
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa
File: lzBKzRcUeQd_pdVF0007EPJNoKE.roa (raw, json)
Hash identifier: Yccps3I0qaDpTzpKK1vwBnk62rNO+AlYGNbWlZQlSa8=
Subject key identifier: 97:30:4A:CD:17:14:79:07:7F:A5:D5:45:D3:4D:3B:10:F2:4D:A0:A1
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 73
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa
Signing time: Thu 05 Nov 2026 01:22:29 +0000
ROA not before: Thu 05 Nov 2026 01:22:29 +0000
ROA not after: Fri 15 Oct 2027 01:30:02 +0000
asID: 2514
IP address blocks: 218.228.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: Nov 5 01:22:29 2026 GMT
Not After : Oct 15 01:30:02 2027 GMT
Subject: CN=97304ACD171479077FA5D545D34D3B10F24DA0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:8a:3c:16:d5:8d:8f:19:d4:a5:7c:24:8e:
ed:ab:90:2c:d8:65:71:4d:6e:28:68:5b:b3:d2:70:
eb:8a:f6:1b:e6:8b:9b:d3:9b:94:dc:6b:0e:ac:1f:
37:f2:eb:77:62:ef:36:6f:84:45:70:f3:a1:0b:44:
b3:e4:cb:b2:d9:29:2e:55:31:4a:41:80:c4:c6:a6:
e2:67:e5:f3:b2:41:5f:a8:d6:d0:50:1d:dd:3f:a5:
5c:18:37:83:9a:44:52:0b:0b:df:0a:c9:0f:bc:67:
b4:fd:8f:e6:a4:21:e6:1d:14:02:b2:c7:bb:15:c0:
39:71:2f:ff:3e:bb:7a:00:ea:01:4f:14:43:19:c4:
45:10:9c:1a:79:2c:92:ba:ff:90:82:2f:02:1b:2d:
34:e3:91:20:fd:c9:ba:4a:e8:94:15:18:20:b3:9f:
46:34:46:64:05:29:0d:49:8f:9e:54:ac:72:74:cb:
7c:a1:a5:90:6d:24:85:40:0f:e7:2e:d4:2d:bb:b1:
d4:cd:33:46:55:3b:7d:79:df:58:39:9e:c9:88:97:
db:cd:c6:ae:ff:b5:70:f7:51:0f:01:a7:34:2b:61:
ff:50:9e:e7:5f:7a:05:7a:eb:17:44:17:a0:30:0b:
28:9d:1e:d2:8e:11:bc:46:31:a3:8b:87:0f:f2:de:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:4A:CD:17:14:79:07:7F:A5:D5:45:D3:4D:3B:10:F2:4D:A0:A1
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa
sbgp-ipAddrBlock: critical
IPv4:
218.228.21.0/24
Signature Algorithm: sha256WithRSAEncryption
50:44:eb:1d:fc:b7:bc:c4:39:e8:47:69:62:14:7f:14:e0:f7:
62:4c:c4:04:18:19:f1:0f:18:7d:1d:0f:d8:b0:61:46:fc:a2:
c5:a0:71:ac:ae:dd:15:01:cf:05:9e:62:0d:ff:b3:29:45:b2:
ad:04:f6:4e:62:96:7b:b5:36:a3:57:72:30:cf:93:78:20:01:
51:68:6f:d9:b7:28:4e:c7:44:74:93:b5:48:8f:f7:2f:e9:6b:
d3:01:8b:12:30:13:38:24:16:25:ee:bb:8c:79:26:c9:39:83:
8c:f6:64:18:e0:e9:6e:e5:17:2e:9d:d1:69:ba:8a:06:3f:95:
5a:ee:5e:25:2c:04:07:32:f6:a1:69:35:8f:3d:5c:21:cd:a7:
21:0e:b2:ac:d9:57:b5:51:9c:bc:c5:89:c2:38:5a:43:dc:2a:
00:e4:2a:22:9b:9f:db:16:7c:c7:d2:ae:1d:24:33:c6:77:ce:
8a:82:8b:80:88:bd:a3:c8:2c:96:d3:49:da:d9:07:67:26:95:
7e:76:90:e3:06:76:a7:18:87:d2:c9:79:ce:33:77:66:1e:70:
da:eb:a8:d1:cf:dd:09:1d:c6:ca:31:f5:15:c5:b6:54:a1:23:
96:ca:2e:cf:2a:27:90:56:55:d6:ce:bd:b9:51:cc:b5:e5:90:
f0:72:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:01 2026 by rpki-client