
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
File: XN9saAmNzkalvx56Mcuy_Cts4Yw.roa (raw, json)
Hash identifier: sFFcqbZ/KeetgHrqsvBoVaJpMe+YlX/heM5fde639Zs=
Subject key identifier: 5C:DF:6C:68:09:8D:CE:46:A5:BF:1E:7A:31:CB:B2:FC:2B:6C:E1:8C
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 01F2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
Signing time: Fri 01 Aug 2025 01:33:49 +0000
ROA not before: Fri 01 Aug 2025 01:33:49 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 38628
IP address blocks: 163.131.96.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Aug 1 01:33:49 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=5CDF6C68098DCE46A5BF1E7A31CBB2FC2B6CE18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:4d:4f:92:53:41:ac:ea:eb:af:c4:96:75:
0e:8a:57:35:71:3a:d2:7a:1d:18:02:67:43:1d:0c:
31:73:17:99:5f:34:36:5a:5f:1c:b3:6e:f0:f8:f2:
3a:86:24:c3:61:fa:fd:75:bf:57:97:08:b8:6e:01:
e3:22:99:60:b4:ec:a9:a5:77:ad:2d:be:e3:d3:22:
7e:8f:b9:72:f3:4e:8c:c4:8e:b7:b6:7b:93:45:81:
07:27:23:0b:0e:eb:a1:63:48:f9:d9:7c:55:8c:44:
2b:98:ab:35:96:51:6d:49:87:56:44:64:05:6f:a5:
3b:55:3a:29:3e:fe:69:67:12:43:d8:0c:67:2a:b9:
69:69:48:09:4d:e7:a8:d8:be:22:b8:68:13:49:de:
07:d3:f7:ed:54:ed:be:36:f8:de:a8:dd:79:28:16:
67:66:ab:c1:ca:92:21:b3:15:ee:32:34:e8:d9:53:
46:b3:1a:40:ae:88:ac:65:55:2a:b7:8d:77:bc:51:
bb:77:21:01:16:bd:fa:cb:dc:41:bd:1c:8b:a5:ac:
e7:2c:08:94:83:e9:e9:7a:90:e6:3f:02:67:06:f2:
49:21:5c:f0:99:d8:8e:ba:32:39:c6:2c:bf:8d:f3:
94:c3:38:f1:18:98:0b:ee:4f:ee:0a:ac:a2:58:5d:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:6C:68:09:8D:CE:46:A5:BF:1E:7A:31:CB:B2:FC:2B:6C:E1:8C
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.131.96.0/21
Signature Algorithm: sha256WithRSAEncryption
90:87:cc:97:6b:87:c4:bc:46:5f:88:92:98:40:81:c1:5c:90:
08:78:f7:85:c1:e5:44:41:dc:4b:63:69:3a:a1:fb:69:4a:43:
21:c1:33:f5:ff:dd:aa:93:09:90:e7:62:be:3a:43:e3:17:fb:
9e:8f:4f:6f:cf:d2:0e:c9:fc:0d:90:2c:b3:bf:0e:0f:a0:b6:
1b:1b:9d:54:e1:bc:0c:1f:e7:26:ba:ce:05:aa:d0:12:fa:57:
5e:bb:b7:ac:86:dd:da:1e:96:37:0a:55:1a:e4:0d:9d:1d:cb:
03:93:53:b6:50:b8:d1:bb:97:39:63:98:b3:01:79:46:59:1e:
30:d3:36:4f:b1:2f:a9:b8:f8:0c:4b:40:48:48:20:68:72:b7:
45:b5:7a:2b:42:a6:6b:b1:3e:6b:4d:12:6e:b1:70:cb:cc:44:
71:91:f7:fc:4e:6b:99:7f:2d:50:25:56:eb:9d:76:0f:ec:c0:
ba:a8:03:21:8c:a7:61:84:7f:34:05:ea:04:b5:3a:b1:b3:aa:
bf:c3:c7:5b:13:c0:3d:83:8d:ef:e5:ff:92:57:18:29:f4:c4:
08:7d:bc:6b:5b:90:ac:b3:a2:68:a1:9d:df:18:36:1c:39:bc:
1c:01:24:d2:8d:34:46:66:12:b5:17:02:04:94:86:83:19:07:
57:91:46:e4
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA4MDEw
MTMzNDlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDVDREY2QzY4MDk4RENF
NDZBNUJGMUU3QTMxQ0JCMkZDMkI2Q0UxOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjHU1PklNBrOrrr8SWdQ6KVzVxOtJ6HRgCZ0MdDDFzF5lfNDZa
XxyzbvD48jqGJMNh+v11v1eXCLhuAeMimWC07Kmld60tvuPTIn6PuXLzTozEjre2
e5NFgQcnIwsO66FjSPnZfFWMRCuYqzWWUW1Jh1ZEZAVvpTtVOik+/mlnEkPYDGcq
uWlpSAlN56jYviK4aBNJ3gfT9+1U7b42+N6o3XkoFmdmq8HKkiGzFe4yNOjZU0az
GkCuiKxlVSq3jXe8Ubt3IQEWvfrL3EG9HIulrOcsCJSD6el6kOY/AmcG8kkhXPCZ
2I66MjnGLL+N85TDOPEYmAvuT+4KrKJYXaPxAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUXN9saAmNzkalvx56Mcuy/Cts4YwwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvWE45c2FBbU56a2Fsdng1Nk1jdXlfQ3RzNFl3LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A6ODYDANBgkqhkiG9w0BAQsFAAOCAQEAkIfMl2uHxLxGX4iSmECBwVyQCHj3hcHl
REHcS2NpOqH7aUpDIcEz9f/dqpMJkOdivjpD4xf7no9Pb8/SDsn8DZAss78OD6C2
GxudVOG8DB/nJrrOBarQEvpXXru3rIbd2h6WNwpVGuQNnR3LA5NTtlC40buXOWOY
swF5RlkeMNM2T7Evqbj4DEtASEggaHK3RbV6K0Kma7E+a00SbrFwy8xEcZH3/E5r
mX8tUCVW6512D+zAuqgDIYynYYR/NAXqBLU6sbOqv8PHWxPAPYON7+X/klcYKfTE
CH28a1uQrLOiaKGd3xg2HDm8HAEk0o00RmYStRcCBJSGgxkHV5FG5A==
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:17:40 2025 by rpki-client