
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lm_TD0OYuT3QvySpsn0RH7PinLM.roa
File: lm_TD0OYuT3QvySpsn0RH7PinLM.roa (raw, json)
Hash identifier: l0CydorXPTz/dxTzDpHCeipBIwInPuoekdzOeWoFm1k=
Subject key identifier: 96:6F:D3:0F:43:98:B9:3D:D0:BF:24:A9:B2:7D:11:1F:B3:E2:9C:B3
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0769
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lm_TD0OYuT3QvySpsn0RH7PinLM.roa
Signing time: Tue 31 Mar 2026 07:41:22 +0000
ROA not before: Tue 31 Mar 2026 07:41:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 59.137.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:41:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=966FD30F4398B93DD0BF24A9B27D111FB3E29CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:45:9a:af:37:7b:e5:5b:45:44:2f:3e:84:
e2:a1:8c:c4:6e:b1:93:e6:7c:77:bb:3f:c8:4f:fc:
30:bc:53:1b:8f:67:ea:50:81:22:4d:a8:40:0c:09:
12:06:92:dd:48:e7:e2:d7:4a:3b:ae:f8:4e:59:b9:
52:ec:c0:b4:6e:58:9a:de:8c:6d:f6:2c:a4:a6:ea:
e8:b0:06:88:2b:3a:c0:7a:aa:2a:cd:ee:4e:a7:b4:
07:59:c0:30:56:d2:24:d2:f0:d2:7a:0c:71:61:61:
ae:80:8e:41:98:4f:df:b4:b8:24:fa:d5:81:71:df:
6f:94:a5:a4:14:52:88:5a:cb:d9:74:07:b4:38:8a:
f4:b0:ee:93:3e:32:f8:c1:19:c7:8c:03:b2:37:dd:
db:90:24:16:ff:97:cf:ba:a7:c2:1d:71:3d:fa:f5:
e2:49:1e:40:ec:a0:87:46:3d:f2:f8:1f:0c:1e:f5:
82:d8:7d:bd:3d:42:ba:36:88:90:28:90:82:cb:7a:
eb:22:46:e4:25:33:bd:4d:95:f0:e7:fd:8d:24:87:
19:87:3b:55:27:35:ca:33:1e:11:f3:b4:f4:75:b3:
9d:38:9f:3b:0a:07:a8:da:14:bd:5c:a1:a6:4f:0c:
2b:13:d9:e9:a4:78:c1:c8:d0:98:34:01:c3:89:0c:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6F:D3:0F:43:98:B9:3D:D0:BF:24:A9:B2:7D:11:1F:B3:E2:9C:B3
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lm_TD0OYuT3QvySpsn0RH7PinLM.roa
sbgp-ipAddrBlock: critical
IPv4:
59.137.0.0/17
Signature Algorithm: sha256WithRSAEncryption
af:35:19:14:bd:cb:e1:29:2e:1a:3b:eb:78:07:4b:f3:f7:a3:
34:a6:09:da:2d:40:f2:28:38:7b:0c:7f:5e:fe:9a:87:0d:c8:
b2:31:1b:a7:27:f2:15:a1:43:86:6c:1b:f6:b1:8b:9d:9c:57:
1f:c4:1c:b0:3e:00:33:58:3f:3e:9f:f1:2c:73:21:c2:9b:2d:
d4:8c:e1:e1:48:b9:68:7f:9c:ca:d3:56:96:4a:d6:f0:2d:35:
ac:88:af:5f:5c:bd:7f:5d:3d:f5:1e:2c:13:54:c0:4c:86:a0:
29:de:70:05:4a:93:ba:99:71:8b:74:7a:5f:f7:e9:5c:a1:81:
ff:c2:f4:bb:9c:45:95:93:90:b6:a1:74:a2:77:1c:d3:4a:f0:
43:5b:0d:e2:cd:7c:43:35:57:5f:2d:43:90:40:d2:3a:e7:64:
72:74:fb:3c:6b:e0:6e:34:74:9a:eb:44:60:3f:0b:d6:a9:4c:
ca:f3:ba:20:ed:e4:fa:90:b0:0e:c6:bd:94:f6:d5:9b:df:ac:
41:15:66:a6:ba:35:24:f8:28:ca:69:83:ce:3f:82:7c:89:6c:
f6:ea:6d:39:d6:59:61:e6:b2:df:6b:5a:38:52:09:7c:88:7c:
fb:ee:2b:c0:55:54:aa:29:e3:25:e4:45:09:11:b1:03:61:3b:
d5:4e:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:41 2026 by rpki-client