
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/LaWA04ddbP_pz-OgoAPs5LuLyT0.roa
File: LaWA04ddbP_pz-OgoAPs5LuLyT0.roa (raw, json)
Hash identifier: gMZnRxYTs5woAjJSR2uP9hQcnRk5wTzHyXCGBvYe2VE=
Subject key identifier: 2D:A5:80:D3:87:5D:6C:FF:E9:CF:E3:A0:A0:03:EC:E4:BB:8B:C9:3D
Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial: 3D
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/LaWA04ddbP_pz-OgoAPs5LuLyT0.roa
Signing time: Tue 31 Mar 2026 08:33:19 +0000
ROA not before: Tue 31 Mar 2026 08:33:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23791
IP address blocks: 110.5.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Validity
Not Before: Mar 31 08:33:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2DA580D3875D6CFFE9CFE3A0A003ECE4BB8BC93D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:d1:da:6e:60:60:00:20:e5:af:79:24:69:
b9:b1:06:90:c6:57:2b:c0:c7:90:42:bb:50:d4:0c:
10:77:00:91:9b:67:6f:c2:09:60:a0:27:93:68:6a:
65:55:fc:0f:9b:0f:bb:eb:a7:06:c4:28:12:b3:e9:
ed:3f:31:30:5a:6a:c3:cc:a9:c1:90:f5:d5:43:f9:
27:dc:e6:e0:8c:d4:e0:0d:7e:6a:a3:10:42:40:88:
1a:f1:fd:38:43:e8:e4:5c:e7:80:ce:1f:24:77:0d:
0d:d8:dd:73:e3:0c:34:da:bf:c0:4d:51:df:d1:55:
ad:2a:09:ca:07:ec:5c:a5:1a:59:4c:49:6f:0d:de:
d5:6e:e4:de:8c:4b:d0:58:5f:68:b6:bc:c9:54:0e:
f9:39:6a:08:fd:e2:9c:de:55:06:2c:c8:39:ae:0f:
59:ba:f4:f7:e7:de:b2:24:65:3c:b6:2a:db:29:b1:
b0:f3:6e:89:ff:f3:9f:04:25:b0:3f:fc:3c:33:95:
04:2c:39:c8:00:50:7b:c5:3a:b3:ae:e3:ee:f2:24:
92:b8:d3:c5:09:87:e3:80:8c:30:6d:35:7e:85:53:
7b:64:14:2a:6e:f9:97:a7:14:30:b1:df:9a:36:78:
cf:2d:62:62:67:1f:45:81:0f:25:55:64:93:86:6f:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:80:D3:87:5D:6C:FF:E9:CF:E3:A0:A0:03:EC:E4:BB:8B:C9:3D
X509v3 Authority Key Identifier:
keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/LaWA04ddbP_pz-OgoAPs5LuLyT0.roa
sbgp-ipAddrBlock: critical
IPv4:
110.5.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:6c:af:76:cf:05:98:86:64:fc:9b:92:8d:d9:a2:e3:93:1d:
02:cd:af:06:c3:4a:28:a4:d6:f6:df:fb:44:89:2e:5b:9a:51:
44:a1:e3:0a:1d:86:20:3f:6e:10:a7:cb:ba:76:60:8a:35:63:
bb:04:8c:ef:6c:d2:4c:09:70:f1:08:aa:58:51:3e:65:b6:f3:
47:19:1b:70:61:e8:a9:af:c1:9e:ea:15:72:66:cc:c7:4c:7a:
0f:7a:f6:8b:53:b1:29:06:ed:82:9e:ae:43:f2:10:ed:8d:1f:
fd:5c:49:ec:8d:d3:8f:bd:28:d0:cb:14:10:25:6c:71:56:25:
1a:e2:8d:ec:65:5d:ff:41:ee:c9:3a:49:dc:29:d2:77:c3:6b:
29:14:1d:f3:50:d5:01:e3:d1:bb:3e:6b:09:fc:71:43:cb:d1:
da:9e:f7:d0:a2:d8:17:9f:f2:14:f9:39:ae:b3:25:ca:2d:21:
5f:86:37:7b:02:eb:c5:2c:11:97:5c:51:4a:43:75:31:a8:d3:
b7:9c:44:c7:cf:cf:50:c9:23:02:4c:71:a4:2c:74:ff:0d:6e:
05:4b:a8:31:a0:1f:c9:7e:03:a3:ed:57:26:5c:3c:95:df:22:
d5:cc:38:74:a7:0d:f3:3f:bd:21:79:76:ef:f1:ad:4c:f2:fb:
53:bb:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:50 2026 by rpki-client