
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa
File: lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa (raw, json)
Hash identifier: O+8yO/VJ8kGv7f3iFLs1/FDc/b3AOhBLM84p3KOd0W4=
Subject key identifier: 95:BF:B7:98:79:E7:3F:86:0B:E4:D6:FA:F7:29:2A:71:FD:1E:21:0F
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0546
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa
Signing time: Tue 31 Mar 2026 08:19:45 +0000
ROA not before: Tue 31 Mar 2026 08:19:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 110.2.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=95BFB79879E73F860BE4D6FAF7292A71FD1E210F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1e:9d:dd:40:f6:d6:11:5f:f1:0e:07:22:a0:
9d:6d:18:9b:3a:c0:c6:fb:32:bc:63:32:39:36:39:
9f:a6:5c:3a:2c:8d:42:cd:72:55:58:d3:e4:4d:d1:
72:48:81:88:69:2c:33:32:7c:df:93:f7:82:68:d7:
0e:b6:fb:64:39:de:fc:81:44:9d:e6:ee:85:1d:17:
cd:92:d0:54:59:90:b0:86:0f:4a:4d:b5:33:ea:22:
0f:c0:fc:9b:f5:e6:20:43:d0:3e:d7:7e:89:15:c9:
a7:88:21:18:83:a6:b0:85:ca:9f:ac:69:88:72:a2:
c9:5c:2d:ef:70:51:0f:7b:7d:f8:5b:13:56:f1:06:
93:dd:98:13:98:de:20:b1:51:5a:7d:65:a3:6d:18:
f9:28:bf:94:4f:36:c6:45:28:e2:76:04:d3:82:3b:
4e:1a:d6:fb:e0:eb:9f:1c:5f:87:84:69:d2:da:98:
96:f8:55:bd:ef:59:fa:b9:65:fc:af:15:55:fa:c0:
32:e9:27:3f:c1:cc:6c:d5:3c:7a:e9:79:9d:f3:e2:
82:59:71:75:60:c0:f8:cb:d7:92:60:9c:a7:ef:56:
d5:e8:5c:f7:2e:a3:d7:79:e5:7a:eb:0e:9c:93:e7:
40:ad:43:5f:7d:d6:fa:97:2f:3c:cd:75:45:f0:58:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:B7:98:79:E7:3F:86:0B:E4:D6:FA:F7:29:2A:71:FD:1E:21:0F
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa
sbgp-ipAddrBlock: critical
IPv4:
110.2.0.0/17
Signature Algorithm: sha256WithRSAEncryption
70:08:eb:8a:17:bc:d7:e0:4d:44:6a:78:90:c6:69:f5:1b:00:
d4:0a:1f:8d:86:89:3a:d0:00:89:9b:c3:12:77:93:5b:9c:5a:
ec:71:40:ff:12:c1:53:ca:fe:04:2b:13:da:d9:fd:51:38:62:
34:7c:e8:29:f8:52:e9:59:c8:6c:16:82:af:d2:3e:59:b5:75:
e3:cd:80:4f:be:6a:fb:cd:14:18:0d:d1:b4:8c:a6:96:e4:2f:
0d:f0:d1:e0:9b:b0:74:23:8b:48:02:e1:b7:90:c2:a5:c9:60:
34:ed:2e:a8:f6:59:da:d9:b0:97:dd:31:09:63:5b:28:7c:cc:
b3:36:9f:bb:61:00:6d:01:21:cf:fc:58:7f:be:8b:c0:e8:f3:
05:20:91:8c:da:31:84:96:e1:f5:c7:b8:23:94:8a:1a:d9:d6:
f0:06:fe:37:f8:1c:d6:d3:f6:7a:f6:a3:c2:44:e9:3b:d4:c6:
d0:e8:e2:5a:10:3e:9f:0d:e0:f8:b4:0a:5a:7d:c8:72:c4:cb:
44:68:ae:74:61:3d:1b:24:cd:1c:60:83:38:52:15:43:cf:19:
e4:be:37:08:b0:61:5e:73:ee:bc:0e:cd:b5:7e:a9:d0:06:46:
09:41:f6:f7:d6:9b:9c:3c:33:7c:fa:98:01:33:40:cf:81:d6:
c9:7c:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:37 2026 by rpki-client