
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa
File: Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa (raw, json)
Hash identifier: iOGPOuYPj5r/cN0YDKN/ZOwI7ZDH9ZX/pSQ7K6nAdxU=
Subject key identifier: 17:0E:1B:F0:11:CD:70:81:BC:9C:64:23:9F:54:AA:D6:D2:CF:A5:AD
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 6F
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa
Signing time: Fri 01 Aug 2025 01:30:54 +0000
ROA not before: Fri 01 Aug 2025 01:30:54 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 10000
IP address blocks: 203.170.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Aug 1 01:30:54 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=170E1BF011CD7081BC9C64239F54AAD6D2CFA5AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:50:e4:7b:b2:e5:7e:4e:29:b0:0d:85:6e:
b0:be:4c:21:a4:e2:c3:11:1d:2c:37:e6:5b:13:26:
83:b2:b2:49:24:b5:1f:33:93:f1:91:0f:9e:51:0a:
06:bf:b4:e7:86:d6:88:fd:cf:a5:6a:a0:bc:96:59:
9d:07:bb:70:f1:eb:ad:1c:e9:12:9c:bb:70:26:47:
5c:da:83:95:8e:dd:0c:9e:17:4d:29:b3:1a:7e:d3:
9f:76:70:3f:a8:7d:9b:f1:b5:73:b8:71:34:d0:eb:
66:74:68:6c:96:88:66:29:0a:49:61:38:49:5e:2a:
07:a7:89:e3:55:c5:45:c1:52:0b:5e:a4:47:52:1f:
de:2c:68:14:0f:f9:e7:9b:a0:3c:09:d9:0c:83:71:
ba:f5:13:68:c1:07:f3:2e:ba:74:3e:50:41:37:5f:
02:7a:8f:12:a2:31:11:3b:9c:b5:63:b3:26:d7:ac:
57:24:ea:36:66:cc:e9:4c:74:12:fb:24:e1:03:c1:
a7:f1:16:a6:40:92:d3:c1:92:99:54:d4:43:15:5b:
4e:2a:33:5a:52:3e:b0:35:ea:0e:09:af:a3:44:52:
6e:ca:08:35:74:ef:59:57:58:f1:db:da:c7:ad:81:
2e:51:70:a5:49:87:9a:56:57:d0:ce:66:03:72:c0:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:1B:F0:11:CD:70:81:BC:9C:64:23:9F:54:AA:D6:D2:CF:A5:AD
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.170.32.0/20
Signature Algorithm: sha256WithRSAEncryption
38:b5:0c:79:9a:5b:a1:72:8c:8a:a4:77:66:6a:c8:08:8c:c5:
c9:58:66:b8:b9:fb:a9:59:77:5d:d2:74:19:4a:e5:df:90:f6:
3b:81:be:48:0d:d0:ea:17:11:81:a4:3d:77:d0:38:44:7a:15:
68:66:b4:95:ea:36:59:f6:27:82:98:71:45:f6:c7:58:47:8e:
13:ce:7b:ab:7c:64:d9:e0:7a:c8:5a:27:0f:4f:5c:1e:e2:ac:
ed:d5:e1:3e:68:d6:93:a5:60:f9:dd:e6:79:f7:22:b2:ec:04:
5b:ee:ce:e3:e9:5a:b3:71:60:1e:f9:a6:1d:63:a0:e2:c4:bc:
27:a6:47:97:bc:9e:19:b7:bc:54:6d:59:aa:6c:b2:56:cc:c4:
e1:f6:0d:30:79:8e:58:ec:e4:28:72:e7:2c:49:52:e2:b4:a4:
75:a5:9d:7c:6e:c1:6f:cf:24:ec:4a:57:91:4b:81:ac:f5:fd:
32:64:c5:28:97:f3:83:e5:9d:01:3f:2c:3b:22:8b:91:77:10:
07:23:f0:db:70:f2:f5:fb:5c:67:62:0e:d2:ce:c1:4a:23:8b:
b1:8c:ad:4b:9f:4f:22:ec:24:9f:18:35:f8:4c:ec:78:3c:b3:
83:a0:cc:82:c6:28:90:1f:b6:01:23:4d:87:93:31:b6:e7:3a:
db:3a:27:30
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDgwMTAx
MzA1NFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTcwRTFCRjAxMUNENzA4
MUJDOUM2NDIzOUY1NEFBRDZEMkNGQTVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/gUOR7suV+TimwDYVusL5MIaTiwxEdLDfmWxMmg7KySSS1HzOT
8ZEPnlEKBr+054bWiP3PpWqgvJZZnQe7cPHrrRzpEpy7cCZHXNqDlY7dDJ4XTSmz
Gn7Tn3ZwP6h9m/G1c7hxNNDrZnRobJaIZikKSWE4SV4qB6eJ41XFRcFSC16kR1If
3ixoFA/555ugPAnZDINxuvUTaMEH8y66dD5QQTdfAnqPEqIxETuctWOzJtesVyTq
NmbM6Ux0Evsk4QPBp/EWpkCS08GSmVTUQxVbTiozWlI+sDXqDgmvo0RSbsoINXTv
WVdY8dvax62BLlFwpUmHmlZX0M5mA3LAyYcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQXDhvwEc1wgbycZCOfVKrW0s+lrTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvRnc0YjhCSE5jSUc4bkdRam4xU3ExdExQcGEwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMuqIDANBgkqhkiG9w0BAQsFAAOCAQEAOLUMeZpboXKMiqR3ZmrICIzFyVhm
uLn7qVl3XdJ0GUrl35D2O4G+SA3Q6hcRgaQ9d9A4RHoVaGa0leo2WfYngphxRfbH
WEeOE857q3xk2eB6yFonD09cHuKs7dXhPmjWk6Vg+d3mefcisuwEW+7O4+las3Fg
HvmmHWOg4sS8J6ZHl7yeGbe8VG1ZqmyyVszE4fYNMHmOWOzkKHLnLElS4rSkdaWd
fG7Bb88k7EpXkUuBrPX9MmTFKJfzg+WdAT8sOyKLkXcQByPw23Dy9ftcZ2IO0s7B
SiOLsYytS59PIuwknxg1+EzseDyzg6DMgsYokB+2ASNNh5Mxtuc62zonMA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:41:43 2025 by rpki-client