
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
File: FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa (raw, json)
Hash identifier: 9xIQ1aoYhLmNaKV0qTMShB6r+L42mmz0vEe1O2sJ6Yc=
Subject key identifier: 15:CB:40:C5:B2:6E:A2:77:26:1B:46:3A:0B:2B:F0:D1:C8:3B:16:97
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 6A
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
Signing time: Fri 01 Aug 2025 01:30:51 +0000
ROA not before: Fri 01 Aug 2025 01:30:51 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 10000
IP address blocks: 114.134.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Aug 1 01:30:51 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=15CB40C5B26EA277261B463A0B2BF0D1C83B1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:e9:18:4f:7d:ff:84:8c:60:80:81:26:cd:
f4:d9:f9:49:a6:96:d5:7a:b5:51:d7:c0:d9:4a:bc:
e8:f7:6f:3e:95:9e:94:22:bc:57:8b:32:f9:a0:58:
90:cb:60:85:8f:d5:cc:76:cf:78:c1:62:cb:e0:bb:
86:30:1f:94:eb:88:bb:1e:c5:6f:42:bb:c5:71:08:
ac:7f:b1:79:99:8b:b8:5f:c2:60:90:b8:57:88:15:
1f:08:fe:7a:8e:b1:44:e1:1d:42:10:a5:64:cf:b6:
32:32:5b:46:14:0b:f8:7e:4e:ad:27:21:49:63:b4:
be:38:dc:c7:1d:fa:82:30:87:c1:2b:dc:9e:44:e9:
e0:a2:bd:fe:b0:02:4c:a1:bb:90:9c:cc:d3:32:51:
cf:00:82:b1:30:ea:69:d4:62:a6:7b:79:97:dc:67:
c9:62:e2:de:29:d4:38:b1:9a:1e:5a:13:e2:7d:ec:
b7:d7:73:e8:92:4b:df:c6:36:f4:fd:26:1b:15:e3:
f0:26:a5:cd:fe:3c:5e:79:66:2a:eb:ce:44:04:b0:
ea:80:84:e6:90:7d:ae:82:1e:e1:04:f6:01:23:fd:
18:0f:21:cc:da:65:73:8f:aa:a6:8b:43:26:24:05:
91:37:82:a1:a1:65:29:86:b5:68:53:6a:36:29:2d:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:40:C5:B2:6E:A2:77:26:1B:46:3A:0B:2B:F0:D1:C8:3B:16:97
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.134.96.0/20
Signature Algorithm: sha256WithRSAEncryption
47:5a:86:a1:25:3f:d6:76:e1:c3:18:63:3f:c7:c2:7d:ea:d6:
e0:53:9d:84:3c:43:2d:28:83:92:f8:ee:ec:4e:0d:6a:5f:96:
b6:59:54:23:2d:0c:ae:fe:c0:54:4e:93:4b:b7:ae:69:db:5e:
89:90:91:05:70:98:76:54:9f:52:4f:c9:00:e5:9a:52:25:b0:
16:3f:df:e3:13:bf:39:6d:15:1c:a2:b4:c1:63:08:78:d6:1b:
73:71:a7:cf:ba:d6:76:e2:30:d8:26:d3:67:71:ef:08:cf:b1:
6d:e8:86:9d:27:97:a3:04:b2:86:a7:38:57:92:20:2d:82:f7:
96:d9:ab:f9:0d:f1:f4:b6:69:b4:2b:13:3d:76:f5:6b:e4:fc:
b5:7e:ba:6c:59:79:a8:d4:68:37:d0:4f:5c:a5:c5:b6:e3:58:
2f:51:9c:05:b6:57:0a:29:aa:58:ee:68:f0:2d:ec:04:a8:e7:
f5:84:9b:e7:47:96:e5:b9:29:f8:eb:dc:29:48:02:37:a2:51:
9f:52:a8:f6:8a:6c:44:da:c4:bc:e9:05:cd:07:ef:91:a7:87:
67:1d:c6:66:e7:b7:89:54:7f:b5:0a:d6:0a:5c:00:0f:4b:13:
fa:7c:d1:c6:bd:3f:3d:5e:5a:61:d8:b5:dd:74:c5:2c:f6:10:
f2:4b:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:40:42 2025 by rpki-client