
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/LoFib61Zy_F_Rhq2UY927MgLdEk.roa
File: LoFib61Zy_F_Rhq2UY927MgLdEk.roa (raw, json)
Hash identifier: WEex7NAUAZ5/lVTBfmivv2aMh077j0HB3G5TRqMO9Uc=
Subject key identifier: 2E:81:62:6F:AD:59:CB:F1:7F:46:1A:B6:51:8F:76:EC:C8:0B:74:49
Certificate issuer: /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial: 27
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/LoFib61Zy_F_Rhq2UY927MgLdEk.roa
Signing time: Tue 31 Mar 2026 08:44:00 +0000
ROA not before: Tue 31 Mar 2026 08:44:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7677
IP address blocks: 157.101.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Validity
Not Before: Mar 31 08:44:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2E81626FAD59CBF17F461AB6518F76ECC80B7449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:c6:fe:0f:3d:0e:6b:6a:81:9c:64:89:bb:
40:1f:11:20:bd:f6:31:05:3a:3f:5c:96:d9:e0:7e:
87:8a:9e:4a:71:f1:eb:a1:47:2c:99:b0:3c:d0:ea:
68:4f:d0:5f:98:88:24:4e:8d:2f:47:db:2d:2e:dd:
1a:43:38:75:1d:dc:cd:8b:6b:eb:b6:a4:3e:bb:df:
58:63:31:72:b8:ed:e1:76:f6:bb:cd:95:1e:f6:3a:
3f:54:54:cd:05:0e:e7:0e:39:64:27:7a:17:b3:7e:
be:e8:1c:e7:05:1c:97:37:b8:b3:76:88:9d:af:87:
16:54:db:bc:54:6e:72:87:f3:02:92:9d:b3:25:d9:
3f:78:fc:45:c4:17:c7:6b:fb:8d:0e:dc:e2:b9:0c:
6e:cd:91:62:4f:7d:cc:63:93:3c:8c:ab:16:ee:17:
79:eb:b6:51:84:6e:e9:4f:68:73:bc:90:e8:6c:c0:
ee:55:e8:e3:48:10:67:82:a9:31:a5:8b:bd:6b:6c:
ad:75:2a:96:a1:11:18:d9:03:b0:15:c5:e3:f6:32:
50:b5:8b:6b:f2:57:78:d5:c8:04:a8:4c:48:77:15:
6d:7d:52:2c:1d:cd:18:8c:c1:08:22:a1:e3:e3:94:
db:b6:37:05:0c:17:06:d3:c1:81:1f:d1:7e:b0:46:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:81:62:6F:AD:59:CB:F1:7F:46:1A:B6:51:8F:76:EC:C8:0B:74:49
X509v3 Authority Key Identifier:
keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/LoFib61Zy_F_Rhq2UY927MgLdEk.roa
sbgp-ipAddrBlock: critical
IPv4:
157.101.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2e:45:2c:a5:15:73:99:34:56:b3:27:32:a0:18:58:bb:ab:
f3:23:22:11:1e:f5:2e:2d:b8:9e:c7:19:8b:d7:9b:1e:f3:80:
9e:6a:6a:8c:2b:a6:26:a7:3f:fa:06:5d:dc:ba:aa:fd:5f:d9:
7c:18:28:5d:d4:2e:d8:b0:84:a1:39:f5:e8:a9:24:05:51:76:
15:c6:f4:06:72:27:08:30:ca:f8:bc:b3:aa:05:10:ae:c3:42:
c7:a3:4a:32:15:95:d5:21:6a:0b:72:ae:9a:60:b1:0d:42:54:
04:39:72:dd:d4:01:91:07:df:c4:f5:2a:79:c7:04:46:81:58:
ea:aa:43:91:d0:6c:f0:48:93:db:77:07:ae:39:6a:68:cf:71:
d9:13:1f:3c:8f:fb:fe:02:a4:85:ea:17:a6:95:6f:4c:80:91:
2a:83:d1:e0:df:b6:a3:24:18:0d:dd:8f:e8:7e:4c:d6:95:97:
3e:5f:67:ce:47:be:ac:b8:69:37:9a:a4:e0:bc:df:86:d1:3a:
60:15:f1:2b:97:05:be:dc:62:82:cf:46:8d:27:86:6e:d3:e8:
de:71:1a:a6:a5:57:ab:bf:0a:5d:25:52:92:d1:db:d8:41:57:
52:fc:35:7b:0c:0e:db:81:6f:d9:d6:49:5a:51:38:23:5b:32:
39:64:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:01 2026 by rpki-client