
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa
File: Q3ZXRUixUraMmho8zKjM5d1uDzk.roa (raw, json)
Hash identifier: Yg6upB+xDnWPyWK0WlQ6AjZpkmNbn17zairLUc8+nQQ=
Subject key identifier: 43:76:57:45:48:B1:52:B6:8C:9A:1A:3C:CC:A8:CC:E5:DD:6E:0F:39
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 01C5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa
Signing time: Tue 01 Jul 2025 01:34:46 +0000
ROA not before: Tue 01 Jul 2025 01:34:46 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 2497
IP address blocks: 220.100.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 1 01:34:46 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=4376574548B152B68C9A1A3CCCA8CCE5DD6E0F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:c6:32:6f:46:f0:3e:35:a9:94:76:9b:ca:
06:e6:0d:c6:08:56:06:ad:ac:5e:c5:ab:45:6e:78:
b5:04:b9:2b:0d:ae:3a:c7:2f:73:43:6a:ec:ba:05:
70:c4:77:38:fe:a4:bb:0e:20:91:7b:3b:b2:8e:84:
eb:51:cc:f8:36:64:88:34:bb:13:8f:f9:f3:52:f0:
3e:3f:91:50:88:43:b6:05:05:bc:d2:21:b2:f0:b0:
35:38:7b:18:4b:55:97:b7:8c:7a:c0:df:44:97:b8:
63:c3:49:17:5c:23:dd:1a:f2:75:1c:8e:3d:f5:53:
70:cb:0d:ee:48:1b:8f:5f:7e:ed:77:02:d5:2f:17:
91:b6:74:a0:46:c2:5e:71:dc:b5:0c:69:8f:01:6f:
82:55:4d:5f:d3:d1:b7:19:6d:b5:36:03:84:94:19:
05:34:8a:f4:a7:4b:5c:52:0a:29:1b:e6:c6:57:85:
2f:21:b2:79:0c:58:d1:c1:99:26:80:b8:18:7d:ff:
97:bb:9c:c2:e7:32:43:b9:92:80:5b:b8:c9:91:fe:
07:1b:c0:aa:67:a8:d8:91:ab:57:69:eb:7e:ad:95:
50:4b:be:67:ee:59:7a:9f:a5:37:4d:42:e4:38:d3:
92:a6:1f:ed:d0:f3:dd:b7:42:6d:97:36:0b:41:20:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:57:45:48:B1:52:B6:8C:9A:1A:3C:CC:A8:CC:E5:DD:6E:0F:39
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.100.192.0/18
Signature Algorithm: sha256WithRSAEncryption
06:79:59:c1:a4:7a:a9:ea:ea:19:dd:b2:8f:3d:c6:5f:b3:5c:
01:8e:31:73:76:ae:cc:db:c8:ce:24:88:32:db:08:31:b9:64:
6d:81:88:ff:e6:45:f8:d8:ae:80:7a:24:06:32:63:55:78:ca:
89:ff:d7:41:6d:08:54:4b:af:ca:49:ca:dc:20:74:eb:40:ec:
19:1c:fa:46:d4:39:94:84:75:cb:4c:c2:c4:d0:74:9b:4d:ca:
b9:61:d0:54:4e:c0:8a:a4:7c:70:a5:ad:25:71:ab:c1:c6:f0:
6b:ec:9b:ff:dd:a3:82:8c:99:16:41:6b:a2:0f:42:db:05:f0:
a4:3c:25:55:86:45:7a:e1:2f:a8:61:bb:fd:19:6f:5f:e1:8f:
31:b3:14:61:0b:9c:2b:45:40:24:b2:25:11:12:34:bb:55:c5:
75:61:28:07:e1:ff:33:78:06:02:b5:06:98:d9:4c:d4:1d:61:
47:40:3d:65:3b:c8:86:43:95:21:00:a5:54:79:21:2b:41:65:
69:f2:72:c0:28:be:14:12:29:23:f5:fc:f7:64:46:8f:a1:04:
8c:60:34:ce:fa:d9:91:1b:e6:e6:7e:b7:f6:33:89:5e:78:ea:
7b:54:5a:35:b8:95:aa:9d:1d:35:ec:89:58:8d:c1:ea:03:9a:
28:0a:40:4e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw
MTM0NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNzY1NzQ1NDhCMTUy
QjY4QzlBMUEzQ0NDQThDQ0U1REQ2RTBGMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBM8Yyb0bwPjWplHabygbmDcYIVgatrF7Fq0VueLUEuSsNrjrH
L3NDauy6BXDEdzj+pLsOIJF7O7KOhOtRzPg2ZIg0uxOP+fNS8D4/kVCIQ7YFBbzS
IbLwsDU4exhLVZe3jHrA30SXuGPDSRdcI90a8nUcjj31U3DLDe5IG49ffu13AtUv
F5G2dKBGwl5x3LUMaY8Bb4JVTV/T0bcZbbU2A4SUGQU0ivSnS1xSCikb5sZXhS8h
snkMWNHBmSaAuBh9/5e7nMLnMkO5koBbuMmR/gcbwKpnqNiRq1dp636tlVBLvmfu
WXqfpTdNQuQ405KmH+3Q8923Qm2XNgtBIIdfAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUQ3ZXRUixUraMmho8zKjM5d1uDzkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvUTNaWFJVaXhVcmFNbWhvOHpLak01ZDF1RHprLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BtxkwDANBgkqhkiG9w0BAQsFAAOCAQEABnlZwaR6qerqGd2yjz3GX7NcAY4xc3au
zNvIziSIMtsIMblkbYGI/+ZF+NiugHokBjJjVXjKif/XQW0IVEuvyknK3CB060Ds
GRz6RtQ5lIR1y0zCxNB0m03KuWHQVE7AiqR8cKWtJXGrwcbwa+yb/92jgoyZFkFr
og9C2wXwpDwlVYZFeuEvqGG7/RlvX+GPMbMUYQucK0VAJLIlERI0u1XFdWEoB+H/
M3gGArUGmNlM1B1hR0A9ZTvIhkOVIQClVHkhK0FlafJywCi+FBIpI/X892RGj6EE
jGA0zvrZkRvm5n639jOJXnjqe1RaNbiVqp0dNeyJWI3B6gOaKApATg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:17:41 2025 by rpki-client