
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
File: tDLifovo9oB3fnmMT0YOngCEFUo.roa (raw, json)
Hash identifier: tqxtZkp8pDrSqw9lHAEyVxiM1A1e3YEtvUNaDT+vR+I=
Subject key identifier: B4:32:E2:7E:8B:E8:F6:80:77:7E:79:8C:4F:46:0E:9E:00:84:15:4A
Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial: 72
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
Signing time: Wed 01 Oct 2025 01:29:44 +0000
ROA not before: Wed 01 Oct 2025 01:29:44 +0000
ROA not after: Tue 15 Sep 2026 01:30:02 +0000
asID: 131925
IP address blocks: 219.100.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 00:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Validity
Not Before: Oct 1 01:29:44 2025 GMT
Not After : Sep 15 01:30:02 2026 GMT
Subject: CN=B432E27E8BE8F680777E798C4F460E9E0084154A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:34:24:91:c2:76:b5:46:14:92:84:c4:03:
b7:a8:0c:9e:4a:0f:77:cb:5d:e5:ef:ed:65:44:98:
e6:11:43:b7:ae:48:fa:e9:d2:22:5f:36:48:6e:45:
48:89:78:6d:67:46:31:ee:12:97:c2:1c:1b:e2:42:
4d:4e:c0:47:d0:f5:9d:2f:8a:ae:e4:0c:69:f7:f4:
fa:5a:40:b7:01:ad:65:01:aa:7d:c0:86:7d:c2:c8:
79:0b:ed:89:a8:90:15:e8:f5:0b:db:85:bf:ea:d8:
c3:eb:ae:89:21:2a:05:bf:2a:05:0b:7e:1d:4d:a7:
96:81:56:b7:01:40:22:5d:d9:96:59:cc:d0:d9:fe:
6e:34:7f:bc:a2:9f:96:ca:b7:22:95:8e:6a:c0:25:
08:b0:57:b8:7c:c6:b9:02:42:92:07:7a:47:27:2a:
1a:85:16:5c:88:28:98:7b:90:03:de:aa:77:49:ac:
96:27:5f:8a:3a:7f:b0:15:97:6b:d4:9f:15:7f:f3:
71:2b:40:dc:0c:57:d4:3f:ab:49:61:78:22:ae:30:
e1:41:e9:a4:ae:42:16:7c:31:8b:65:32:2b:04:a6:
1e:8b:de:46:b7:90:57:0e:e6:60:2d:73:ca:0c:75:
9f:d3:17:ec:f9:ef:d7:14:32:96:40:50:14:d5:d6:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:E2:7E:8B:E8:F6:80:77:7E:79:8C:4F:46:0E:9E:00:84:15:4A
X509v3 Authority Key Identifier:
keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.76.0/22
Signature Algorithm: sha256WithRSAEncryption
74:50:fc:f8:4d:e3:d9:d0:25:42:a9:9a:3c:cc:da:86:05:a7:
87:25:55:84:c9:63:23:99:ae:db:bb:82:bd:5b:f7:7f:7c:6d:
1d:6a:eb:70:fa:20:e9:98:1a:87:41:0f:d5:d6:d4:ee:e1:e8:
e6:d1:35:98:01:c1:9e:75:50:26:44:6c:6c:a2:c7:f9:e9:90:
4c:ee:8d:79:1c:8d:0d:a6:41:89:e1:a4:ea:52:05:53:a6:a8:
5a:6e:64:18:e2:37:5c:90:16:32:8a:e8:cb:39:c4:01:66:bc:
5c:94:ba:29:5f:6b:53:d1:a4:44:30:e8:c4:8f:86:bd:bf:f2:
4a:e2:10:4b:5f:44:b9:7d:2a:b7:bb:e8:82:79:95:9c:a5:ac:
f8:a4:26:a8:8e:11:8a:3a:ba:f1:5c:c4:38:f6:d6:0d:8b:84:
49:e2:ba:d6:6f:71:c7:37:b9:bf:7c:31:6b:68:54:f2:88:14:
c7:63:73:71:41:02:9a:73:44:9b:c0:c4:57:c0:9e:d6:f2:08:
01:fa:e5:39:e1:5c:b0:2e:72:86:12:4d:f0:8a:a1:ac:a9:8d:
f6:65:1f:42:3c:7b:91:2e:1e:36:80:b0:72:e0:2a:3f:0c:c0:
1c:5f:0a:19:69:08:9d:5e:0e:8b:ce:86:42:1e:4c:b4:6e:5f:
6e:28:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:16:52 2025 by rpki-client