
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
File: E5t2NjwcKl1UxVfgGiid7WSU6_o.roa (raw, json)
Hash identifier: E8rUG3lMVIOercAeB6EsEzH12jkpBJFweIa31DUngNw=
Subject key identifier: 13:9B:76:36:3C:1C:2A:5D:54:C5:57:E0:1A:28:9D:ED:64:94:EB:FA
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 42
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
Signing time: Tue 10 Jun 2025 10:48:49 +0000
ROA not before: Tue 10 Jun 2025 10:48:49 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 38628
IP address blocks: 115.124.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Jun 10 10:48:49 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=139B76363C1C2A5D54C557E01A289DED6494EBFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:34:67:e3:70:40:89:fc:dc:74:63:82:44:
eb:dd:be:43:31:ad:53:3d:03:d4:24:79:d3:ed:39:
af:e7:9a:d9:d3:27:f5:05:52:bc:72:83:de:4b:41:
18:43:33:7a:6e:94:b8:e1:7b:19:ff:5d:7d:0f:62:
1b:4f:dc:07:dd:c8:bf:b2:0f:46:1b:8e:2b:ad:f7:
01:d8:f3:46:96:e8:9d:7c:83:34:29:61:db:7f:33:
87:9b:88:06:89:67:5d:ff:9c:44:8a:0e:88:56:07:
ae:36:8d:94:d7:4c:0c:90:5a:5d:4e:60:b9:fd:69:
19:90:03:57:31:c8:a5:2e:ba:df:a0:3c:03:83:4c:
f1:6c:a0:91:f7:ca:c5:83:d8:10:42:3e:51:54:ff:
da:0e:9b:61:13:88:ee:bb:38:6b:13:c5:a6:95:c8:
6e:cd:0a:ea:40:36:8e:4c:ee:ec:97:82:87:21:b7:
30:82:6f:30:dc:4d:e7:be:37:cb:a1:af:da:63:3a:
cf:d1:4a:3b:5a:69:fa:39:06:b6:85:42:61:dc:4b:
30:4a:d2:36:58:f1:e7:97:0f:8a:3c:b9:c6:ef:80:
b5:7c:f1:92:11:2d:1e:a3:17:17:47:e2:dc:d6:ff:
97:09:f4:21:26:f2:e4:7f:55:f1:0f:54:04:6c:0e:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:76:36:3C:1C:2A:5D:54:C5:57:E0:1A:28:9D:ED:64:94:EB:FA
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.124.48.0/20
Signature Algorithm: sha256WithRSAEncryption
32:77:3e:8e:b3:fa:c6:f8:ad:de:ad:58:4d:66:28:f3:71:c0:
ed:7e:3a:83:e4:b0:84:5c:ee:f8:03:96:76:56:a6:f9:66:9f:
be:68:19:eb:59:c5:ce:ff:77:aa:e8:2a:4b:17:f3:4f:eb:1f:
6e:59:dc:b2:d0:62:8c:15:f4:81:ba:9a:e5:c7:fb:5c:ea:96:
66:4b:b5:ef:f1:0e:18:53:82:dd:47:29:c0:88:32:ca:0d:31:
f6:9e:5f:3e:fb:03:3e:34:04:f6:05:25:9e:23:8b:93:33:03:
91:20:83:71:2f:c1:c3:ea:65:9d:14:0e:87:73:be:64:9a:0b:
02:97:4a:a9:3f:35:64:ff:82:c0:05:fc:e7:65:7c:c1:23:db:
2e:e7:02:12:8d:f3:ce:f6:d3:73:6a:33:bf:e1:a8:e1:ca:49:
ac:95:6a:9b:00:8f:b2:3d:aa:48:98:3e:b5:46:a1:9d:e7:ec:
86:37:ab:8e:c9:30:94:ed:44:f3:09:7f:33:ac:22:44:f7:a7:
2c:b8:2c:32:44:e7:3b:d9:82:e4:c2:ad:b2:be:f6:2d:5c:a2:
be:fb:52:bd:b9:ef:bf:c4:34:bf:dc:4b:c3:51:10:24:2f:cf:
81:04:fe:81:d6:99:58:cf:0d:18:96:26:cc:38:ab:1c:1a:d4:
cc:8e:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:37:23 2025 by rpki-client