
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa
File: 8aPzfqP1f20bPraNgQMe5_AY-iY.roa (raw, json)
Hash identifier: jNdZVVRllnQjQb+anDEzjSzMpepgbDoH+cUjtH4uUoo=
Subject key identifier: F1:A3:F3:7E:A3:F5:7F:6D:1B:3E:B6:8D:81:03:1E:E7:F0:18:FA:26
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 01AA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa
Signing time: Thu 01 May 2025 01:32:05 +0000
ROA not before: Thu 01 May 2025 01:32:05 +0000
ROA not after: Wed 15 Apr 2026 01:30:03 +0000
asID: 32787
IP address blocks: 210.148.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: May 1 01:32:05 2025 GMT
Not After : Apr 15 01:30:03 2026 GMT
Subject: CN=F1A3F37EA3F57F6D1B3EB68D81031EE7F018FA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:05:56:93:36:f1:75:f8:cd:bc:d7:65:14:
68:ff:3e:f8:c9:ba:01:8b:aa:ff:5b:01:4f:c9:f4:
a1:d9:c9:d4:d4:91:98:90:2b:be:85:04:30:cb:41:
b5:c1:61:9e:15:a7:00:0c:86:d0:51:04:b4:43:0d:
77:3f:8d:f4:38:7e:14:11:7c:ca:88:1e:48:d6:e9:
6d:b7:fb:35:dd:39:f3:81:b1:ae:c7:9e:69:47:11:
1a:b6:d4:3b:e5:3e:a8:9f:f6:cb:a7:6c:f8:ac:65:
62:af:28:ed:3b:0c:36:3a:42:2e:c0:43:92:48:99:
54:73:f7:54:49:cc:dc:4b:7c:82:0b:d7:14:6f:3c:
64:84:7d:b3:a6:fa:45:da:aa:e4:5c:a9:74:73:9a:
ba:f3:cd:2c:43:60:96:1f:5e:e8:e7:43:53:73:81:
0f:39:83:ad:59:a0:a2:fc:3e:10:14:f7:55:e8:42:
6a:68:00:a1:8a:e3:c4:34:bb:ac:c0:ab:2d:a2:2e:
46:78:30:0e:13:c6:fe:90:c6:87:fc:ee:90:76:3a:
15:6a:f2:9f:7b:98:93:07:eb:db:94:b7:2c:d3:ef:
58:60:10:08:0e:31:97:7e:a6:35:a9:37:4e:18:6e:
b4:33:62:63:c1:7a:57:04:7e:be:a4:96:60:51:ac:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:F3:7E:A3:F5:7F:6D:1B:3E:B6:8D:81:03:1E:E7:F0:18:FA:26
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8aPzfqP1f20bPraNgQMe5_AY-iY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.148.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:65:5b:20:83:4c:a4:33:1f:fc:49:c9:f9:5f:2d:82:0d:66:
1d:d7:f2:75:08:e4:d3:30:1e:e6:3d:be:f6:53:44:ea:0e:57:
c3:b7:0c:3d:1b:16:cc:1a:eb:90:36:6b:46:46:20:03:18:bb:
c2:73:fa:e7:de:71:77:f1:07:9d:f9:30:be:57:32:63:44:e3:
e9:4e:92:83:79:16:cc:3a:66:0b:ff:b4:db:3e:3d:94:80:ec:
22:c2:b8:a9:0e:1c:ba:7b:37:82:5d:24:00:95:75:3a:f8:82:
2f:1c:35:ed:fc:ac:e0:b5:12:8f:e8:45:77:85:04:1e:5b:7c:
2c:5f:8d:91:f6:16:cc:49:10:95:10:6f:a3:d9:7f:2f:18:85:
10:1b:6a:f9:27:b2:94:d9:f7:a2:8e:bd:0e:03:fa:12:e4:2f:
c8:e8:3f:7e:ab:96:ff:46:0d:00:b7:4d:7e:40:65:14:67:8b:
cf:e8:82:a7:ac:c2:0b:fd:2e:d2:b7:b0:df:27:58:49:d2:40:
30:7e:de:8a:f4:80:09:5e:49:63:3a:61:58:fc:d3:4e:01:fd:
fe:ca:a5:c7:48:24:4d:0e:b1:be:e1:c6:a9:05:ae:2f:cf:85:
37:99:18:70:24:b5:53:2e:6f:35:6e:8b:12:3a:99:19:9d:ed:
95:fa:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:53:24 2025 by rpki-client