
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/LIGTX6ARztCEPDFWrgBZIdSAs2Q.roa
File: LIGTX6ARztCEPDFWrgBZIdSAs2Q.roa (raw, json)
Hash identifier: /4ucPZKhWoDUiKWhpaXys3oalcYu6feo68bh4b4lAf0=
Subject key identifier: 2C:81:93:5F:A0:11:CE:D0:84:3C:31:56:AE:00:59:21:D4:80:B3:64
Certificate issuer: /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial: 2F
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/LIGTX6ARztCEPDFWrgBZIdSAs2Q.roa
Signing time: Sun 01 Mar 2026 01:36:13 +0000
ROA not before: Sun 01 Mar 2026 01:36:13 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 17931
IP address blocks: 202.165.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Validity
Not Before: Mar 1 01:36:13 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=2C81935FA011CED0843C3156AE005921D480B364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:21:c8:f2:d2:97:54:0c:d4:b7:0c:d1:a3:
ab:53:b3:a3:33:2a:5d:02:f7:a4:d4:7c:d8:9d:c6:
dd:d7:7f:1e:d4:64:35:c7:02:e4:cb:e9:46:02:e7:
73:72:13:6f:89:76:f6:36:78:41:fe:a5:39:a3:42:
65:fc:dd:ed:24:70:6b:e5:47:46:74:08:9e:ae:56:
d9:dd:f8:c1:fe:0e:74:3b:e5:df:5f:5d:97:50:fd:
e8:83:90:5a:24:db:c1:3c:ce:49:96:5d:70:eb:e6:
09:71:da:83:35:d4:63:ff:72:df:d6:df:2d:fe:61:
13:30:3a:21:6c:95:da:86:0f:be:53:c9:6b:f9:c1:
fc:c6:e8:bb:4f:35:33:41:27:10:51:23:32:72:a1:
29:f2:3e:f4:5e:14:94:fc:76:b9:b1:60:c0:71:3f:
43:e9:a1:50:61:bf:d0:b6:da:47:76:a9:e6:22:1a:
c9:51:c2:83:6e:cb:d4:ca:ae:1a:75:f8:9e:e8:ab:
d3:53:d6:d6:9b:70:75:fd:d8:ce:5d:84:78:45:f4:
c4:8e:c3:96:1a:8e:67:e2:fd:87:73:5a:75:ff:44:
0b:ce:33:4a:3f:93:41:64:57:4c:05:0e:52:b6:65:
92:32:7f:7e:ac:7e:48:1b:f1:27:4e:44:e2:c4:7c:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:93:5F:A0:11:CE:D0:84:3C:31:56:AE:00:59:21:D4:80:B3:64
X509v3 Authority Key Identifier:
keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/LIGTX6ARztCEPDFWrgBZIdSAs2Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.165.160.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:ac:e9:22:6c:96:5f:02:92:e6:23:a9:dc:3a:b6:50:fa:14:
25:bd:91:2d:a5:92:6d:c7:05:e1:ad:e0:1b:ad:9d:5f:8a:56:
5d:be:27:f0:b5:88:25:44:04:ef:89:5e:e3:82:c8:85:97:a1:
1d:2b:0e:6f:f8:da:22:9e:65:d6:7b:df:a8:eb:5c:ef:13:f1:
27:59:b7:40:8f:b2:c4:f8:c5:a2:d0:a9:74:80:10:48:4d:db:
44:84:6d:23:3b:d9:86:e6:58:5f:f5:57:d2:6e:85:62:4e:85:
3a:5f:bf:26:0e:65:e0:c3:cd:78:f4:b2:86:30:2a:04:97:ff:
33:a8:ca:8d:4c:a1:21:45:ee:82:d6:ef:09:a5:bc:14:80:14:
3c:1d:68:ac:ee:59:df:f8:28:12:59:b5:81:2f:b8:fc:91:c6:
a0:6c:7b:12:20:0c:09:1d:ed:89:db:46:2b:6d:ea:27:9e:75:
d2:ac:9a:15:15:ca:a8:56:9d:89:d5:6c:de:5c:12:c2:c8:17:
79:51:73:66:8c:bc:62:cb:be:40:2b:ca:fc:6c:6d:04:12:02:
e8:9a:32:e0:06:cb:77:a0:c4:6a:7d:63:69:43:7c:81:03:5e:
c0:47:96:60:93:0c:dc:d1:64:fb:d9:c3:a0:8c:73:28:77:d5:
6c:32:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:23 2026 by rpki-client