
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30353/mrqwD7xWIc0pWDc-wmSIikyUEjQ.roa
File: mrqwD7xWIc0pWDc-wmSIikyUEjQ.roa (raw, json)
Hash identifier: a++13Br7JGaEQznvWWauiglydatWmIITS9dbZocmG0A=
Subject key identifier: 9A:BA:B0:0F:BC:56:21:CD:29:58:37:3E:C2:64:88:8A:4C:94:12:34
Certificate issuer: /CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64
Certificate serial: 07
Authority key identifier: AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/mrqwD7xWIc0pWDc-wmSIikyUEjQ.roa
Signing time: Tue 31 Mar 2026 08:48:10 +0000
ROA not before: Tue 31 Mar 2026 08:48:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63781
IP address blocks: 2405:5340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64
Validity
Not Before: Mar 31 08:48:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9ABAB00FBC5621CD2958373EC264888A4C941234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:e1:00:0b:54:fd:ce:c9:2b:64:cc:25:34:
8d:bb:49:92:b5:aa:2b:38:ad:10:d7:89:b6:6e:f4:
04:29:ce:28:19:f3:81:19:15:f9:a4:47:c1:b4:2b:
9b:ea:62:bf:e3:e6:89:ab:3f:e6:63:a7:d2:52:68:
f9:83:8d:8c:ef:c4:12:fc:8b:1b:e0:d2:70:92:f8:
9e:94:3a:dc:6b:30:9f:76:2d:eb:3b:0a:7a:77:97:
7c:98:00:01:43:a9:5c:2d:96:cb:ea:bd:71:6a:bb:
48:97:bd:9a:14:6c:26:b7:e7:ed:40:40:c6:2d:3d:
39:8d:fe:88:aa:b0:a9:e4:9b:27:f5:26:bc:44:89:
22:bd:0e:88:ae:6e:a8:2e:dc:30:13:e9:cc:fd:d2:
49:24:7c:3a:35:e4:41:3a:ef:4a:1e:f6:0c:b5:28:
81:32:14:e6:56:fc:c0:df:7b:91:f9:74:86:a4:d4:
54:4a:cc:a5:4d:7e:61:9a:df:e6:c0:ab:bb:8e:68:
91:62:00:37:39:af:67:c7:b6:45:08:93:72:51:93:
90:dd:03:b9:bf:77:f2:46:7d:5d:34:2b:2a:52:f6:
fa:d9:11:7c:ec:4b:fd:11:5a:89:e3:62:08:6d:db:
6e:ba:eb:36:21:43:91:d3:6e:e7:31:d9:a1:7b:33:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:B0:0F:BC:56:21:CD:29:58:37:3E:C2:64:88:8A:4C:94:12:34
X509v3 Authority Key Identifier:
keyid:AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/mrqwD7xWIc0pWDc-wmSIikyUEjQ.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:5340::/32
Signature Algorithm: sha256WithRSAEncryption
14:85:f3:d1:37:aa:03:56:a3:9c:9d:4d:45:6c:19:c4:cc:84:
0e:c3:8f:5c:f5:ff:e6:26:51:ef:46:ba:81:59:8d:1d:69:e8:
85:24:5c:f9:43:c5:af:6b:6d:e3:78:aa:53:78:5d:f5:1e:c5:
1a:13:ab:2b:89:b1:15:94:fa:5f:6a:d3:65:54:35:e8:44:b4:
df:71:81:1c:ce:99:b9:1c:22:9b:06:f0:2c:32:90:f8:a4:c9:
12:be:16:70:6b:ec:78:6a:64:ea:93:3f:19:a0:10:82:d4:94:
08:04:32:75:26:04:f5:2c:44:22:1c:ee:03:eb:27:50:16:b6:
72:bb:90:ef:5f:1b:77:e2:75:0c:89:35:1b:0b:51:27:ab:1e:
0a:16:13:87:01:a8:a4:7d:81:35:24:9a:3f:17:72:f4:26:c4:
79:6c:4e:7f:21:af:20:26:78:64:a7:89:bb:93:48:de:e6:c4:
81:35:06:c3:36:cf:20:56:1f:ef:8a:38:d9:37:16:94:08:20:
cb:8d:0c:d7:56:b2:3f:cc:cc:3d:71:ff:67:8f:73:c2:6c:e0:
3e:9a:95:15:80:69:92:88:b6:2b:4a:bb:0c:f4:c5:88:66:5b:
c8:49:ff:4f:f7:98:39:0e:7e:8f:e6:69:b1:d2:67:6e:fe:f1:
1f:f4:60:b6
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDNF
Q0JDNDI4RkUxNDdFOEEwQkIyRTY0NDg1MDBEMzExMkFBRjY0MB4XDTI2MDMzMTA4
NDgxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUFCQUIwMEZCQzU2MjFD
RDI5NTgzNzNFQzI2NDg4OEE0Qzk0MTIzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM0S4QALVP3OyStkzCU0jbtJkrWqKzitENeJtm70BCnOKBnzgRkV
+aRHwbQrm+piv+Pmias/5mOn0lJo+YONjO/EEvyLG+DScJL4npQ63Gswn3Yt6zsK
eneXfJgAAUOpXC2Wy+q9cWq7SJe9mhRsJrfn7UBAxi09OY3+iKqwqeSbJ/UmvESJ
Ir0OiK5uqC7cMBPpzP3SSSR8OjXkQTrvSh72DLUogTIU5lb8wN97kfl0hqTUVErM
pU1+YZrf5sCru45okWIANzmvZ8e2RQiTclGTkN0Dub938kZ9XTQrKlL2+tkRfOxL
/RFaieNiCG3bbrrrNiFDkdNu5zHZoXszducCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSaurAPvFYhzSlYNz7CZIiKTJQSNDAfBgNVHSMEGDAWgBStPsvEKP4UfooLsuZE
hQDTESqvZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNTMvclQ3THhDai1GSDZLQzdMbVJJVUEweEVxcjJRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvclQ3THhDai1GSDZLQzdMbVJJVUEw
eEVxcjJRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzUzL21ycXdEN3hXSWMwcFdEYy13bVNJaWt5VUVqUS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBVNAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUhfPRN6oDVqOcnU1FbBnEzIQOw49c9f/mJlHvRrqBWY0daeiFJFz5Q8Wv
a23jeKpTeF31HsUaE6sribEVlPpfatNlVDXoRLTfcYEczpm5HCKbBvAsMpD4pMkS
vhZwa+x4amTqkz8ZoBCC1JQIBDJ1JgT1LEQiHO4D6ydQFrZyu5DvXxt34nUMiTUb
C1Enqx4KFhOHAaikfYE1JJo/F3L0JsR5bE5/Ia8gJnhkp4m7k0je5sSBNQbDNs8g
Vh/vijjZNxaUCCDLjQzXVrI/zMw9cf9nj3PCbOA+mpUVgGmSiLYrSrsM9MWIZlvI
Sf9P95g5Dn6P5mmx0mdu/vEf9GC2
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:10 2026 by rpki-client