
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFPOwpgjpfEc9K_6K0INn4fLiCg.roa
File: LFPOwpgjpfEc9K_6K0INn4fLiCg.roa (raw, json)
Hash identifier: +ZNN+0mIu6JwHAsfKGZLGeU+h7iEdPnkVP74qxAHwB0=
Subject key identifier: 2C:53:CE:C2:98:23:A5:F1:1C:F4:AF:FA:2B:42:0D:9F:87:CB:88:28
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFPOwpgjpfEc9K_6K0INn4fLiCg.roa
Signing time: Tue 31 Mar 2026 08:04:39 +0000
ROA not before: Tue 31 Mar 2026 08:04:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6102 (0x17d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2C53CEC29823A5F11CF4AFFA2B420D9F87CB8828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:31:b8:83:b7:db:ce:b7:21:c5:e7:6c:08:
91:ed:a1:fb:66:f3:94:d5:f4:9a:29:40:5d:4d:58:
37:28:78:0e:03:5e:84:f2:8a:44:81:01:97:8b:93:
13:7c:cb:9c:78:0a:88:89:7c:df:78:0d:11:68:6f:
5e:53:19:13:a7:19:d5:21:42:ab:8b:b2:19:c3:64:
88:e7:0f:c2:23:01:6a:1c:3f:34:37:f1:f1:7f:7e:
5d:80:4e:42:d4:ae:de:1b:b0:a4:3b:ec:01:86:66:
d2:49:94:11:ef:1a:ad:3f:45:e7:fe:38:d5:1d:9c:
a7:e3:fe:21:d4:7c:79:91:a1:4b:c6:a5:c5:d7:4d:
96:89:3d:f3:c3:28:8e:c2:69:e4:9a:c3:08:ce:a1:
68:89:16:6f:45:28:05:48:38:03:2d:2b:6d:8b:51:
70:78:57:3d:a7:5d:e5:31:a3:ea:03:87:29:f3:02:
58:65:a2:c6:7b:41:15:35:47:60:21:33:f9:28:93:
3e:56:46:41:a6:44:80:31:ad:cd:24:ed:c6:16:ab:
86:ec:fb:98:73:42:b4:bc:3b:a8:e9:84:e1:3a:a8:
6d:78:78:2c:9a:54:5b:c7:e0:0b:fd:e6:15:fc:71:
59:9f:f5:7b:27:1f:0a:1a:ac:c1:5f:f8:c6:89:a5:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:CE:C2:98:23:A5:F1:1C:F4:AF:FA:2B:42:0D:9F:87:CB:88:28
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFPOwpgjpfEc9K_6K0INn4fLiCg.roa
sbgp-ipAddrBlock: critical
IPv4:
219.114.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:16:da:d0:23:99:4b:13:1c:3b:e2:8e:61:cc:ca:a6:13:e8:
7a:31:1f:60:67:d4:59:38:a4:fa:3c:16:53:fc:43:c8:66:da:
16:62:43:7f:3a:cd:7f:74:0e:50:6d:b2:89:3d:86:d0:d4:b9:
fc:cc:64:39:2a:5c:be:3c:21:83:00:78:52:05:39:94:02:3f:
58:4d:0a:9a:02:c5:d8:e4:43:3c:d1:d1:a6:c4:8f:fa:37:6f:
c7:de:0c:40:59:97:27:bf:e0:fe:5c:3b:36:a1:fa:aa:37:16:
77:49:c9:5f:5f:b1:72:e5:35:fe:2a:78:9e:b3:24:42:b0:07:
7c:2f:69:63:25:50:ce:e2:3a:f6:2a:93:6e:a8:15:0e:ea:95:
49:83:e2:43:21:dd:2a:ea:36:0f:f0:47:49:c7:f9:17:8d:95:
b4:64:5a:f9:de:03:0d:76:3e:0d:ac:18:79:ba:b7:b1:48:ff:
f9:50:ca:84:36:df:f1:2e:33:49:83:d1:16:22:dc:f9:8d:29:
b7:4e:de:4c:e9:fa:04:db:00:17:5a:d2:3d:77:b9:9b:16:1c:
03:3b:58:e8:6b:c8:1d:76:47:1b:ce:f1:b9:19:8e:d3:73:fd:
b7:75:1f:18:85:10:ee:88:49:e7:75:02:04:b8:18:10:86:d5:
e2:a2:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client