
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/zE7uFKqYXhlGo-gtWxWv0eSRfLM.roa
File: zE7uFKqYXhlGo-gtWxWv0eSRfLM.roa (raw, json)
Hash identifier: SloxpbG7WOPBxF5POfeAxsok+oafsdKpmo/0XN30vkU=
Subject key identifier: CC:4E:EE:14:AA:98:5E:19:46:A3:E8:2D:5B:15:AF:D1:E4:91:7C:B3
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 92
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/zE7uFKqYXhlGo-gtWxWv0eSRfLM.roa
Signing time: Sat 01 Nov 2025 01:32:05 +0000
ROA not before: Sat 01 Nov 2025 01:32:05 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 17676
IP address blocks: 61.115.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 05:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Nov 1 01:32:05 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=CC4EEE14AA985E1946A3E82D5B15AFD1E4917CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:45:7d:22:09:02:3d:40:8f:8c:22:e0:3a:
7c:c1:00:d6:7d:b2:4d:57:2b:5a:56:eb:f2:0c:6c:
95:b1:47:d2:7b:a2:7c:65:1d:cc:a0:fb:e3:28:2c:
75:62:59:11:80:c2:1b:02:11:4e:11:52:8a:52:e6:
8e:0f:ef:d2:44:bf:df:cd:d4:b9:ad:14:7b:10:28:
14:10:14:01:70:b9:d0:ac:65:ca:5e:6d:a5:f5:e5:
9a:32:a8:8e:e8:41:85:cd:bc:8a:11:ae:aa:83:fa:
40:f6:01:c8:62:c0:c2:8b:d7:65:35:a8:b6:be:dc:
80:69:07:d1:82:62:9b:52:e6:c6:01:6b:c0:16:44:
e5:d5:6f:9d:07:64:a6:35:3a:9c:b0:c7:6e:10:5d:
47:79:e3:fb:d8:dc:82:55:1a:4e:f9:a6:5a:c8:a6:
9b:7a:28:00:5d:73:28:f9:48:56:f0:9c:f2:ee:49:
28:6a:db:9f:56:90:3b:2b:7c:00:dd:9d:fd:97:c0:
8b:fa:c1:a1:df:86:21:cc:29:f5:fa:ff:37:56:da:
72:c8:87:15:63:50:ba:04:a4:dc:b9:9c:56:93:12:
9e:b0:09:5a:75:86:7c:0d:e7:bc:9b:58:74:68:2a:
01:de:11:65:89:85:ab:14:41:f5:7e:ab:26:af:84:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:EE:14:AA:98:5E:19:46:A3:E8:2D:5B:15:AF:D1:E4:91:7C:B3
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/zE7uFKqYXhlGo-gtWxWv0eSRfLM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.115.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:1b:0d:ef:8d:71:8f:b3:dc:d0:2b:f0:33:71:d4:06:0c:50:
ae:db:75:13:77:69:b8:e5:f1:fe:1b:06:ac:fe:b4:11:21:82:
be:74:1e:96:01:0a:ac:f5:af:06:c9:43:60:a3:bc:9a:24:8f:
68:e3:eb:e3:03:83:09:2b:a3:a1:bf:59:87:ec:43:fc:ed:f6:
2b:9b:82:a4:08:0a:07:de:65:b3:3f:29:fc:5a:fe:7b:7d:a1:
70:a0:be:7b:24:b0:98:ed:bb:16:18:f2:98:6e:de:1e:bf:6b:
9f:f5:f2:ca:5e:57:7c:2f:a4:0c:d9:15:c6:95:89:92:48:89:
2c:f8:75:dd:9e:77:72:28:da:aa:5f:3f:c3:59:5b:de:3b:c9:
d2:47:52:4a:c9:f7:5a:30:fe:28:16:cd:58:0e:a5:59:d6:ff:
e2:b2:41:8a:f9:90:b2:1f:12:3a:69:6f:94:d7:2b:2c:ad:1b:
58:12:94:b9:c9:8e:e4:b0:2f:3e:fd:cf:d1:04:cb:3b:9a:b1:
4e:0c:2f:34:0e:e2:5c:13:76:3d:68:7c:8a:4e:d4:92:46:db:
7b:87:5f:c3:fb:fb:e8:64:ab:8d:8c:9a:40:43:43:f5:98:af:
58:1d:dc:0a:81:94:bc:14:7c:7f:02:a1:dd:4a:8a:3d:b6:61:
b2:b8:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:13:15 2025 by rpki-client