
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
File: ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (raw, json)
Hash identifier: DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=
Subject key identifier: B9:C2:E7:2C:1F:8E:9C:D5:C9:E6:B9:FD:14:00:EA:37:C6:06:C6:3E
Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial: 47
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
Signing time: Tue 01 Apr 2025 01:30:00 +0000
ROA not before: Tue 01 Apr 2025 01:30:00 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 24289
IP address blocks: 103.18.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 18:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Validity
Not Before: Apr 1 01:30:00 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=B9C2E72C1F8E9CD5C9E6B9FD1400EA37C606C63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:03:00:5e:e2:c3:88:19:c6:90:d1:2b:62:
ab:39:17:02:10:a5:10:a4:34:85:df:94:5d:c9:56:
ef:a6:bd:50:2e:1b:9f:a9:2f:43:11:6c:66:13:a7:
f7:6d:17:7f:67:f5:7d:1a:77:7a:25:6f:28:b8:19:
4e:15:62:cc:ff:0b:e9:02:7d:6a:0b:7c:74:ef:2f:
c8:93:64:b6:64:ef:fc:94:f6:03:49:45:6a:1d:3d:
3a:15:83:c0:cd:9b:55:e3:0a:a2:79:75:8f:f7:f3:
ea:26:62:4d:8e:af:4d:44:8a:a1:a2:b2:32:8a:57:
74:89:75:0b:78:4c:38:c6:d4:f5:f6:a7:7e:8f:be:
1d:b7:4b:f9:c4:78:c5:70:e9:4a:b3:f6:98:93:47:
57:b5:2c:c2:64:ee:2d:b0:d2:ed:b6:5a:e2:cd:69:
f6:b7:e6:78:68:e2:c6:59:0f:79:c4:c8:09:fd:b1:
3e:2e:c7:83:07:07:db:14:2b:4d:70:b9:85:18:bb:
73:f8:92:8f:1d:49:cb:1c:65:e5:9d:31:28:6e:5d:
6b:47:25:00:61:85:dd:e8:33:f7:51:a5:fd:dd:5d:
00:d9:c5:b4:4d:29:e1:64:6e:dd:d9:b2:8a:78:b4:
4a:71:cf:a4:bd:9e:ab:30:33:dd:b4:8c:fc:9e:71:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:E7:2C:1F:8E:9C:D5:C9:E6:B9:FD:14:00:EA:37:C6:06:C6:3E
X509v3 Authority Key Identifier:
keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:78:78:da:7d:dc:79:86:89:d5:56:a3:88:9a:38:7e:19:de:
2d:3b:0a:82:bf:3b:b6:ae:43:a2:49:35:d3:a6:ca:4f:9e:72:
1e:fb:89:07:eb:3e:84:c8:9f:7d:5b:b8:cb:7f:6b:74:98:66:
58:6a:3b:38:56:b7:6e:a6:68:e5:de:80:9a:8d:06:31:6e:6f:
55:7b:9e:14:71:bc:a2:75:61:2d:99:5c:c8:96:3b:fe:1c:4c:
af:dd:e7:f3:82:95:12:6c:74:53:17:15:a9:7e:3f:96:d1:ea:
76:b2:48:15:0a:9d:6c:37:b6:41:80:dc:77:47:36:18:53:0a:
21:b3:37:94:2c:43:9e:8a:30:52:2f:e3:2e:6a:9c:69:0a:0f:
cf:fd:5e:9f:39:d5:07:3f:81:2f:ae:e1:51:cd:d5:54:a3:5a:
30:6d:61:07:2d:e3:d1:ce:d7:e2:f6:d9:8c:72:80:54:79:c2:
66:60:fa:0a:5b:4b:bb:cf:f3:f7:cf:1f:63:b7:4d:d4:64:54:
e0:31:91:e8:14:56:d6:73:4e:30:8d:49:14:a8:39:f8:17:12:
4f:b2:3d:64:fe:48:c9:28:67:b8:73:7a:24:22:cc:5f:e8:ad:
8d:51:99:dd:0f:fd:f2:9d:52:35:8a:4d:b4:03:1c:46:79:a6:
c5:7c:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 20:08:47 2025 by rpki-client