
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/lo3aGEWz4K2iOBwx3iPpyuthMAw.roa
File: lo3aGEWz4K2iOBwx3iPpyuthMAw.roa (raw, json)
Hash identifier: jeSn9hRWaU5gJQK6WQKXgfXZRPJYMZ6Nce7OtuyjHSo=
Subject key identifier: 96:8D:DA:18:45:B3:E0:AD:A2:38:1C:31:DE:23:E9:CA:EB:61:30:0C
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 5F
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lo3aGEWz4K2iOBwx3iPpyuthMAw.roa
Signing time: Tue 31 Mar 2026 08:16:33 +0000
ROA not before: Tue 31 Mar 2026 08:16:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7672
IP address blocks: 113.197.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: Mar 31 08:16:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=968DDA1845B3E0ADA2381C31DE23E9CAEB61300C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:25:a4:b2:3c:fe:01:b5:21:02:a0:59:e4:
cf:2c:fc:ab:0d:0a:93:bf:cf:2e:59:f4:e3:26:52:
3f:da:8a:83:ec:2e:8c:d6:0b:ca:03:a5:06:cb:95:
4d:43:b1:2b:6f:7c:66:bf:c6:d0:cc:c2:d6:72:ad:
90:fb:50:97:35:0f:2f:2a:c7:85:58:e1:30:09:e1:
04:97:88:33:2e:d8:05:c1:a2:a3:61:8f:b6:74:5a:
4d:88:53:6d:e6:74:ab:41:06:70:62:84:20:54:3d:
ce:69:47:ce:48:7f:79:6f:34:95:cb:28:f1:6c:86:
29:79:c4:a9:b7:17:fc:0a:61:e0:d9:1b:ce:48:1e:
7e:9f:80:c9:d0:f2:2b:d5:ff:d1:27:10:de:5a:32:
f9:49:25:c5:2d:1b:4b:3a:ba:0c:54:83:16:2b:35:
f1:94:12:2c:0b:56:7c:4e:62:c6:aa:2f:84:cb:e3:
97:a2:9e:b6:64:b9:47:04:d5:58:4c:ce:aa:45:91:
5d:f3:4e:e3:62:9a:b6:c2:da:13:02:89:0d:d6:48:
92:5e:15:74:3c:13:23:bd:bd:0b:93:2e:cd:cc:69:
d1:aa:ae:da:ff:7a:b0:ea:84:84:2a:91:88:6b:33:
2f:32:39:47:f0:4c:79:ed:94:51:fa:0a:86:41:b5:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:DA:18:45:B3:E0:AD:A2:38:1C:31:DE:23:E9:CA:EB:61:30:0C
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lo3aGEWz4K2iOBwx3iPpyuthMAw.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.56.0/21
Signature Algorithm: sha256WithRSAEncryption
78:cd:8e:ac:f4:ed:c1:62:c8:cf:de:61:a9:25:a8:9d:79:41:
45:82:39:02:d7:50:fb:75:4f:d9:d1:ec:bb:6c:37:69:de:f9:
53:76:4b:07:e1:f1:e6:16:db:de:6b:05:2e:fe:6b:73:2a:de:
41:ec:1a:99:8a:e7:8a:ab:08:8d:63:56:40:c9:c0:9c:0c:01:
28:b5:63:c4:fe:e2:31:8b:76:01:e3:7a:af:47:a5:23:21:b8:
77:a7:29:db:35:2c:45:23:9b:89:49:69:27:47:50:13:c6:68:
4b:63:9a:10:22:30:10:a9:aa:09:d9:0e:fc:5c:64:e1:77:71:
92:56:8a:10:e3:78:fe:14:80:9e:a4:1b:a3:fd:b6:0b:6f:85:
31:f7:b4:33:4b:2f:dc:e5:57:5b:83:60:b6:b7:71:cd:13:90:
2b:f9:fb:22:c6:04:29:1d:a5:7d:f9:e1:49:de:71:a4:07:28:
57:f5:c2:76:2f:41:13:fe:2b:d5:54:56:99:51:7b:d5:52:d0:
ef:fb:be:dc:07:da:48:4b:23:69:87:4e:39:3f:7e:8a:7e:ff:
a5:a9:74:48:eb:8f:45:10:5e:34:4d:55:11:d0:6d:da:88:0a:
cf:1e:1f:28:2a:d8:84:13:89:a6:5c:7a:d4:6b:64:9d:06:43:
e8:2e:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:47 2026 by rpki-client