
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
File: -uDJ_7X3sOgsShwKMsXp-n9MNzc.roa (raw, json)
Hash identifier: uKqa1tNWBWutiQczWVJcYXa+TrCXVZemLFBSU5Jx+mY=
Subject key identifier: FA:E0:C9:FF:B5:F7:B0:E8:2C:4A:1C:0A:32:C5:E9:FA:7F:4C:37:37
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 05B2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
Signing time: Fri 01 Aug 2025 01:33:06 +0000
ROA not before: Fri 01 Aug 2025 01:33:06 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 10010
IP address blocks: 133.186.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 08:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Aug 1 01:33:06 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=FAE0C9FFB5F7B0E82C4A1C0A32C5E9FA7F4C3737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:d5:5f:13:14:f4:ca:25:9e:07:0b:28:a9:
92:b4:81:20:cb:84:67:18:ea:ba:8f:a6:f9:b6:c0:
60:4c:bd:ab:61:4f:a3:24:29:6e:57:43:11:3d:21:
49:cd:d5:22:27:1b:15:ff:4d:56:6f:9a:50:e8:03:
77:95:61:b3:9e:e2:ca:e6:44:3c:3e:60:51:55:ff:
01:5a:80:10:1e:3f:7c:d6:0f:76:b6:e5:b4:35:4f:
8d:5b:08:28:86:db:ff:41:d4:94:0a:1c:84:8d:6c:
db:46:a8:6a:82:bd:98:b2:c9:5d:d3:18:ff:12:01:
e4:23:2a:cf:20:9f:d2:67:55:4f:74:b3:0e:79:14:
cf:cc:ef:c3:10:ca:f0:05:31:4f:9d:9f:53:a5:8c:
8e:80:03:dc:0c:d5:66:26:fe:53:f0:2f:99:42:f5:
de:18:7d:42:78:e1:21:48:8b:5e:43:2d:72:d8:33:
77:7d:ae:10:03:f4:7f:ad:2f:e0:69:dd:64:c1:d7:
f0:08:cb:32:70:07:41:ae:91:f5:2b:8d:f1:b8:ab:
fc:61:90:48:d3:8d:c6:d4:94:13:83:73:df:23:bd:
68:66:43:d7:c5:fb:a7:11:c6:c1:ef:49:1f:5f:ce:
2f:0a:2e:51:a4:b6:55:5e:c7:31:ad:a8:ee:66:73:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:C9:FF:B5:F7:B0:E8:2C:4A:1C:0A:32:C5:E9:FA:7F:4C:37:37
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.186.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:6c:ac:be:a7:51:2f:0f:29:a2:73:68:c4:cc:df:3c:9a:da:
f8:76:a1:ff:5e:89:5e:d2:e3:51:71:98:d6:36:b8:18:b7:51:
d3:dd:f4:38:d0:b8:53:1e:81:b0:2c:fc:3c:67:9b:d1:87:3b:
bb:11:af:95:09:81:27:98:0a:98:85:a6:35:df:a7:d3:83:4a:
9a:62:f8:9f:57:32:77:4b:53:93:bf:20:3f:81:1e:a2:0c:80:
cb:59:5a:53:dd:08:2e:1a:a2:05:7c:3f:be:ed:44:bd:21:62:
7a:61:77:cb:60:f1:62:1b:d3:97:ec:3d:11:90:a7:e8:bb:66:
da:9c:41:02:75:93:81:a1:14:f4:ea:09:db:79:ec:69:cc:f8:
31:b6:13:aa:92:94:38:8b:85:3b:39:fb:65:24:6c:d7:a3:aa:
db:23:5c:1b:28:b2:2e:8d:ba:0b:bf:8b:64:8f:a3:4a:2e:97:
37:45:c9:61:e9:36:03:f3:27:c2:41:33:7f:fe:f5:1a:78:87:
52:d2:02:38:78:48:16:4c:1f:30:2e:91:d1:94:1c:48:8c:a2:
8b:0d:35:42:28:e8:b2:ad:a2:ac:1e:74:54:47:10:55:8f:ef:
23:96:9d:cf:1e:99:92:ee:fc:74:db:5c:eb:1d:a2:94:16:19:
08:a0:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:53:29 2025 by rpki-client