
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LiGTc-Nxj6mgcvMh8h4-CI58fHE.roa
File: LiGTc-Nxj6mgcvMh8h4-CI58fHE.roa (raw, json)
Hash identifier: YmhxrLhi17Gtdx28uAqgD4EtK9J8DdxdMYu0ifC/t9c=
Subject key identifier: 2E:21:93:73:E3:71:8F:A9:A0:72:F3:21:F2:1E:3E:08:8E:7C:7C:71
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05DD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LiGTc-Nxj6mgcvMh8h4-CI58fHE.roa
Signing time: Tue 31 Mar 2026 08:20:58 +0000
ROA not before: Tue 31 Mar 2026 08:20:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 153.120.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2E219373E3718FA9A072F321F21E3E088E7C7C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:58:a9:87:99:d2:b3:8c:99:cb:2a:28:5a:
3b:72:56:d6:1d:b0:93:a3:51:8c:0f:e7:36:41:71:
c8:64:9b:0a:ef:07:71:71:8c:33:6b:65:79:c6:da:
43:a8:42:85:ea:a0:73:97:23:44:e9:a4:dd:70:94:
43:2f:f4:0b:ec:9e:b6:3f:f0:c2:94:66:4d:c1:b1:
e4:af:e1:59:25:7b:2f:14:39:61:6f:78:30:4b:b8:
13:4d:22:c7:42:23:38:37:f4:8a:01:06:6f:ed:10:
d5:99:bc:54:c5:b0:72:b0:8f:fc:56:71:51:06:81:
b8:7a:38:58:5a:0d:e6:9f:bd:09:1c:e4:2b:18:d3:
18:cf:a2:fa:34:26:07:85:06:d9:25:4f:24:a8:45:
a5:db:5f:f0:d1:7e:af:74:9f:78:cf:2c:89:54:9a:
1c:73:87:cb:fc:1e:20:bb:f0:46:04:44:3a:f0:a2:
1b:a8:7a:54:1a:91:11:09:c3:6f:4f:25:4c:07:93:
f5:99:79:7a:01:27:e9:ee:5d:ca:5e:28:2a:8f:ba:
9b:75:b3:8f:ac:2a:30:1a:00:8c:54:7d:84:d3:b0:
95:66:76:86:00:34:ba:c0:8d:8c:cc:e6:9d:01:30:
ad:f9:ec:0a:2a:c4:89:26:8a:de:67:10:31:c4:35:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:93:73:E3:71:8F:A9:A0:72:F3:21:F2:1E:3E:08:8E:7C:7C:71
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LiGTc-Nxj6mgcvMh8h4-CI58fHE.roa
sbgp-ipAddrBlock: critical
IPv4:
153.120.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:1d:3c:49:dd:8f:d8:17:3a:1a:3b:13:ce:5d:b1:a9:1e:80:
b5:74:3b:d3:39:5a:a1:be:83:05:9c:64:d7:d8:af:eb:0a:ad:
cf:2a:d7:c0:17:4d:d0:dc:b4:0a:63:c2:3c:0f:91:0a:c5:31:
0c:4f:21:d3:1d:95:77:c3:91:01:a0:f1:c8:17:9a:f1:0b:e6:
c3:92:fc:2c:90:d6:b0:d6:ea:ef:10:b4:92:f3:d8:b2:56:16:
7a:01:f1:0c:f5:13:be:f2:91:0d:43:ca:20:98:83:ea:4f:69:
99:58:4b:40:a3:3b:a1:19:93:58:ad:a7:b5:10:06:a4:e9:d8:
da:f7:25:b6:a6:8a:85:05:8f:5b:ed:13:d1:3d:7a:bb:a4:aa:
0d:44:1b:30:dd:e7:96:da:b8:01:ff:39:e3:8d:80:0b:82:85:
df:cf:22:6f:76:5b:62:3c:f6:ee:e2:2e:5a:05:06:26:c4:76:
07:a4:b8:0d:e9:d1:c3:df:40:15:fa:5b:42:ef:64:34:1d:6d:
73:e8:57:9c:df:ea:04:3d:07:bf:28:86:d6:5a:14:32:d4:a4:
d9:7e:da:f7:0e:6e:77:f1:71:a2:97:2e:ad:05:94:64:0b:28:
2a:71:6e:b4:5d:a7:af:30:57:b5:5b:7e:9c:93:d9:df:9f:a5:
1f:8a:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:14 2026 by rpki-client