
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/LwA1ghi8eyjHS_g8uni-N3sLelo.roa
File: LwA1ghi8eyjHS_g8uni-N3sLelo.roa (raw, json)
Hash identifier: 3mx/L6mhXQNjekU0lzF9jvWNtjGldrGJaZ4j4Axb6MU=
Subject key identifier: 2F:00:35:82:18:BC:7B:28:C7:4B:F8:3C:BA:78:BE:37:7B:0B:7A:5A
Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial: 4A
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LwA1ghi8eyjHS_g8uni-N3sLelo.roa
Signing time: Tue 31 Mar 2026 08:34:21 +0000
ROA not before: Tue 31 Mar 2026 08:34:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17682
IP address blocks: 223.29.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Validity
Not Before: Mar 31 08:34:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2F00358218BC7B28C74BF83CBA78BE377B0B7A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:54:d9:56:03:ec:77:98:25:d9:1d:df:e6:
83:f2:f8:34:da:c2:8a:30:65:7f:78:e7:4e:94:f9:
8d:dd:f7:69:a9:fa:cc:b9:70:48:6c:bb:5b:ef:39:
82:47:18:28:a2:05:f4:dd:fc:e2:21:62:bc:70:aa:
fe:63:44:8a:ae:d4:1c:f8:53:25:f6:f1:65:15:a5:
58:0b:e8:5d:cc:47:74:57:21:7c:e1:6c:bd:01:fb:
36:37:ba:ba:d7:a7:f8:aa:48:ca:e9:e7:b6:e0:67:
49:af:76:c2:f3:bf:2f:83:56:83:0f:dc:5e:98:ad:
a2:b6:6c:fa:f1:5b:e4:bc:f1:6b:cd:cb:83:75:34:
e0:27:01:d4:54:eb:2b:b3:e2:8b:92:0e:31:e1:7e:
d6:b7:72:74:7f:c7:bf:34:a9:6e:a7:a0:a4:75:ec:
29:f9:02:b3:7c:cf:60:5a:3b:ae:fb:be:2a:1b:e7:
c8:0e:c5:31:74:73:56:96:15:d7:aa:21:e6:93:3e:
29:97:43:c1:76:7e:c3:20:1a:b6:98:86:7c:11:3e:
01:47:d2:f5:b4:cf:b2:d9:4b:e9:07:91:f2:18:93:
ed:83:9b:bb:ca:d1:f8:89:4d:05:17:45:27:6c:99:
b0:98:89:7e:34:7a:04:0a:05:05:b5:57:94:44:37:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:35:82:18:BC:7B:28:C7:4B:F8:3C:BA:78:BE:37:7B:0B:7A:5A
X509v3 Authority Key Identifier:
keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/LwA1ghi8eyjHS_g8uni-N3sLelo.roa
sbgp-ipAddrBlock: critical
IPv4:
223.29.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:5b:f7:bc:e6:27:f0:0e:79:58:59:58:94:73:d8:4e:cc:a7:
60:41:46:2a:68:99:df:8b:21:c0:3b:f8:83:2b:bb:50:81:37:
92:78:39:5b:98:b4:8e:95:98:7f:e2:b0:53:27:12:00:3b:d2:
85:d1:ea:e2:64:1e:b6:f0:d2:03:bb:f9:c6:92:67:be:84:74:
70:e1:2f:fb:3c:6d:d1:df:5d:74:2e:76:49:f6:a4:2c:43:25:
8d:56:cd:60:fe:49:d1:5a:09:a2:af:bc:8b:5d:20:89:2e:ac:
83:33:de:89:57:0a:d5:b9:2b:dd:bf:4d:c9:58:70:83:a7:31:
47:5c:21:f0:f9:0c:6f:05:2e:aa:da:b2:7f:f0:6e:c2:c1:16:
f5:56:c0:30:db:f3:cb:02:95:66:13:79:96:b3:61:da:58:c6:
d9:d1:f2:09:a8:c2:b7:42:1a:8e:2a:94:1c:66:6a:ed:7e:c1:
8a:65:cd:d5:03:ed:59:e2:69:fb:33:81:9d:31:dc:c6:2b:bc:
a6:8d:7f:5c:e8:9a:9d:33:ea:24:94:8b:27:11:d0:6a:78:48:
b5:ed:09:05:10:69:97:71:09:5c:99:16:db:60:f7:a1:27:46:
61:53:d1:f3:44:3c:bb:ec:9d:c3:80:c1:2c:94:a7:b5:6b:7c:
ee:ac:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:53 2026 by rpki-client