01 Apr 2025 02:29:16 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 49.103.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:29:16 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=AD5952CD163852648BC0D0A998B4BC54E39BA7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:7d:b8:13:d8:7b:c0:56:a0:56:0b:a0:d1:
6c:15:cc:1c:5b:4a:1c:f8:2e:a1:b1:60:ee:e6:b0:
72:b1:7b:97:3d:82:54:33:a1:8e:42:2a:97:6e:ab:
44:72:16:a6:e7:b8:61:67:f7:51:22:0d:de:70:2c:
9c:9b:f7:13:55:54:b2:37:9b:b5:65:f8:41:64:d3:
d5:a1:84:94:a3:e9:39:f8:20:52:9d:a1:68:de:4b:
13:a1:e4:65:bc:32:68:47:3d:fe:d5:2a:6e:88:b1:
10:73:be:31:1e:48:14:73:4a:03:13:48:cf:8b:a5:
dc:14:19:1a:ec:e6:02:99:65:dc:b7:0b:f7:97:71:
d9:e1:d9:fc:ef:fb:f8:ef:d2:6d:3e:6b:6e:b7:d2:
97:e8:d4:fd:c1:64:67:c1:b4:a3:1f:40:14:fa:3f:
f4:47:31:d8:4a:76:38:7e:c5:8a:72:e6:6c:b6:88:
10:19:b2:c8:76:eb:6a:b7:48:62:0d:54:b6:7a:11:
5d:77:89:ba:42:e1:72:f1:5d:83:2f:aa:f9:44:63:
fe:f8:80:ad:57:75:31:49:9e:e0:ce:e6:2f:54:ab:
d3:2e:cc:29:60:1c:7b:04:4e:bb:d2:e8:73:bf:21:
fb:b9:7f:cb:6b:3d:8f:39:38:62:ad:d5:37:5d:8c:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:52:CD:16:38:52:64:8B:C0:D0:A9:98:B4:BC:54:E3:9B:A7:DF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:0b:b9:1f:6e:fe:89:14:63:ad:84:5e:a7:b3:0b:00:06:5c:
42:8a:71:9b:65:fe:0c:fc:df:d6:17:e1:a4:7f:d9:99:f5:66:
80:94:d5:94:99:98:3b:9d:25:d8:15:d4:bf:74:6f:70:87:f5:
e1:51:f8:72:76:f0:03:7c:24:8a:40:41:5f:bf:f2:c9:ec:a2:
30:3e:a1:84:91:1d:76:2f:72:26:fc:14:10:d3:f1:88:e4:61:
bc:94:e2:32:0c:a3:f6:e2:a8:a0:eb:60:99:71:94:f3:fa:c4:
b2:ce:81:2b:b3:86:67:1e:6f:76:b6:a8:90:f0:a7:df:60:35:
ec:5c:9d:df:81:96:73:d6:90:94:f4:55:1a:74:00:82:08:e1:
f6:6f:94:9e:6b:bf:60:21:9e:cf:b4:36:43:8b:d1:02:01:82:
77:e7:2f:3f:a8:41:f7:2e:ca:a0:26:b1:19:23:d2:fb:59:84:
fc:b6:9b:09:d3:8c:d8:5e:de:41:74:8a:de:d1:33:a7:38:94:
ce:27:0b:9e:67:3a:ef:bf:e7:ee:d8:02:ad:32:97:c9:6c:f8:
14:0e:47:6e:e2:c8:e7:be:3f:0d:50:b5:dc:8c:f4:bf:5a:81:
75:ae:fc:d9:58:cc:5c:c0:78:32:e3:06:2c:a5:b7:12:86:9b:
dd:e1:9c:cf
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjI5MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFENTk1MkNEMTYzODUy
NjQ4QkMwRDBBOTk4QjRCQzU0RTM5QkE3REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgV324E9h7wFagVgug0WwVzBxbShz4LqGxYO7msHKxe5c9glQz
oY5CKpduq0RyFqbnuGFn91EiDd5wLJyb9xNVVLI3m7Vl+EFk09WhhJSj6Tn4IFKd
oWjeSxOh5GW8MmhHPf7VKm6IsRBzvjEeSBRzSgMTSM+LpdwUGRrs5gKZZdy3C/eX
cdnh2fzv+/jv0m0+a2630pfo1P3BZGfBtKMfQBT6P/RHMdhKdjh+xYpy5my2iBAZ
ssh262q3SGINVLZ6EV13ibpC4XLxXYMvqvlEY/74gK1XdTFJnuDO5i9Uq9MuzClg
HHsETrvS6HO/Ifu5f8trPY85OGKt1TddjGfbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrVlSzRY4UmSLwNCpmLS8VOObp98wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JWbFN6Ulk0VW1TTHdOQ3BtTFM4Vk9PYnA5OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxZyAwDQYJKoZIhvcNAQELBQADggEBABQLuR9u/okUY62EXqezCwAGXEKK
cZtl/gz839YX4aR/2Zn1ZoCU1ZSZmDudJdgV1L90b3CH9eFR+HJ28AN8JIpAQV+/
8snsojA+oYSRHXYvcib8FBDT8YjkYbyU4jIMo/biqKDrYJlxlPP6xLLOgSuzhmce
b3a2qJDwp99gNexcnd+BlnPWkJT0VRp0AIII4fZvlJ5rv2Ahns+0NkOL0QIBgnfn
Lz+oQfcuyqAmsRkj0vtZhPy2mwnTjNhe3kF0it7RM6c4lM4nC55nOu+/5+7YAq0y
l8ls+BQOR27iyOe+Pw1QtdyM9L9agXWu/NlYzFzAeDLjBiyltxKGm93hnM8=
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:42:46 2025 by rpki-client