
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7lpm_Gs_PrpNBf3jJXChnnlIGaE.roa
File: 7lpm_Gs_PrpNBf3jJXChnnlIGaE.roa (raw, json)
Hash identifier: dxcy9duo4bU4oufqL6f1x8hwbzrtycaA9idj2mZK1Us=
Subject key identifier: EE:5A:66:FC:6B:3F:3E:BA:4D:05:FD:E3:25:70:A1:9E:79:48:19:A1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 153B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7lpm_Gs_PrpNBf3jJXChnnlIGaE.roa
Signing time: Tue 31 Mar 2026 07:59:14 +0000
ROA not before: Tue 31 Mar 2026 07:59:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5435 (0x153b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 07:59:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EE5A66FC6B3F3EBA4D05FDE32570A19E794819A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:f2:45:1d:93:f4:e7:24:9c:86:82:19:75:
73:4a:ce:86:06:e4:a8:68:9e:66:8c:f2:b0:fe:07:
49:53:83:7d:d2:48:51:00:28:61:bb:e3:93:d9:58:
df:e8:80:51:18:04:22:32:bf:f9:50:a1:04:bd:29:
1a:90:49:72:50:97:98:6d:f4:c4:cd:9b:ee:fc:51:
07:7a:71:36:ce:11:0a:d4:82:73:2a:77:fd:22:76:
57:e8:e8:6d:5d:20:89:e4:84:a0:b9:7b:95:fb:65:
a3:e7:24:f7:4a:fa:c9:23:0d:7f:e1:13:36:16:a4:
15:f5:22:73:bf:6a:a3:7b:2d:8e:0c:36:d0:28:90:
bb:9c:65:2c:d3:84:a9:d3:38:ae:8c:ff:a1:db:2e:
3f:06:6e:d6:43:fd:a9:e4:72:93:34:d1:09:4b:55:
50:4c:32:02:ed:1f:fb:ee:2f:dc:21:c6:90:fc:45:
76:55:f8:38:40:0b:99:13:54:40:ce:cd:a4:c6:37:
8d:e6:92:75:72:66:19:c0:20:49:b6:d7:5e:27:58:
ae:ef:34:52:de:32:1e:61:a1:4b:41:f4:58:0c:1d:
ea:04:90:6f:d7:9e:9d:4d:3a:ab:6e:47:57:1e:4b:
7a:79:ad:db:bb:51:38:18:35:04:8d:ed:09:c2:d2:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:66:FC:6B:3F:3E:BA:4D:05:FD:E3:25:70:A1:9E:79:48:19:A1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7lpm_Gs_PrpNBf3jJXChnnlIGaE.roa
sbgp-ipAddrBlock: critical
IPv4:
220.159.22.0/23
Signature Algorithm: sha256WithRSAEncryption
63:5a:05:5d:d1:8e:4c:40:bd:7a:4b:ea:0f:8c:84:f8:f4:8b:
51:e4:ba:60:70:81:c9:7c:07:d9:aa:f1:02:b9:fd:ee:6a:5b:
df:4e:23:18:d0:7e:77:1d:be:13:8c:9f:f2:2a:8f:7c:51:a7:
c0:2f:74:36:07:b5:ad:aa:ba:09:4c:51:bd:54:73:b2:ce:df:
99:0c:2c:29:d0:a5:03:cb:00:ae:8a:fd:90:86:a5:2e:ce:87:
74:3c:19:65:4d:d4:3f:b1:3e:a5:c4:9a:fa:96:ce:7e:e1:db:
1b:db:7b:75:bd:bb:be:0e:3b:8f:ba:09:ef:9e:3c:d4:72:5d:
a9:03:1c:d6:81:e5:f4:be:36:f8:ed:3d:b2:f5:6b:20:ce:81:
2d:38:70:2d:d8:85:87:b6:09:79:5e:72:03:3a:e5:4f:47:94:
bd:60:07:48:b0:e5:ab:92:37:95:77:91:c7:b0:44:0e:5a:f5:
f8:3e:e0:c1:05:2e:92:57:a0:2d:76:77:07:cf:ce:1e:db:c7:
c8:cf:dd:ab:c6:64:71:36:6d:3b:e5:07:9e:35:8e:88:bc:05:
30:d8:a8:32:7f:ae:e8:45:f4:bb:f5:05:ee:ee:b1:9b:11:1f:
bd:33:ea:04:13:7e:9b:90:7f:0c:0f:80:58:b8:b8:4e:f1:f6:
6f:fb:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:39 2026 by rpki-client