
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
File: LJwRLeliCHWTg1nGQGp8snQf4T8.roa (raw, json)
Hash identifier: 4rQGzzIODI/wUXlZSKpy3ZDhIT3WWGNu3mbV9H/llmQ=
Subject key identifier: 2C:9C:11:2D:E9:62:08:75:93:83:59:C6:40:6A:7C:B2:74:1F:E1:3F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0D96
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
Signing time: Tue 01 Apr 2025 02:21:37 +0000
ROA not before: Tue 01 Apr 2025 02:21:37 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 211.14.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 12:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 02:21:37 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=2C9C112DE9620875938359C6406A7CB2741FE13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:ba:94:ec:bb:a5:a7:27:10:d6:55:ee:bd:
b8:89:43:05:06:72:db:45:83:e9:af:53:e2:94:7c:
8d:5d:8f:0b:64:24:a4:90:04:86:fb:1b:ec:b6:dd:
2d:0e:cd:9f:be:92:42:1e:87:59:6d:cc:fc:27:42:
5f:f3:b1:36:1a:25:2a:45:d8:5e:47:e8:cd:77:e2:
77:89:5f:54:f6:51:df:af:43:82:52:92:27:35:dd:
72:d5:db:b6:05:cf:17:2b:19:91:47:74:4f:53:7c:
06:eb:00:8e:9b:e0:34:67:fd:d5:c3:57:20:c1:12:
eb:db:94:21:e6:cb:0c:99:f4:a3:e1:76:e6:fc:70:
a2:c8:40:b9:85:99:b7:02:5d:05:25:e4:57:1b:72:
ff:29:8d:51:7a:23:79:b9:f9:5a:a7:ba:9d:c6:ee:
11:a1:d2:72:a5:fd:34:90:23:be:ed:05:ee:a3:e2:
97:cb:da:7d:e5:60:7d:6a:f1:67:18:05:f4:73:47:
fa:bd:c8:5a:0c:6a:42:57:f9:48:c4:a3:81:04:f1:
f2:60:6b:37:a3:df:5f:77:6a:ff:d2:35:06:d0:7c:
da:ac:5a:66:60:7f:f8:62:64:66:3a:54:c1:c9:11:
d8:0b:d5:57:ab:9f:3e:39:f0:52:f7:e7:9e:ed:99:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:11:2D:E9:62:08:75:93:83:59:C6:40:6A:7C:B2:74:1F:E1:3F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.94.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:6f:e9:ff:a4:e8:a0:83:25:a1:d7:49:58:ec:fa:08:b6:0c:
32:4d:29:7a:81:cf:a4:3f:e0:ac:df:8a:79:2b:bd:bf:de:c8:
ce:f4:6c:e4:65:43:51:c7:34:9d:6b:f5:80:42:a5:0b:db:8a:
bd:e0:50:3c:f2:17:3e:55:32:2e:15:cc:21:c3:7f:b9:e0:de:
4d:53:91:fc:4b:b0:c4:70:b1:34:8c:0a:6b:97:b0:4f:10:20:
63:0f:d1:c3:13:f9:c4:98:5e:79:3c:ad:3e:f9:c7:0b:e8:62:
d8:48:29:9d:77:7b:86:58:66:a8:fb:8b:c5:b1:83:8c:31:0d:
a0:40:c7:33:c8:75:7b:36:95:3e:03:79:5a:a8:66:c6:0a:47:
50:70:94:f3:74:e2:c3:2a:e7:6c:7a:f0:91:a8:28:e7:c8:9d:
03:30:06:df:6c:a3:8b:ec:36:a7:a9:6c:eb:47:49:80:fa:85:
f8:e9:1a:6a:4e:9e:4f:38:24:6d:59:f1:56:33:5b:ce:f6:4c:
f1:3a:49:cd:1e:fd:cc:6e:5c:9d:e0:a0:8d:73:1d:63:07:86:
63:5f:f7:f4:bd:82:26:42:65:00:d4:83:f1:7e:55:82:2c:d5:
84:3b:e8:6d:81:ed:50:d2:9d:d8:03:3f:a9:04:93:a2:63:a7:
22:b0:ab:5c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjIxMzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDOUMxMTJERTk2MjA4
NzU5MzgzNTlDNjQwNkE3Q0IyNzQxRkUxM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCL7qU7LulpycQ1lXuvbiJQwUGcttFg+mvU+KUfI1djwtkJKSQ
BIb7G+y23S0OzZ++kkIeh1ltzPwnQl/zsTYaJSpF2F5H6M134neJX1T2Ud+vQ4JS
kic13XLV27YFzxcrGZFHdE9TfAbrAI6b4DRn/dXDVyDBEuvblCHmywyZ9KPhdub8
cKLIQLmFmbcCXQUl5Fcbcv8pjVF6I3m5+Vqnup3G7hGh0nKl/TSQI77tBe6j4pfL
2n3lYH1q8WcYBfRzR/q9yFoMakJX+UjEo4EE8fJgazej3193av/SNQbQfNqsWmZg
f/hiZGY6VMHJEdgL1Vernz458FL3557tmf45AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULJwRLeliCHWTg1nGQGp8snQf4T8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0xKd1JMZWxpQ0hXVGcxbkdRR3A4c25RZjRUOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHTDl4wDQYJKoZIhvcNAQELBQADggEBANhv6f+k6KCDJaHXSVjs+gi2DDJN
KXqBz6Q/4Kzfinkrvb/eyM70bORlQ1HHNJ1r9YBCpQvbir3gUDzyFz5VMi4VzCHD
f7ng3k1TkfxLsMRwsTSMCmuXsE8QIGMP0cMT+cSYXnk8rT75xwvoYthIKZ13e4ZY
Zqj7i8Wxg4wxDaBAxzPIdXs2lT4DeVqoZsYKR1BwlPN04sMq52x68JGoKOfInQMw
Bt9so4vsNqepbOtHSYD6hfjpGmpOnk84JG1Z8VYzW872TPE6Sc0e/cxuXJ3goI1z
HWMHhmNf9/S9giZCZQDUg/F+VYIs1YQ76G2B7VDSndgDP6kEk6JjpyKwq1w=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:13 2025 by rpki-client