
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/LVlZ4Td5r4c4l5qa_SoQidkl460.roa
File: LVlZ4Td5r4c4l5qa_SoQidkl460.roa (raw, json)
Hash identifier: WGIFPpmUgxjDgzM5KMzcwnFkklZsR890KBmJd8wTJ+E=
Subject key identifier: 2D:59:59:E1:37:79:AF:87:38:97:9A:9A:FD:2A:10:89:D9:25:E3:AD
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0227
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/LVlZ4Td5r4c4l5qa_SoQidkl460.roa
Signing time: Tue 31 Mar 2026 07:35:48 +0000
ROA not before: Tue 31 Mar 2026 07:35:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 211.14.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2D5959E13779AF8738979A9AFD2A1089D925E3AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:bf:e8:73:01:06:7c:09:64:27:65:f4:a5:
58:a3:4f:85:4b:d3:9f:30:07:a9:79:bd:b7:5f:43:
15:e4:07:62:e4:69:84:06:dd:16:a0:f3:6a:10:fc:
33:06:57:b5:ca:9e:c4:8f:e8:e0:5b:71:a1:6d:6c:
1e:f9:30:5a:e8:69:fa:e4:0a:2e:fe:e6:d1:f9:7f:
f5:39:69:91:4a:43:e6:eb:74:58:da:14:6c:c4:c6:
c2:32:fe:66:70:18:90:0c:30:de:d3:b3:26:3e:bc:
97:3c:20:d6:c7:33:d6:e3:b7:63:ad:12:0e:bd:a2:
e5:3e:e3:a3:91:27:e3:be:5e:8f:e4:73:c1:60:62:
f5:09:7b:a9:e3:40:05:da:03:86:7f:5a:17:c1:a4:
b0:71:45:68:08:dd:d4:f1:d2:d9:92:00:85:02:07:
c2:82:32:82:4f:bb:3b:a6:eb:6b:d3:f4:9b:b4:07:
a7:33:eb:7b:4e:07:5a:93:af:a3:9f:03:99:9e:41:
87:e3:28:ab:fd:a3:fe:0c:aa:9c:36:81:56:ef:00:
0d:67:1a:5a:04:30:f0:b6:58:34:47:2e:3b:ca:bf:
4c:92:1a:65:72:ff:66:9f:b7:c8:e6:db:2d:10:2b:
70:74:d1:3a:8e:ea:dc:27:77:a0:b7:eb:83:e2:43:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:59:E1:37:79:AF:87:38:97:9A:9A:FD:2A:10:89:D9:25:E3:AD
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/LVlZ4Td5r4c4l5qa_SoQidkl460.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.32.0/19
Signature Algorithm: sha256WithRSAEncryption
92:88:89:ad:e4:da:09:04:73:35:1d:9c:4b:93:17:d7:4f:23:
52:d2:50:5c:1c:13:77:40:2b:44:45:4b:2a:d9:de:05:c7:e7:
98:7f:38:be:6a:3a:80:56:7e:28:f0:9e:09:c2:a4:12:fb:f4:
5b:42:45:7d:aa:16:9e:01:c0:32:70:e9:2e:9b:07:b0:87:a6:
ed:28:86:b5:2f:75:1c:b5:ee:a9:45:e7:62:86:1b:0b:0e:8d:
8f:09:07:f1:f5:df:fb:c2:74:41:ce:4f:45:d5:7e:1c:81:48:
17:7b:fd:5b:85:a6:f4:79:b9:d9:e5:99:e2:9e:f5:20:49:99:
7c:bf:ba:55:6b:46:2d:eb:d2:49:17:ff:2b:b3:04:6b:02:a2:
fc:d7:26:b8:b6:1c:30:63:6a:ee:67:eb:44:89:8e:d3:00:74:
09:f6:d2:05:35:e9:d3:01:d7:f3:e4:15:0a:1d:7f:82:39:3d:
c8:12:8f:50:30:9e:49:47:8d:76:27:0a:40:6d:40:e0:4d:fb:
73:e6:fe:d2:e1:fd:38:be:8a:fd:87:53:97:b3:6b:b5:c8:eb:
24:a4:2c:ff:06:b4:17:e2:43:92:0a:75:ff:3e:2b:db:a4:24:
c9:a4:df:45:2e:f7:62:98:dc:91:9f:20:fc:56:4c:bb:08:ba:
a2:3e:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:01 2026 by rpki-client