
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
File: nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (raw, json)
Hash identifier: IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=
Subject key identifier: 9C:1E:E1:F0:61:B3:57:30:C2:05:35:A4:68:C6:FB:1C:D6:7C:AF:19
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 62
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
Signing time: Wed 18 Jun 2025 02:37:41 +0000
ROA not before: Wed 18 Jun 2025 02:37:41 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 10000
IP address blocks: 126.52.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Jun 18 02:37:41 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=9C1EE1F061B35730C20535A468C6FB1CD67CAF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:bc:5e:82:8b:0e:2b:b9:29:03:d2:f1:33:
f5:cd:af:64:f1:22:d5:38:20:19:db:e9:d7:a4:18:
61:a9:af:1c:50:08:66:f5:d9:11:92:6d:b4:ec:10:
85:fd:1f:f7:29:2c:ef:97:7c:ec:ac:ee:f6:ac:0b:
f1:7c:ef:9f:12:0f:c4:d1:12:45:74:0a:35:e3:80:
af:04:53:d7:b3:54:15:72:8c:54:0d:53:4a:c7:d7:
41:63:1f:80:fd:68:89:e2:4e:12:dc:c0:d2:e8:44:
79:76:30:54:3c:f6:fe:14:4a:7c:65:49:3f:1e:b0:
19:6f:ad:02:8e:16:10:7f:72:d5:2d:51:b2:01:c3:
4a:52:85:9e:55:49:94:d8:c1:b9:78:fe:95:a8:4d:
50:db:71:ef:3f:16:2c:1a:59:f6:e3:3e:7c:ca:92:
3c:fd:4e:7e:23:6d:b3:c6:22:32:bc:b7:53:db:c2:
53:b5:52:7c:21:cc:5a:af:91:fc:aa:4a:20:2f:e5:
50:5b:22:b7:7a:62:0a:85:1e:3b:13:db:56:5c:bf:
7e:5c:88:a6:87:a8:07:05:c7:19:76:93:1c:2f:78:
2e:29:d1:f8:a4:26:a8:63:79:c6:12:21:f1:90:0a:
c8:ac:86:d5:7c:8a:98:a5:ef:a2:d2:ac:c2:bb:cb:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:E1:F0:61:B3:57:30:C2:05:35:A4:68:C6:FB:1C:D6:7C:AF:19
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
126.52.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:e8:89:fa:c4:68:4e:11:cf:12:94:cd:78:0d:94:5a:61:c2:
cd:73:71:26:32:c3:c0:f9:82:bc:0c:60:da:46:50:a9:6b:e1:
e7:ba:a8:c1:48:c0:62:17:31:a7:a9:c0:22:c6:02:1d:a0:04:
30:25:f7:33:e7:c7:0f:36:2d:6f:a7:54:ac:ff:ab:ea:8d:80:
d8:6f:24:31:89:b1:67:74:d5:d2:89:2a:dd:7c:8c:ef:f0:4e:
cb:12:33:aa:3a:77:47:16:23:34:5a:3c:66:74:c9:9c:69:0a:
a7:4c:c3:bd:cd:41:f3:4f:73:41:7d:1d:e4:13:47:d6:a3:50:
ee:dc:e1:80:d1:80:af:13:51:bb:d8:e1:23:cb:7e:80:3d:89:
1a:1d:8a:47:e3:92:1f:e5:4f:45:a3:93:23:b7:06:56:45:87:
f8:9b:20:d9:22:15:52:4c:7e:bc:fc:0e:7e:a2:2e:3a:bf:c5:
da:68:e9:26:8f:58:f9:e5:ae:af:52:3b:7a:bf:07:93:41:3b:
ff:01:1c:a0:4b:3d:67:89:95:44:bb:42:c2:73:40:00:2f:c2:
8d:14:a4:67:88:84:bb:3f:82:d7:34:8c:89:2b:eb:4b:4c:88:
c6:fa:f7:e4:1f:ec:d4:bf:58:5c:05:f1:b3:1a:2f:b8:46:fc:
e7:d8:a8:e6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDYxODAy
Mzc0MVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOUMxRUUxRjA2MUIzNTcz
MEMyMDUzNUE0NjhDNkZCMUNENjdDQUYxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOz6vF6Ciw4ruSkD0vEz9c2vZPEi1TggGdvp16QYYamvHFAIZvXZ
EZJttOwQhf0f9yks75d87Kzu9qwL8XzvnxIPxNESRXQKNeOArwRT17NUFXKMVA1T
SsfXQWMfgP1oieJOEtzA0uhEeXYwVDz2/hRKfGVJPx6wGW+tAo4WEH9y1S1RsgHD
SlKFnlVJlNjBuXj+lahNUNtx7z8WLBpZ9uM+fMqSPP1OfiNts8YiMry3U9vCU7VS
fCHMWq+R/KpKIC/lUFsit3piCoUeOxPbVly/flyIpoeoBwXHGXaTHC94LinR+KQm
qGN5xhIh8ZAKyKyG1XyKmKXvotKswrvLof8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBScHuHwYbNXMMIFNaRoxvsc1nyvGTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvbkI3aDhHR3pWekRDQlRXa2FNYjdITlo4cnhrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBH40ADANBgkqhkiG9w0BAQsFAAOCAQEAbOiJ+sRoThHPEpTNeA2UWmHCzXNx
JjLDwPmCvAxg2kZQqWvh57qowUjAYhcxp6nAIsYCHaAEMCX3M+fHDzYtb6dUrP+r
6o2A2G8kMYmxZ3TV0okq3XyM7/BOyxIzqjp3RxYjNFo8ZnTJnGkKp0zDvc1B809z
QX0d5BNH1qNQ7tzhgNGArxNRu9jhI8t+gD2JGh2KR+OSH+VPRaOTI7cGVkWH+Jsg
2SIVUkx+vPwOfqIuOr/F2mjpJo9Y+eWur1I7er8Hk0E7/wEcoEs9Z4mVRLtCwnNA
AC/CjRSkZ4iEuz+C1zSMiSvrS0yIxvr35B/s1L9YXAXxsxovuEb859io5g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:40:42 2025 by rpki-client