
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPMLL-fqPKc2_odr-YyizCOQWjY.roa
File: LPMLL-fqPKc2_odr-YyizCOQWjY.roa (raw, json)
Hash identifier: BHncb4a6/mOWGyt+7tmNmZLd1A4j4k85yfYM8sFbcUY=
Subject key identifier: 2C:F3:0B:2F:E7:EA:3C:A7:36:FE:87:6B:F9:8C:A2:CC:23:90:5A:36
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1219
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPMLL-fqPKc2_odr-YyizCOQWjY.roa
Signing time: Sun 01 Mar 2026 02:48:44 +0000
ROA not before: Sun 01 Mar 2026 02:48:44 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:48:44 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2CF30B2FE7EA3CA736FE876BF98CA2CC23905A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:96:45:58:c1:07:ad:20:60:2f:c6:48:eb:
4c:df:f6:e1:5d:e0:a5:2f:bd:f9:92:16:0b:91:ab:
fd:e7:9c:24:66:7e:50:b8:5c:c6:12:ca:48:b4:d6:
2e:64:57:6c:9c:3b:3e:d0:9e:29:53:2f:2f:ca:85:
ab:22:84:8f:91:cc:1b:6b:85:6f:04:79:12:50:e6:
0d:74:51:99:ac:2f:c8:75:00:98:f8:8f:c1:eb:99:
36:c5:89:58:84:1b:75:58:8e:ab:f8:d8:af:a4:7d:
1b:71:ce:fe:38:89:66:3a:14:86:42:ce:a2:ff:30:
49:d5:7a:d6:24:6d:73:68:25:56:1b:ef:e4:ca:3f:
e8:68:cf:54:b3:09:6c:76:b1:d5:a4:02:b3:40:a8:
30:ba:d0:38:d7:56:21:e4:ae:c2:fa:5e:28:6b:18:
8b:4e:57:e2:8b:0e:3a:dd:57:a7:82:cc:46:c7:87:
6f:96:1f:e4:69:0f:aa:44:7c:0d:9a:5c:ba:d6:e9:
8e:28:78:54:91:f3:ad:3f:51:7d:1b:97:51:7a:cf:
fd:b3:09:45:b5:b8:90:fe:27:e7:10:fc:38:a5:0a:
a4:53:ef:ad:ba:70:85:f6:1e:78:a8:05:f8:f1:d0:
8f:6d:93:8d:40:e9:56:fb:82:62:d8:84:5d:f0:b7:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:0B:2F:E7:EA:3C:A7:36:FE:87:6B:F9:8C:A2:CC:23:90:5A:36
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LPMLL-fqPKc2_odr-YyizCOQWjY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:49:bb:05:7b:76:53:f4:ab:a4:95:b1:15:19:88:11:2c:1a:
bb:3b:00:79:e2:a9:79:23:6b:d3:e3:33:22:01:bd:d7:92:83:
bb:26:77:70:5b:4a:38:7c:56:45:5c:c2:8f:1d:4e:23:3a:56:
fd:ec:89:5f:a9:98:b5:c5:61:23:18:a0:2f:e2:cc:0a:7a:e2:
24:18:20:7d:9f:b9:fb:62:71:4c:6e:ae:8c:cb:3c:79:d8:63:
c4:cc:b5:5a:9e:2d:81:be:30:02:ff:28:9a:d8:f2:56:05:4e:
a1:32:fa:ac:2b:8c:60:dc:5c:a1:78:09:82:26:e3:d3:14:0b:
5b:25:07:f8:e0:99:78:09:2c:ea:da:a0:db:5d:1a:17:a6:d0:
2c:3d:52:03:71:07:23:f7:4b:d7:03:39:69:07:fd:3d:14:17:
8a:e1:ce:13:6f:65:b6:01:28:2e:06:cf:9e:6c:78:f5:97:1e:
3c:e2:ba:3c:e7:60:36:9b:98:a5:21:ab:12:fc:61:ef:ba:fa:
37:00:3b:93:90:2a:cd:a7:c5:7d:17:85:e9:14:ca:19:41:8f:
57:1e:6a:a8:fb:f8:82:d3:4c:e7:26:c0:1b:a0:d4:d8:a0:f2:
60:eb:c2:3e:94:ca:22:f5:ed:09:26:9f:c2:83:7f:fe:d4:89:
96:ac:b6:07
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ4NDRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDRjMwQjJGRTdFQTND
QTczNkZFODc2QkY5OENBMkNDMjM5MDVBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvf5ZFWMEHrSBgL8ZI60zf9uFd4KUvvfmSFguRq/3nnCRmflC4
XMYSyki01i5kV2ycOz7QnilTLy/KhasihI+RzBtrhW8EeRJQ5g10UZmsL8h1AJj4
j8HrmTbFiViEG3VYjqv42K+kfRtxzv44iWY6FIZCzqL/MEnVetYkbXNoJVYb7+TK
P+hoz1SzCWx2sdWkArNAqDC60DjXViHkrsL6XihrGItOV+KLDjrdV6eCzEbHh2+W
H+RpD6pEfA2aXLrW6Y4oeFSR860/UX0bl1F6z/2zCUW1uJD+J+cQ/DilCqRT7626
cIX2HnioBfjx0I9tk41A6Vb7gmLYhF3wtyKNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULPMLL+fqPKc2/odr+YyizCOQWjYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0xQTUxMLWZxUEtjMl9vZHItWXlpekNPUVdqWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTAQwDQYJKoZIhvcNAQELBQADggEBAK1JuwV7dlP0q6SVsRUZiBEsGrs7
AHniqXkja9PjMyIBvdeSg7smd3BbSjh8VkVcwo8dTiM6Vv3siV+pmLXFYSMYoC/i
zAp64iQYIH2fufticUxurozLPHnYY8TMtVqeLYG+MAL/KJrY8lYFTqEy+qwrjGDc
XKF4CYIm49MUC1slB/jgmXgJLOraoNtdGhem0Cw9UgNxByP3S9cDOWkH/T0UF4rh
zhNvZbYBKC4Gz55sePWXHjziujznYDabmKUhqxL8Ye+6+jcAO5OQKs2nxX0XhekU
yhlBj1ceaqj7+ILTTOcmwBug1Nig8mDrwj6UyiL17Qkmn8KDf/7UiZastgc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:07 2026 by rpki-client