
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/MOWibSwiVu15SCZE1Q4KFkwRo8g.roa
File: MOWibSwiVu15SCZE1Q4KFkwRo8g.roa (raw, json)
Hash identifier: iSB1EzNocuGaL6E4WACcJdXNh0IGpdHVrqur7blat0E=
Subject key identifier: 30:E5:A2:6D:2C:22:56:ED:79:48:26:44:D5:0E:0A:16:4C:11:A3:C8
Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial: 4F
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/MOWibSwiVu15SCZE1Q4KFkwRo8g.roa
Signing time: Sat 01 Nov 2025 01:35:05 +0000
ROA not before: Sat 01 Nov 2025 01:35:05 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 131923
IP address blocks: 133.88.92.0/23 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Validity
Not Before: Nov 1 01:35:05 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=30E5A26D2C2256ED79482644D50E0A164C11A3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:f4:05:ad:cd:e1:56:dc:b1:4c:b8:6a:c2:
a3:1d:c5:6b:06:b9:27:dc:e3:5f:cf:7a:2d:d8:d8:
4a:32:55:61:52:b0:b6:3f:ee:ca:48:fe:f3:11:bf:
c8:3b:99:3f:b2:cf:20:09:68:15:a1:85:cd:e8:73:
eb:9d:1d:d6:98:4e:ec:d2:0e:e4:4e:7a:48:86:a5:
74:22:b6:95:50:09:f2:d7:bd:f8:4c:6d:2f:7d:b6:
07:61:6f:b7:ea:97:7b:0e:17:bd:10:a9:2f:be:da:
f9:90:5d:5c:89:2f:76:63:08:eb:6f:3b:67:63:0e:
4d:3b:0d:5c:df:d0:03:ca:a7:09:86:77:17:96:85:
fa:a2:ad:fd:f5:df:09:e6:2c:c0:13:70:de:53:41:
56:2a:69:7c:78:81:cb:b8:87:c9:81:75:00:36:e2:
50:33:32:91:02:02:86:4b:2a:f4:da:51:d1:4e:b0:
12:50:1a:2f:fe:12:36:92:00:a9:9d:93:a9:f3:57:
b1:bf:09:eb:ba:2b:33:41:24:93:91:0c:f1:92:9e:
f9:dd:cc:b9:7d:e9:0e:b7:10:a5:c6:90:4a:64:b8:
8e:3b:72:8b:2e:ba:6a:17:f8:0e:ad:fd:fd:47:57:
82:0d:78:d6:19:d8:df:e0:0d:df:6b:0f:72:17:b9:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:A2:6D:2C:22:56:ED:79:48:26:44:D5:0E:0A:16:4C:11:A3:C8
X509v3 Authority Key Identifier:
keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/MOWibSwiVu15SCZE1Q4KFkwRo8g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.88.92.0/23
Signature Algorithm: sha256WithRSAEncryption
88:89:b7:bd:b9:f4:65:9d:da:97:95:ad:6f:5e:fc:7e:fc:f1:
b1:06:41:1c:52:85:3a:aa:2a:76:84:0f:a1:0f:8c:8e:c8:d2:
aa:83:55:12:cf:d9:2b:16:65:69:b4:0d:51:56:6f:a4:d9:c3:
db:47:67:ac:44:7c:4b:02:93:30:02:21:9a:97:dc:e4:67:19:
7a:8b:4f:49:42:87:ed:0d:e3:53:ce:d9:ea:fc:39:0f:48:51:
25:d8:72:85:c3:c4:75:ba:2f:b0:9c:58:e4:2b:a0:da:47:cb:
f0:76:a9:cf:f6:8e:c0:88:04:2a:34:b0:ba:66:f5:40:49:78:
5a:36:c4:1f:e6:d8:1b:9f:a0:f2:59:8d:53:82:d5:5c:7d:e8:
da:ac:dd:d9:7e:3c:29:07:63:46:a8:ab:3d:02:7d:8e:91:ed:
1a:b9:17:d8:93:48:ea:74:03:1b:54:63:5f:a9:06:b5:c4:50:
18:0a:b5:f6:c9:e4:d5:d8:6c:38:9f:92:99:63:3c:5f:b1:7c:
79:02:21:a5:96:19:13:f1:8e:e4:25:e6:c7:c8:da:71:54:a3:
56:d3:39:8a:ba:65:c4:42:ec:46:84:93:39:b6:53:b0:73:dc:
79:84:16:05:2d:80:9b:d3:c4:cf:e7:cd:0d:f3:10:e6:7f:df:
c1:f8:27:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:25:24 2025 by rpki-client