
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
File: Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa (raw, json)
Hash identifier: BxTfTm+8cQnSWQSpH3WCyvFDH70w0SNtnPi6+y9/1Rw=
Subject key identifier: 2E:FF:EA:3D:1D:1E:17:1B:0A:3E:BF:2F:F4:9D:66:BE:23:06:FF:8B
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 87
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
Signing time: Sat 01 Nov 2025 01:31:47 +0000
ROA not before: Sat 01 Nov 2025 01:31:47 +0000
ROA not after: Thu 15 Oct 2026 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Nov 1 01:31:47 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=2EFFEA3D1D1E171B0A3EBF2FF49D66BE2306FF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:eb:f7:5c:72:29:3e:c8:36:26:fa:9d:1e:
7a:39:0a:c6:d2:49:03:55:3c:74:83:a3:18:5a:6a:
de:f6:1d:4e:4e:46:18:0b:66:24:4d:d8:0e:06:a9:
58:73:56:ec:60:96:c3:be:f8:bc:59:97:da:9a:77:
99:f9:6d:4c:25:eb:b3:c0:dd:bf:3b:a7:3d:11:12:
c4:e8:f1:d8:cc:a5:c2:25:25:e4:b2:6a:16:5a:fd:
7f:ea:25:5f:03:34:56:68:57:72:ac:76:68:5a:18:
78:c0:cc:4f:cf:77:0d:0f:22:b4:8d:75:2e:03:ac:
e8:1f:99:22:06:34:82:c5:73:34:cb:63:3a:0a:c9:
4b:26:07:3b:b2:48:a6:a9:c0:02:da:94:87:a0:c9:
0c:cb:3c:19:3e:cc:5e:66:06:08:3a:1d:f2:d2:3f:
5c:58:da:d0:75:db:42:a6:a8:a3:c3:c2:98:cc:af:
f4:21:83:8c:b4:0a:b9:31:46:ef:9f:6d:eb:45:d9:
73:14:01:ab:92:07:3d:f2:74:08:a7:b3:15:91:4b:
24:64:c8:e6:12:60:84:20:81:46:31:c4:2e:8f:d8:
cf:6b:43:24:a7:a5:be:75:b6:3d:74:b8:c7:51:be:
f0:ac:93:8a:ef:da:51:0a:2a:23:e3:63:b9:3f:6c:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:EA:3D:1D:1E:17:1B:0A:3E:BF:2F:F4:9D:66:BE:23:06:FF:8B
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.92.0/24
Signature Algorithm: sha256WithRSAEncryption
23:71:f7:1b:de:6a:9f:7a:b1:53:dc:fb:c8:91:02:f0:1c:cc:
e6:3e:2c:f5:c9:26:0d:c9:a3:02:1f:7c:c3:11:92:c9:7c:5b:
ff:a3:eb:c7:70:15:5c:e4:69:a5:28:53:de:93:59:8e:1d:bc:
5e:01:5a:e6:e3:d8:ee:1d:53:b2:0c:0e:00:24:61:73:7b:ec:
d3:4d:e7:3c:2a:72:ee:5f:ce:76:f4:5c:4e:24:84:da:0a:aa:
9c:61:4d:53:ed:25:e1:b2:8a:be:7a:33:57:76:59:29:e1:62:
4d:c2:2c:dc:18:70:5f:69:55:c7:1e:55:9e:01:37:46:e8:77:
b7:d7:8e:46:6e:33:d2:70:2b:c9:8a:2e:b1:fe:36:f0:57:49:
0a:7a:73:a3:3f:62:2d:65:75:aa:13:84:35:bc:59:28:b6:ff:
c3:46:8e:97:dd:71:fe:8c:b7:68:66:b3:e6:ad:7c:fa:26:39:
a2:fa:29:ad:f0:36:f2:e8:09:79:de:2c:d0:57:70:de:c5:d6:
a5:9c:0a:d4:46:74:d9:81:42:9b:67:f1:b0:7b:43:ad:84:5f:
fb:86:e2:6c:47:7f:1d:04:92:91:3c:48:77:95:7e:b9:0d:a0:
1a:f4:2d:a3:7e:9b:3f:92:45:9f:8a:c4:0c:32:34:55:cd:cf:
4c:de:76:bf
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNTExMDEw
MTMxNDdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFRkZFQTNEMUQxRTE3
MUIwQTNFQkYyRkY0OUQ2NkJFMjMwNkZGOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmjuv3XHIpPsg2JvqdHno5CsbSSQNVPHSDoxhaat72HU5ORhgL
ZiRN2A4GqVhzVuxglsO++LxZl9qad5n5bUwl67PA3b87pz0REsTo8djMpcIlJeSy
ahZa/X/qJV8DNFZoV3KsdmhaGHjAzE/Pdw0PIrSNdS4DrOgfmSIGNILFczTLYzoK
yUsmBzuySKapwALalIegyQzLPBk+zF5mBgg6HfLSP1xY2tB120KmqKPDwpjMr/Qh
g4y0CrkxRu+fbetF2XMUAauSBz3ydAinsxWRSyRkyOYSYIQggUYxxC6P2M9rQySn
pb51tj10uMdRvvCsk4rv2lEKKiPjY7k/bDJxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULv/qPR0eFxsKPr8v9J1mviMG/4swHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0x2X3FQUjBlRnhzS1ByOHY5SjFtdmlNR180cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACg+VwwDQYJKoZIhvcNAQELBQADggEBACNx9xveap96sVPc+8iRAvAczOY+
LPXJJg3JowIffMMRksl8W/+j68dwFVzkaaUoU96TWY4dvF4BWubj2O4dU7IMDgAk
YXN77NNN5zwqcu5fznb0XE4khNoKqpxhTVPtJeGyir56M1d2WSnhYk3CLNwYcF9p
VcceVZ4BN0bod7fXjkZuM9JwK8mKLrH+NvBXSQp6c6M/Yi1ldaoThDW8WSi2/8NG
jpfdcf6Mt2hms+atfPomOaL6Ka3wNvLoCXneLNBXcN7F1qWcCtRGdNmBQptn8bB7
Q62EX/uG4mxHfx0EkpE8SHeVfrkNoBr0LaN+mz+SRZ+KxAwyNFXNz0zedr8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:07:26 2025 by rpki-client