
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa
File: pxeYngF_hZObAc7jQ8uXIYKcuWM.roa (raw, json)
Hash identifier: 7sOmnTl16zYrlnGUZ3SfSTk9hEPsfX46xD2/O0ERkco=
Subject key identifier: A7:17:98:9E:01:7F:85:93:9B:01:CE:E3:43:CB:97:21:82:9C:B9:63
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 01C7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa
Signing time: Tue 01 Jul 2025 01:42:21 +0000
ROA not before: Tue 01 Jul 2025 01:42:21 +0000
ROA not after: Mon 15 Jun 2026 01:30:02 +0000
asID: 2497
IP address blocks: 125.30.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 1 01:42:21 2025 GMT
Not After : Jun 15 01:30:02 2026 GMT
Subject: CN=A717989E017F85939B01CEE343CB9721829CB963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:4a:aa:cd:0a:e7:ff:f9:f2:09:40:9b:c1:
89:6d:26:69:d0:af:10:13:70:ea:58:fc:db:bf:c3:
6f:b5:5b:88:56:e3:9a:41:3c:5c:07:c5:31:8c:e9:
ac:81:45:fb:c9:ea:39:9c:8b:c5:61:f7:9f:01:64:
f9:d0:ca:d4:b8:23:b4:ea:14:b5:ae:c3:7f:89:fe:
f2:ce:e9:d9:08:b4:86:f7:cb:38:3c:f5:a4:93:bf:
21:42:9a:42:61:7c:2a:60:f3:30:09:28:56:1f:cd:
0c:36:d4:f3:2e:88:cc:d6:06:f2:b5:ca:52:20:fd:
5a:b7:5f:4d:84:de:b4:95:3b:fb:10:43:ba:2e:a5:
cc:93:c9:cc:e5:32:5e:ce:e8:16:50:0a:9c:6d:7f:
68:e2:21:aa:71:97:82:5a:9d:d2:fe:49:56:88:e5:
82:e0:50:22:d5:de:19:74:e4:35:de:e9:e3:02:2b:
bf:bf:6c:f8:73:00:f5:ae:ad:c8:dd:88:f4:72:69:
98:c7:c3:6f:da:47:69:7a:70:43:d2:7d:2b:7a:d5:
df:37:bf:74:a9:ee:10:fe:e8:b6:e9:fc:0b:0e:ae:
62:c4:86:26:2b:e7:0f:c9:b0:f2:8d:b7:33:d1:c7:
dd:8a:5b:85:43:49:b0:ff:f4:7f:44:2a:3c:ae:b4:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:98:9E:01:7F:85:93:9B:01:CE:E3:43:CB:97:21:82:9C:B9:63
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pxeYngF_hZObAc7jQ8uXIYKcuWM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:26:d3:68:25:73:d5:52:58:b2:53:d2:2b:a7:56:0c:31:c0:
2c:77:43:7a:d5:fc:00:9a:fd:94:a0:05:af:ed:99:01:05:44:
9a:ca:67:80:e3:09:a1:9f:ae:59:0c:4c:06:60:2c:a3:9a:c5:
14:f7:cd:b6:55:25:82:44:7f:82:b8:28:55:10:1a:bd:f2:ba:
43:28:02:9b:92:02:b6:b6:2f:b1:55:c2:c7:62:fd:1a:2c:c6:
3a:08:14:d4:76:db:f7:db:df:f1:e4:0c:cc:99:d0:82:d4:df:
53:12:7f:2b:b4:43:28:a2:eb:8b:ba:1c:29:1f:df:c1:dc:d3:
8f:9e:df:40:72:eb:ac:10:d1:27:f7:50:45:42:20:73:f8:ff:
c7:cf:03:77:6b:60:e5:19:7a:ac:1d:0b:d6:a0:2a:af:02:ed:
85:f0:4e:a1:e4:f9:fb:78:15:fc:ce:f8:0f:52:83:d0:51:db:
9d:65:ce:1c:67:46:4e:a4:13:aa:15:91:69:54:a7:93:8e:fd:
b4:49:b4:c6:ea:e2:63:ef:8f:bd:60:3a:80:7f:23:fd:b8:f8:
f6:87:98:d9:69:b6:f2:a6:a5:53:93:13:fe:63:c5:61:f1:67:
ca:51:4b:15:e6:7d:43:f7:60:79:4e:1b:00:b6:cd:6c:f4:76:
15:69:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:20:28 2025 by rpki-client