
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/LNsJcs0ePR3bi9d_sJyssl8r7P0.roa
File: LNsJcs0ePR3bi9d_sJyssl8r7P0.roa (raw, json)
Hash identifier: r5CtgXmf4tNKZulU9i0eT8sPQlTr/cckJWqeP8N5SMo=
Subject key identifier: 2C:DB:09:72:CD:1E:3D:1D:DB:8B:D7:7F:B0:9C:AC:B2:5F:2B:EC:FD
Certificate issuer: /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial: 23
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/LNsJcs0ePR3bi9d_sJyssl8r7P0.roa
Signing time: Tue 31 Mar 2026 08:44:34 +0000
ROA not before: Tue 31 Mar 2026 08:44:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14618
IP address blocks: 218.223.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Validity
Not Before: Mar 31 08:44:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2CDB0972CD1E3D1DDB8BD77FB09CACB25F2BECFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:1d:4f:ff:7f:59:82:5a:a6:b3:be:14:ab:
7a:f9:9a:85:7b:8e:a4:4a:2d:ed:9e:7b:f0:c0:02:
b1:24:59:4b:03:b9:e7:f5:0f:c9:8a:c5:e9:cb:40:
f2:2a:02:a5:2a:82:ed:64:42:2a:78:af:af:fb:f9:
c1:7c:d8:81:70:21:cb:42:fe:8d:84:72:e0:d0:b5:
15:ed:ff:8f:fe:9d:5b:dd:a6:4c:c3:15:20:52:0a:
5e:32:62:67:22:79:6b:a9:fb:50:90:e4:b1:ba:fa:
07:e4:20:f4:cf:7e:3b:7e:29:c1:5c:15:b3:45:1c:
bd:45:ef:7a:44:0d:3e:4a:f0:b4:01:4b:94:43:99:
4a:c8:3f:1d:c2:fb:57:c5:a0:5f:8a:49:2e:12:32:
b9:67:c7:75:11:c4:8c:0d:bf:2e:63:0a:4f:49:51:
77:37:fa:89:31:07:88:17:00:82:d8:3a:b2:ed:15:
d7:a9:ff:e5:00:2d:89:6a:d6:6b:52:44:bb:47:24:
fa:21:95:df:fe:f0:d9:25:c0:a0:12:2b:42:b5:1f:
44:77:a8:e9:43:ce:fd:6f:5f:aa:82:2d:fd:bf:47:
d9:13:12:5a:6a:ca:4e:19:2b:a0:b4:56:ad:a4:d2:
92:c1:bb:30:80:15:e5:b2:2b:8f:3c:c3:fd:6f:db:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:09:72:CD:1E:3D:1D:DB:8B:D7:7F:B0:9C:AC:B2:5F:2B:EC:FD
X509v3 Authority Key Identifier:
keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/LNsJcs0ePR3bi9d_sJyssl8r7P0.roa
sbgp-ipAddrBlock: critical
IPv4:
218.223.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:b8:61:ff:c6:1f:b1:3d:2f:e6:c6:f4:ce:f1:1d:33:d2:
17:64:0c:21:86:4e:d5:20:40:52:b1:22:95:4c:bb:0a:da:88:
94:dc:04:a9:4f:39:86:42:f7:cb:76:02:33:61:9c:f2:fa:be:
5f:11:0a:4f:75:21:b0:9f:2f:78:b0:f2:8c:2f:e2:79:2f:ee:
9d:34:94:65:9e:fd:20:c6:15:ae:5a:2b:cc:cb:22:8c:af:4f:
53:8b:36:04:14:d1:f8:a4:ca:77:a7:3e:d2:95:0b:ce:7f:2b:
ba:7b:1f:25:fd:e8:66:a5:1b:31:b9:25:43:5d:aa:b4:07:86:
7f:9a:00:c8:8e:96:f8:3b:48:09:bd:57:c7:78:3f:53:ff:8c:
1a:6d:b8:d6:f0:59:0f:0a:28:0e:53:fb:bb:9e:38:03:cd:73:
dc:10:22:cd:62:22:f5:8a:44:e2:9c:03:8a:c6:fd:31:5d:b8:
c1:4d:29:af:d0:da:31:70:16:b3:00:cd:12:eb:34:e0:1e:22:
be:0b:db:70:f3:4c:f4:fc:67:08:16:93:99:e1:2a:4d:20:82:
0c:74:a1:d5:42:28:e5:1e:27:89:82:65:39:d3:5c:08:36:0c:
36:27:32:a1:da:25:8b:a5:87:1f:f5:ab:6b:ec:d2:b3:f6:81:
19:5d:6d:b4
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDFG
Qzg2N0YzOUM1MzY0NEQwQzVDNTA5OTRCNTUxMTFCRDc2Q0EzMB4XDTI2MDMzMTA4
NDQzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkNEQjA5NzJDRDFFM0Qx
RERCOEJENzdGQjA5Q0FDQjI1RjJCRUNGRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALzuHU//f1mCWqazvhSrevmahXuOpEot7Z578MACsSRZSwO55/UP
yYrF6ctA8ioCpSqC7WRCKnivr/v5wXzYgXAhy0L+jYRy4NC1Fe3/j/6dW92mTMMV
IFIKXjJiZyJ5a6n7UJDksbr6B+Qg9M9+O34pwVwVs0UcvUXvekQNPkrwtAFLlEOZ
Ssg/HcL7V8WgX4pJLhIyuWfHdRHEjA2/LmMKT0lRdzf6iTEHiBcAgtg6su0V16n/
5QAtiWrWa1JEu0ck+iGV3/7w2SXAoBIrQrUfRHeo6UPO/W9fqoIt/b9H2RMSWmrK
ThkroLRWraTSksG7MIAV5bIrjzzD/W/bQD8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQs2wlyzR49HduL13+wnKyyXyvs/TAfBgNVHSMEGDAWgBQEH8hn85xTZE0MXFCZ
S1URG9dsozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc1L0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2WGJLTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JCX0laX09jVTJSTkRGeFFtVXRWRVJ2
WGJLTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82NzUvTE5zSmNzMGVQUjNiaTlkX3NKeXNzbDhyN1AwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANrfDzANBgkqhkiG9w0BAQsFAAOCAQEA
a9K4Yf/GH7E9L+bG9M7xHTPSF2QMIYZO1SBAUrEilUy7CtqIlNwEqU85hkL3y3YC
M2Gc8vq+XxEKT3UhsJ8veLDyjC/ieS/unTSUZZ79IMYVrlorzMsijK9PU4s2BBTR
+KTKd6c+0pULzn8runsfJf3oZqUbMbklQ12qtAeGf5oAyI6W+DtICb1Xx3g/U/+M
Gm241vBZDwooDlP7u544A81z3BAizWIi9YpE4pwDisb9MV24wU0pr9DaMXAWswDN
Eus04B4ivgvbcPNM9PxnCBaTmeEqTSCCDHSh1UIo5R4niYJlOdNcCDYMNicyodol
i6WHH/Wra+zSs/aBGV1ttA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:09 2026 by rpki-client