
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
File: QMHAK7yk2FNca6joZ40qET6p5M0.roa (raw, json)
Hash identifier: O5hJoHfOr+7wBM8sGGALWmoVoahiEvYArtl/S4AAwr4=
Subject key identifier: 40:C1:C0:2B:BC:A4:D8:53:5C:6B:A8:E8:67:8D:2A:11:3E:A9:E4:CD
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 01CC
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
Signing time: Tue 01 Jul 2025 01:42:24 +0000
ROA not before: Tue 01 Jul 2025 01:42:24 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 2497
IP address blocks: 119.10.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 1 01:42:24 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=40C1C02BBCA4D8535C6BA8E8678D2A113EA9E4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:8e:a5:2d:28:e7:21:07:85:64:fb:16:36:
e4:d0:d7:9f:74:dd:4b:ce:ac:ff:eb:48:f1:de:b3:
4f:d0:c2:1e:07:33:78:86:2b:f7:f4:d0:c6:d5:06:
2f:4e:25:7b:3f:41:c1:3d:8a:cf:1e:50:98:59:12:
ac:5f:3e:32:2d:4b:e1:7c:c1:80:f0:43:f7:06:2c:
4d:46:ec:44:fd:20:37:29:9b:84:3e:91:c3:27:ac:
67:6b:e5:fd:d6:7a:ae:49:0c:8f:18:a0:50:bf:52:
11:23:3b:01:3e:34:86:0d:8d:da:53:96:75:35:05:
00:83:7c:b7:c4:09:c7:02:9f:30:e3:12:40:69:03:
f0:3f:2f:b6:7c:9d:63:2f:2e:a3:b7:19:10:20:2b:
c3:75:d4:69:03:b9:a4:2e:6e:ca:9a:28:fb:e2:d1:
88:da:b8:dc:da:51:af:82:e8:0f:13:98:d9:40:1e:
1d:62:d9:03:7d:3a:bf:65:05:b2:fd:a4:38:83:f6:
85:5d:73:58:19:74:5d:9a:aa:95:2d:06:13:aa:52:
59:75:31:de:a6:11:38:c4:c7:80:31:81:72:0b:da:
86:0a:46:d4:aa:33:b9:07:28:ab:c9:94:e7:b5:d2:
2d:65:5b:ea:99:33:2d:b7:31:02:25:5a:12:a3:22:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:C0:2B:BC:A4:D8:53:5C:6B:A8:E8:67:8D:2A:11:3E:A9:E4:CD
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QMHAK7yk2FNca6joZ40qET6p5M0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.10.192.0/18
Signature Algorithm: sha256WithRSAEncryption
68:65:cc:6d:75:d8:0d:37:f7:54:b5:a9:3b:1a:54:4c:c4:60:
1e:e5:17:b9:2a:b4:bf:78:ef:d9:c5:1f:da:76:0c:af:b9:b7:
14:5c:5b:0f:57:16:77:f2:a0:d2:9c:56:b3:b1:e8:ee:d5:1d:
a6:a7:f5:82:28:bb:f6:a4:da:45:13:15:20:e5:36:5b:5f:7a:
5b:94:05:0f:c8:4d:ea:2b:d5:de:14:0e:84:68:66:46:04:8d:
fb:c8:e9:38:a3:f2:1d:f5:2a:16:f3:0e:55:9a:02:06:ef:32:
af:ea:9b:b4:f3:0d:dc:12:31:64:95:e5:c6:87:9e:c1:f7:fa:
04:04:c2:6d:1e:3d:5f:37:67:23:d6:0d:be:ee:dc:38:d9:1c:
a5:7f:82:b6:55:cb:33:43:fb:fa:99:62:5c:ad:f5:ac:ea:bd:
42:ed:6b:0f:bc:48:dc:42:94:4f:b3:92:62:de:6c:2d:98:1e:
a2:c7:13:93:77:26:4b:dd:a0:b2:bd:b1:83:92:6e:51:6c:dd:
f2:fa:7a:ce:71:7d:32:52:76:9b:55:73:ae:c2:d0:d9:22:92:
38:2b:da:60:56:85:7f:84:22:8c:00:c2:8d:d9:15:28:35:9b:
d1:d0:c2:c4:c9:da:33:f5:11:98:df:3e:2f:fe:e4:08:4a:13:
20:14:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:14:48 2025 by rpki-client