
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa
File: ym3GZmNUqShJjkjcNLV_zQpNxbI.roa (raw, json)
Hash identifier: EdNWfLM+7zhbzuxlGMk5XPTCWvMYGSRZXVPS+zR18vY=
Subject key identifier: CA:6D:C6:66:63:54:A9:28:49:8E:48:DC:34:B5:7F:CD:0A:4D:C5:B2
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 045E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa
Signing time: Mon 01 Sep 2025 01:34:08 +0000
ROA not before: Mon 01 Sep 2025 01:34:08 +0000
ROA not after: Sat 15 Aug 2026 01:30:02 +0000
asID: 10013
IP address blocks: 59.156.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Sep 1 01:34:08 2025 GMT
Not After : Aug 15 01:30:02 2026 GMT
Subject: CN=CA6DC6666354A928498E48DC34B57FCD0A4DC5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:6c:53:87:9d:39:b1:04:61:64:39:cc:79:
fd:c8:ec:74:13:a8:f4:c0:74:cd:d3:98:b9:c4:c9:
54:c5:19:7b:9a:02:8f:85:f9:f7:1a:5f:ba:a7:31:
46:f8:11:32:0d:18:22:56:38:22:ff:e1:2e:2f:2d:
98:b9:f6:63:4e:3f:57:41:67:69:03:bb:52:51:e8:
8b:f4:78:e8:5f:65:54:c7:fe:f4:e5:75:bf:f7:9c:
72:3b:4f:c3:da:a3:f8:08:a6:68:6e:df:43:0c:d4:
06:c7:5c:b8:31:2f:69:dd:ca:fd:65:dc:e4:e2:ed:
be:a2:b4:e5:4f:b8:80:cb:7c:71:b0:ca:f2:43:8f:
65:87:24:36:83:99:6b:b6:c4:24:53:53:61:ca:f5:
68:8a:ee:0f:94:63:9f:e2:48:26:c0:4b:1a:6d:69:
c0:78:d7:28:36:25:fb:eb:15:96:dd:d3:6c:4c:00:
c4:e3:28:44:8d:c2:cd:27:65:71:aa:fa:b4:e6:98:
c8:2e:4c:e6:65:45:94:a3:7c:6e:70:f0:00:30:a1:
13:d5:a7:e9:25:5b:b1:98:98:9e:46:b1:7c:a1:17:
1d:6f:ab:74:85:61:0b:ab:3c:71:2e:50:82:0a:6a:
a4:e1:60:9b:4a:7a:a0:9d:69:8f:a0:50:67:d0:5d:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:C6:66:63:54:A9:28:49:8E:48:DC:34:B5:7F:CD:0A:4D:C5:B2
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.156.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e9:18:d2:d5:b3:1a:87:a7:e2:a8:7b:b5:7a:50:4b:13:bf:
18:4c:71:da:9c:ec:48:5b:c9:25:dd:30:35:47:d4:20:1b:a2:
e3:81:8c:e5:ce:d8:07:8e:86:b8:56:06:ff:a8:d0:3a:e8:98:
d9:7f:28:c3:b4:74:66:89:50:27:c1:46:b1:c8:2d:d8:2e:35:
c1:51:de:8a:88:79:50:a6:78:46:81:49:03:c8:27:ed:98:84:
1b:db:3e:0c:95:74:75:76:c0:a0:25:c8:13:0c:ed:a1:2a:a3:
41:eb:71:72:6c:1d:4d:cd:68:d9:84:62:9e:53:73:90:b5:4f:
0f:85:ce:62:2f:72:85:8c:e7:52:8a:7c:1d:03:d1:23:ca:f7:
27:fd:f5:51:29:a1:29:bb:93:40:28:8c:d3:56:af:cb:d7:c3:
4b:d8:22:18:f8:51:48:e4:85:2a:e1:2f:81:38:87:e2:4d:88:
40:ed:1d:7c:a5:86:4c:bc:3c:74:a9:68:26:41:83:51:56:2d:
2a:9b:6f:38:2e:54:cc:ea:5c:1d:81:1b:48:c6:06:71:0e:14:
7b:ad:82:67:99:e7:b4:96:e2:61:2a:35:95:c2:3f:ab:b6:84:
80:8a:88:96:f4:c8:b6:eb:1d:ab:f4:13:08:87:4a:74:9c:bc:
d9:0a:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:20:59 2025 by rpki-client