
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/OE50OFE6EFveiw6-3515N4DR3B4.roa
File: OE50OFE6EFveiw6-3515N4DR3B4.roa (raw, json)
Hash identifier: o8d4FEek4skWLoZa3h03tgh8I6wrPsCByPDQYv1IQB4=
Subject key identifier: 38:4E:74:38:51:3A:10:5B:DE:8B:0E:BE:DF:9D:79:37:80:D1:DC:1E
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 91
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/OE50OFE6EFveiw6-3515N4DR3B4.roa
Signing time: Sat 01 Nov 2025 01:32:28 +0000
ROA not before: Sat 01 Nov 2025 01:32:28 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 2514
IP address blocks: 133.232.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 14:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Nov 1 01:32:28 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=384E7438513A105BDE8B0EBEDF9D793780D1DC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:83:51:d1:a9:41:4c:4c:1e:2b:1b:14:27:
ef:f5:20:38:8d:9b:35:39:93:82:95:08:97:02:10:
a8:4e:c5:d0:0f:89:19:89:43:70:85:72:1a:43:51:
21:c1:36:fd:1e:0c:57:ad:08:78:39:8c:23:7d:5c:
56:59:96:ce:58:b1:6f:c3:13:13:d5:1c:ec:80:24:
20:b2:5a:63:2b:7e:f0:87:18:fa:f0:f3:d0:97:bc:
03:3a:6c:72:45:72:36:d6:c3:40:34:ed:0c:0e:1e:
cb:b5:fe:c9:e9:ad:56:9d:a4:96:de:f3:a0:4e:07:
72:4f:9f:f4:f5:14:1a:69:45:9a:5c:6f:cc:13:97:
b7:6a:dd:9f:43:f5:cf:f9:6e:4d:cd:2c:c8:43:c3:
c2:49:e6:1a:d0:a7:d3:0a:4f:47:90:a2:63:41:9c:
84:25:5b:91:f8:5a:4d:23:20:e8:c1:64:77:1d:de:
59:1f:6d:22:37:96:12:42:ff:f1:73:9d:b5:bc:46:
69:65:8a:b2:7f:5d:d9:c5:52:8e:28:0e:d8:95:c1:
77:c5:a3:52:17:d6:0a:4e:ca:36:eb:d9:af:6f:04:
c8:98:0a:3b:1a:c5:19:55:32:75:6f:c3:37:b6:d9:
e4:91:15:d6:56:3a:60:19:d6:ea:d4:fd:c5:28:25:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:74:38:51:3A:10:5B:DE:8B:0E:BE:DF:9D:79:37:80:D1:DC:1E
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/OE50OFE6EFveiw6-3515N4DR3B4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.232.128.0/17
Signature Algorithm: sha256WithRSAEncryption
aa:f4:59:fd:23:a3:25:3e:5c:dd:d2:23:b1:79:d2:19:5d:69:
8f:21:ce:ed:71:04:dc:4b:c9:67:22:b7:ba:51:17:35:77:e6:
91:ff:53:a8:2d:fc:d7:03:a0:82:02:9f:bc:09:9e:1c:4a:71:
5e:6b:81:c9:dd:12:07:36:cf:62:c5:74:1e:e9:3d:6e:88:71:
88:d4:4f:07:fb:0c:3c:42:e2:ac:18:f9:45:3c:eb:de:4f:0e:
3d:79:9b:aa:0c:fb:84:21:d8:cd:c1:77:aa:79:b7:41:2e:30:
92:e6:fb:6e:41:fe:39:08:2b:79:ef:32:d7:e7:5a:9d:ae:85:
da:55:48:04:76:e8:8f:b1:5f:f1:99:42:26:b7:21:dc:ec:ac:
c3:ff:63:b0:c4:b5:c4:65:6f:0a:15:73:d3:33:c8:05:30:de:
2a:1f:6a:65:62:26:62:c0:c1:dd:ab:15:87:ad:f5:d8:d2:db:
29:c2:6f:40:9b:cd:9b:28:ed:47:61:60:e3:d9:cb:3b:bc:b8:
94:b8:95:c5:2b:bb:af:85:e6:11:65:ef:18:29:e1:b2:3f:7e:
32:ab:4c:e4:d6:12:34:a3:ee:53:36:f6:75:af:70:eb:01:17:
c7:48:c7:d5:f3:e5:cf:14:9e:56:82:47:90:4f:a2:5a:f1:88:
03:fb:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:12:52 2025 by rpki-client