
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLM_sTdi7nOMsOhVmftW2DXA17k.roa
File: lLM_sTdi7nOMsOhVmftW2DXA17k.roa (raw, json)
Hash identifier: SQjDkBkWwro5vaW9mxkxFm47qkptiamyR+teA/JYXec=
Subject key identifier: 94:B3:3F:B1:37:62:EE:73:8C:B0:E8:55:99:FB:56:D8:35:C0:D7:B9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1241
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLM_sTdi7nOMsOhVmftW2DXA17k.roa
Signing time: Sun 01 Mar 2026 02:56:32 +0000
ROA not before: Sun 01 Mar 2026 02:56:32 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4673 (0x1241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 1 02:56:32 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=94B33FB13762EE738CB0E85599FB56D835C0D7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:12:55:9e:ee:b3:de:8a:87:c5:5d:43:c6:
5c:d0:4e:fe:a7:71:39:32:6d:f2:f4:bc:18:30:84:
b2:c8:58:15:7e:ce:53:af:bf:51:09:12:33:7b:ae:
d1:df:2b:1f:cd:37:61:e2:7e:13:21:59:cf:29:39:
88:c0:a9:c4:02:17:64:9c:82:08:7d:63:5a:29:a1:
27:bc:fa:2d:cd:3e:37:73:c8:bc:55:3f:89:4a:45:
73:3b:6e:97:ab:60:db:c6:75:c9:d5:60:94:f2:24:
2e:61:82:39:21:a2:cb:f5:ca:06:eb:2a:4c:e6:47:
61:0b:8c:fa:2c:92:1b:46:be:34:1c:6e:62:6e:a0:
ba:08:0c:ca:e2:c1:9f:63:52:01:0b:33:a1:da:c5:
74:bd:e6:de:1f:87:0a:cd:3d:d8:d8:ce:3d:8d:ab:
b5:8f:32:28:43:65:9c:42:44:68:cf:6e:e3:a1:15:
e0:ef:97:c8:5f:01:b1:6f:93:fa:b1:5e:cc:ac:81:
6b:f7:c1:d7:f7:43:1c:65:b9:80:c6:da:3b:d3:03:
90:7d:b6:af:87:db:2e:1d:5d:84:27:42:ea:2b:80:
33:83:30:18:9e:b5:d3:38:f3:6a:81:4b:5c:1a:a1:
80:9a:d1:36:25:e4:2b:5f:75:bc:26:54:9c:ae:b0:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:3F:B1:37:62:EE:73:8C:B0:E8:55:99:FB:56:D8:35:C0:D7:B9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLM_sTdi7nOMsOhVmftW2DXA17k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.24.0/23
Signature Algorithm: sha256WithRSAEncryption
92:7c:1e:c9:55:9e:e0:4e:55:95:59:0c:03:c9:01:d6:2e:b6:
53:37:8f:52:24:15:47:2c:9b:92:a1:4a:34:c2:ce:fa:d3:23:
08:c8:d7:34:11:c6:f6:b7:02:7a:f0:ad:83:b5:dc:41:2b:8d:
d4:5b:f3:03:51:21:dd:3d:6b:fd:80:f3:9d:fa:7a:11:e3:bb:
33:60:00:d5:9a:a5:cf:1f:98:5e:ea:6d:84:ee:b1:2e:63:5d:
68:ad:3f:4b:f1:74:19:76:45:5d:b6:14:13:08:b7:2e:3d:e5:
79:9a:dc:c7:e2:60:fa:ab:c0:ac:76:1f:bd:a1:f7:af:d9:ee:
2f:a0:f4:bd:5f:1f:b7:15:b1:a8:19:28:89:a5:92:da:f2:2f:
fb:2c:6a:d1:76:51:43:cc:ee:95:67:92:c8:aa:63:9a:04:e9:
f1:75:af:40:ec:b9:7d:86:80:9d:c7:b1:f7:df:20:0b:49:7a:
2c:8d:53:cf:ae:1e:87:1a:ff:f8:e4:7b:e6:67:1c:5c:f2:4b:
10:7b:b7:de:de:e1:53:c5:38:3d:b8:89:59:45:d9:a3:af:c6:
a9:9d:19:b4:c7:1e:d3:c3:00:52:58:ff:08:9c:bb:28:37:c6:
bb:a3:77:0c:19:c2:7e:85:06:13:f0:c8:92:7a:b9:ad:ea:48:
f3:c9:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:32 2026 by rpki-client