
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
File: LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa (raw, json)
Hash identifier: A5Y2ercycOCD04LrzpYnvmJ3BtlZZu+Wqe9CtD6Ah1I=
Subject key identifier: 2D:04:7E:59:AC:5D:40:D8:37:90:7C:08:6E:CD:12:45:07:75:AB:1B
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 59
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
Signing time: Fri 01 Aug 2025 01:29:12 +0000
ROA not before: Fri 01 Aug 2025 01:29:12 +0000
ROA not after: Thu 30 Jul 2026 06:29:08 +0000
asID: 23805
IP address blocks: 219.100.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Aug 1 01:29:12 2025 GMT
Not After : Jul 30 06:29:08 2026 GMT
Subject: CN=2D047E59AC5D40D837907C086ECD12450775AB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:a7:20:a0:f2:c4:ee:79:82:d7:16:72:10:
76:ee:fa:5c:e0:47:40:e8:1a:7b:42:3d:f0:3e:aa:
ea:a7:2b:73:39:0a:03:a9:20:c4:6a:30:6e:db:4a:
92:4a:92:fc:9e:59:9a:3e:72:dc:79:9a:94:dd:2f:
d1:54:70:0e:2c:46:6e:c9:c5:71:28:b5:90:49:bf:
ff:50:f0:42:1b:c0:5f:1b:87:88:ed:89:e8:45:eb:
35:c6:4b:7e:8e:15:4a:d5:e6:91:42:26:46:20:b9:
48:4a:19:c0:3c:85:21:68:af:3b:de:9c:da:c3:65:
e0:8e:31:f9:f9:45:8b:63:dd:ab:6a:40:19:24:ca:
fc:71:08:e0:3a:5f:8f:50:94:f5:55:fa:4c:e8:df:
ee:d8:46:60:3d:2c:7d:d8:34:9c:4b:2d:77:50:8c:
c6:aa:49:85:22:73:cc:02:15:5a:c6:a6:75:03:9c:
32:79:9f:79:a7:02:a7:78:f9:fc:db:79:2b:fc:aa:
98:df:6d:49:35:be:02:95:2f:0a:fe:3d:ec:a5:3b:
a4:13:6e:33:44:33:cc:c7:2f:2a:c1:4c:2e:9c:ff:
a7:b5:3f:26:dd:79:f0:e9:e3:7e:b8:19:60:51:39:
58:6d:65:65:04:f1:a9:82:61:15:47:a7:da:b6:2c:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:7E:59:AC:5D:40:D8:37:90:7C:08:6E:CD:12:45:07:75:AB:1B
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b8:0f:44:b0:ee:da:fa:94:5b:fd:40:fc:fb:f4:38:30:45:
7a:70:a1:c1:f0:28:22:8c:ea:40:f3:d5:72:79:6f:50:e6:06:
dd:67:fc:19:73:f7:92:76:6d:39:29:6b:f6:9c:f8:66:0e:b7:
ea:dc:79:31:45:26:68:48:40:89:a2:59:ce:34:fc:1c:4e:54:
4b:59:91:46:e9:9a:58:8a:d3:3b:54:b8:f6:8e:6c:6b:4f:18:
a1:36:3f:3a:07:4d:9b:df:d2:d0:e4:ed:27:7f:e8:a7:8e:42:
53:b8:09:d7:1b:d4:fb:43:81:f4:b1:e2:fb:ae:ac:8a:71:de:
73:ef:b3:7b:0d:40:e4:a8:bf:b6:cf:c6:e2:5e:c8:1d:06:ed:
5f:eb:ee:c1:82:51:51:bb:05:05:9e:bf:52:66:6e:20:ec:5d:
ea:57:19:ba:11:2f:41:71:fa:31:1e:ba:7d:33:56:60:d4:8a:
dd:9f:a7:d6:5f:99:3d:ef:db:49:f1:df:61:fd:a9:3b:e3:a4:
72:ec:6f:cc:8e:7d:ef:c7:33:51:5e:32:16:81:64:9f:ca:47:
18:cb:66:35:fd:60:1c:50:48:a3:5f:43:6f:06:97:14:47:61:
c2:76:63:c6:87:4b:a5:cf:42:7c:66:19:84:6b:ed:f2:a2:06:
2f:8d:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:15 2025 by rpki-client