
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/oLWeS_1eW33jeMfYvINnpIychHg.roa
File: oLWeS_1eW33jeMfYvINnpIychHg.roa (raw, json)
Hash identifier: wFtmAkqNck+ewwg0K5Ne8f/OEXLO0s1l60iiEXUSnZA=
Subject key identifier: A0:B5:9E:4B:FD:5E:5B:7D:E3:78:C7:D8:BC:83:67:A4:8C:9C:84:78
Certificate issuer: /CN=1A67F28C960772C69844A673BC3DC9BFC0F5169E
Certificate serial: 13
Authority key identifier: 1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/oLWeS_1eW33jeMfYvINnpIychHg.roa
Signing time: Tue 10 Jun 2025 10:50:49 +0000
ROA not before: Tue 10 Jun 2025 10:50:49 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 38631
IP address blocks: 147.92.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A67F28C960772C69844A673BC3DC9BFC0F5169E
Validity
Not Before: Jun 10 10:50:49 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=A0B59E4BFD5E5B7DE378C7D8BC8367A48C9C8478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:df:f0:7d:a1:5b:ca:5a:0d:c8:f0:0f:7f:
13:61:c3:06:0e:0f:91:50:e8:09:21:f8:9d:03:49:
2f:14:db:95:77:4a:17:6c:cc:8c:29:7d:72:9a:ea:
63:23:0b:f3:4c:a3:d3:c3:45:5b:82:34:11:c2:e0:
92:f4:d8:32:85:78:5c:ef:9a:08:2c:9e:c3:d1:5d:
45:e6:4b:ca:4a:95:41:ac:44:54:ef:2d:14:60:04:
c3:a1:20:9a:36:9b:da:80:11:9d:c1:e4:5f:e4:70:
2a:16:1d:39:e6:79:4e:16:d7:6d:2a:59:59:99:1e:
3b:4b:0a:c6:42:4a:53:23:3e:cd:ac:37:2f:bd:24:
2c:27:06:bb:47:cc:4c:1a:31:2a:f2:7e:8c:db:05:
7f:22:81:73:cb:bc:5d:05:d7:97:60:e4:e2:5e:18:
d8:61:9f:37:a6:4b:db:ae:81:8f:a9:4e:9b:10:25:
6a:46:3f:61:3e:2a:7b:67:2b:ca:67:4d:4f:6d:c5:
20:10:c2:5d:f2:a1:5b:4e:4f:fe:a9:e1:df:ad:db:
1b:99:2c:a3:83:0e:16:b4:fe:46:fe:00:1f:b9:f6:
93:77:42:06:05:73:df:34:99:88:d1:36:a3:72:0a:
32:f3:91:84:3b:aa:5f:a5:19:b7:40:09:fa:b4:37:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:9E:4B:FD:5E:5B:7D:E3:78:C7:D8:BC:83:67:A4:8C:9C:84:78
X509v3 Authority Key Identifier:
keyid:1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/oLWeS_1eW33jeMfYvINnpIychHg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
66:36:1a:ba:28:95:5d:4d:29:e8:8a:9c:b4:f6:3f:83:13:89:
07:45:3a:f6:40:6c:79:81:45:2a:66:17:7a:62:80:11:02:f9:
49:d1:33:5d:bc:3a:a0:89:0d:10:7a:38:d0:ea:f5:30:98:eb:
c1:8e:1e:c0:c7:c8:b7:30:b2:f2:de:41:bb:31:fa:02:5f:9e:
53:81:7b:26:a3:a5:16:b2:f3:b5:c2:a8:67:63:02:9a:2a:82:
3a:30:0c:63:c4:20:d9:f8:58:bf:f0:84:f1:da:3d:f5:06:6b:
4f:4d:be:0e:c9:06:19:a5:68:9f:df:9e:ab:97:c6:6a:2b:52:
cf:d3:00:9d:08:5a:65:0f:e0:a6:29:cd:1a:01:64:26:50:1a:
3d:26:a2:a9:fa:38:02:0c:ea:27:ee:90:c2:2b:3a:d2:96:d8:
cf:b0:0d:78:05:a4:e9:df:56:df:51:e4:bf:f0:1f:c9:c1:f0:
09:67:f8:cc:3d:c3:14:d7:6e:ef:57:b6:f2:9f:b0:55:7b:7a:
c9:65:21:52:7c:df:d2:c5:23:a2:b3:ee:ef:27:79:b9:d9:89:
ff:bf:f2:18:e6:a7:cc:ce:63:d6:ef:4d:71:ef:89:d2:65:0b:
66:23:d0:e6:b2:b0:b9:ea:ba:16:96:6f:93:b5:09:35:5d:9c:
bf:09:52:a7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQTY3
RjI4Qzk2MDc3MkM2OTg0NEE2NzNCQzNEQzlCRkMwRjUxNjlFMB4XDTI1MDYxMDEw
NTA0OVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQTBCNTlFNEJGRDVFNUI3
REUzNzhDN0Q4QkM4MzY3QTQ4QzlDODQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK5a3/B9oVvKWg3I8A9/E2HDBg4PkVDoCSH4nQNJLxTblXdKF2zM
jCl9cprqYyML80yj08NFW4I0EcLgkvTYMoV4XO+aCCyew9FdReZLykqVQaxEVO8t
FGAEw6Egmjab2oARncHkX+RwKhYdOeZ5ThbXbSpZWZkeO0sKxkJKUyM+zaw3L70k
LCcGu0fMTBoxKvJ+jNsFfyKBc8u8XQXXl2Dk4l4Y2GGfN6ZL266Bj6lOmxAlakY/
YT4qe2crymdNT23FIBDCXfKhW05P/qnh363bG5kso4MOFrT+Rv4AH7n2k3dCBgVz
3zSZiNE2o3IKMvORhDuqX6UZt0AJ+rQ3dycCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSgtZ5L/V5bfeN4x9i8g2ekjJyEeDAfBgNVHSMEGDAWgBQaZ/KMlgdyxphEpnO8
Pcm/wPUWnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYvR21meWpKWUhjc2FZUktaenZEM0p2OEQxRnA0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR21meWpKWUhjc2FZUktaenZEM0p2
OEQxRnA0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L29MV2VTXzFlVzMzamVNZll2SU5ucEl5Y2hIZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAeTXIAwDQYJKoZIhvcNAQELBQADggEBAGY2GroolV1NKeiKnLT2P4MT
iQdFOvZAbHmBRSpmF3pigBEC+UnRM128OqCJDRB6ONDq9TCY68GOHsDHyLcwsvLe
Qbsx+gJfnlOBeyajpRay87XCqGdjApoqgjowDGPEINn4WL/whPHaPfUGa09Nvg7J
BhmlaJ/fnquXxmorUs/TAJ0IWmUP4KYpzRoBZCZQGj0moqn6OAIM6ifukMIrOtKW
2M+wDXgFpOnfVt9R5L/wH8nB8Aln+Mw9wxTXbu9XtvKfsFV7esllIVJ839LFI6Kz
7u8nebnZif+/8hjmp8zOY9bvTXHvidJlC2Yj0OaysLnquhaWb5O1CTVdnL8JUqc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:38 2025 by rpki-client