
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa
File: LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa (raw, json)
Hash identifier: E8b6/oHsZ3N6i3s6fhNzAxlR5QZ07SxqHkAIGUXMLnc=
Subject key identifier: 2E:0B:14:C7:22:25:1E:88:98:E0:A3:E4:E0:12:71:87:A5:05:C2:FB
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 41
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa
Signing time: Tue 31 Mar 2026 08:34:36 +0000
ROA not before: Tue 31 Mar 2026 08:34:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18121
IP address blocks: 180.94.208.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Mar 31 08:34:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2E0B14C722251E8898E0A3E4E0127187A505C2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:e9:e7:c8:b4:6f:7d:20:85:72:c6:10:02:
b3:66:e2:2a:42:8a:5c:85:22:dc:85:0c:a9:78:cf:
36:35:40:d1:e5:b6:81:68:3e:e4:91:f2:10:a8:14:
6c:96:b6:97:37:05:5a:ad:ac:37:a1:9b:ac:42:a2:
c7:e8:64:fe:ad:0b:00:b7:b6:e4:3f:2c:ee:4d:6c:
5f:bb:2d:50:25:6f:2d:46:72:c2:30:66:4e:55:d9:
d1:6c:50:6d:80:1b:69:42:cb:f0:03:bd:39:1c:28:
b5:44:5f:bf:b1:90:7c:03:1b:55:cc:8e:5e:67:ae:
33:8a:bd:2e:9e:87:b5:b6:43:75:f7:ca:97:46:d0:
59:54:d3:77:07:b7:1d:a7:b4:90:26:3b:a9:6c:5c:
fa:bb:ff:af:af:fe:09:1f:5d:b7:e2:61:3f:0c:8c:
98:f5:d8:21:21:41:df:2e:72:b4:22:43:b0:90:6c:
3f:36:27:91:fa:f3:20:1e:af:99:e9:29:8c:19:c5:
a3:db:62:90:4c:ee:49:83:0c:ee:d0:94:13:73:a3:
04:77:fb:4c:fd:4c:d2:eb:fe:14:6d:3f:b7:49:8f:
1b:8d:99:ff:23:41:d8:0e:6b:7b:d6:b6:fa:a9:84:
c2:90:ac:86:34:54:68:43:3d:63:bf:40:5a:92:f7:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:14:C7:22:25:1E:88:98:E0:A3:E4:E0:12:71:87:A5:05:C2:FB
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa
sbgp-ipAddrBlock: critical
IPv4:
180.94.208.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:d0:fb:e8:8f:79:e9:17:18:53:61:2f:87:66:af:f5:c1:0b:
d5:0b:4b:07:f2:f6:30:51:89:db:04:5c:07:8f:2e:21:ef:c3:
ff:b9:06:72:3f:6b:4f:85:c9:ec:7d:5a:cc:19:15:ec:b1:a9:
a5:b5:83:3f:ed:f5:e3:85:7f:ba:ee:e0:57:2f:c6:7b:d9:ea:
d2:7a:cb:ed:e5:1d:2d:ae:a4:54:70:30:88:60:31:b8:7e:0a:
79:c4:0e:97:87:64:59:3e:2d:c1:9b:b0:fb:c5:9c:58:86:9c:
b2:32:7f:da:25:c1:24:1a:84:f4:bc:f3:ba:60:92:2f:42:36:
b2:d6:2b:0f:21:79:85:53:a9:28:4f:3f:51:2b:20:e3:79:67:
12:18:f7:5f:2e:d9:3c:76:4b:e5:55:17:bd:cf:e5:e7:c0:e5:
c6:a8:59:f3:1c:39:66:d4:28:d4:89:0c:2d:e0:93:cb:c1:cd:
6a:9d:c0:9b:93:a6:5c:29:40:ee:e7:ff:2b:2a:bd:ba:84:87:
18:1b:5d:3b:36:a8:15:ef:96:b5:eb:b8:9c:30:73:dd:c3:5a:
9c:8b:36:81:dc:fd:f4:a1:0a:66:8a:98:1b:48:67:3a:b7:fe:
d3:28:9a:3e:af:06:3c:ef:dd:fe:98:f7:4a:87:2c:ad:d2:be:
0a:53:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:18 2026 by rpki-client