
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2Mhy_HN1SLiLM_QV82qRz3vgyBE.roa
File: 2Mhy_HN1SLiLM_QV82qRz3vgyBE.roa (raw, json)
Hash identifier: dm6M/AKbrMDSAzVsvnXESIDNzSxuPSl7xVXvtx0c+iI=
Subject key identifier: D8:C8:72:FC:73:75:48:B8:8B:33:F4:15:F3:6A:91:CF:7B:E0:C8:11
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0164
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2Mhy_HN1SLiLM_QV82qRz3vgyBE.roa
Signing time: Tue 31 Mar 2026 07:48:09 +0000
ROA not before: Tue 31 Mar 2026 07:48:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 124.40.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D8C872FC737548B88B33F415F36A91CF7BE0C811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:5c:b4:5f:7c:10:5f:8c:26:3d:07:19:1b:
d5:a3:dc:dc:79:93:9a:88:3c:c5:85:c7:b4:d2:8c:
87:95:0c:9e:0e:3a:1c:b6:4b:03:33:c7:e0:57:96:
0d:b1:c1:83:ea:3f:ac:db:8a:fd:6a:45:dd:85:37:
67:e0:ea:ca:73:d7:6f:1f:bb:69:85:71:e6:6a:e3:
3f:16:da:b1:dc:b4:c1:f1:95:52:a3:ae:7b:bc:df:
9e:eb:76:af:66:1c:4e:0a:da:c5:0a:70:c5:d2:f3:
d0:9e:de:c9:b6:ef:b0:24:ea:70:c8:9f:ca:ac:79:
1d:44:21:ba:95:67:a6:d2:f2:d3:c5:ab:5d:e3:06:
7f:23:72:00:f7:9e:d9:c7:0e:0c:78:7f:f3:ab:e4:
04:6d:35:7f:8a:29:05:56:86:84:e1:99:c4:73:e8:
ea:67:7b:a9:c2:31:e4:ae:76:80:39:3b:c2:7b:68:
1a:c6:48:dc:56:bf:07:ae:f7:0e:97:94:ce:9d:37:
6a:eb:60:f7:01:ed:21:81:73:df:f0:d9:1d:81:59:
12:d1:89:6b:0a:8a:ca:ed:4f:11:b6:c6:67:bf:3b:
57:cc:40:08:6c:b2:81:ee:98:0f:33:d7:8f:70:b7:
e5:46:d1:e4:11:e4:b7:eb:c1:4b:e1:1d:83:e2:c5:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:72:FC:73:75:48:B8:8B:33:F4:15:F3:6A:91:CF:7B:E0:C8:11
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2Mhy_HN1SLiLM_QV82qRz3vgyBE.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:b1:70:24:50:41:13:e3:61:50:8a:5e:85:cd:bc:3e:14:d0:
b8:75:95:8d:ed:35:00:3e:b8:2a:f6:1a:0d:a4:a6:18:57:39:
db:37:48:87:10:6a:87:6e:1d:49:05:32:23:b6:9b:3d:26:28:
c9:3e:97:47:a9:28:86:18:eb:08:69:b3:21:17:0c:fc:c4:9c:
79:99:b9:42:10:53:64:9b:3c:26:8e:a3:0d:08:7a:78:25:e0:
ad:8e:85:c3:df:2a:12:a6:5f:ea:e5:59:6c:f4:34:7b:b0:79:
14:10:80:ed:74:58:3b:91:76:68:a6:e0:e0:ce:7f:13:ef:6c:
34:ee:4b:1a:67:5f:d0:f0:5d:b8:4c:93:c7:be:bc:2e:53:b4:
7f:fd:82:be:e9:bc:67:f0:c4:e9:31:1c:2f:2e:9a:95:61:42:
25:92:f1:bc:27:33:5a:2b:d8:5b:46:3f:d8:06:e5:81:ee:f8:
96:93:60:07:22:da:bb:8a:dd:46:da:ec:fc:d7:8e:8d:95:55:
23:6a:59:25:71:8e:8e:88:9a:49:78:88:42:ee:83:8b:59:73:
87:a1:d6:3d:da:08:03:eb:40:a6:cd:1c:74:2a:e8:e3:e1:02:
bc:32:d7:5b:7c:60:95:b0:3b:e3:eb:07:8b:d5:a3:2f:ab:5a:
47:c8:a3:ed
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4Qzg3MkZDNzM3NTQ4
Qjg4QjMzRjQxNUYzNkE5MUNGN0JFMEM4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVJ1y0X3wQX4wmPQcZG9Wj3Nx5k5qIPMWFx7TSjIeVDJ4OOhy2
SwMzx+BXlg2xwYPqP6zbiv1qRd2FN2fg6spz128fu2mFceZq4z8W2rHctMHxlVKj
rnu8357rdq9mHE4K2sUKcMXS89Ce3sm277Ak6nDIn8qseR1EIbqVZ6bS8tPFq13j
Bn8jcgD3ntnHDgx4f/Or5ARtNX+KKQVWhoThmcRz6Opne6nCMeSudoA5O8J7aBrG
SNxWvweu9w6XlM6dN2rrYPcB7SGBc9/w2R2BWRLRiWsKisrtTxG2xme/O1fMQAhs
soHumA8z149wt+VG0eQR5LfrwUvhHYPixS8XAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU2Mhy/HN1SLiLM/QV82qRz3vgyBEwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC8yTWh5X0hOMVNMaUxNX1FWODJxUnozdmd5QkUucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFfCggMA0GCSqGSIb3DQEBCwUA
A4IBAQB+sXAkUEET42FQil6Fzbw+FNC4dZWN7TUAPrgq9hoNpKYYVznbN0iHEGqH
bh1JBTIjtps9JijJPpdHqSiGGOsIabMhFwz8xJx5mblCEFNkmzwmjqMNCHp4JeCt
joXD3yoSpl/q5Vls9DR7sHkUEIDtdFg7kXZopuDgzn8T72w07ksaZ1/Q8F24TJPH
vrwuU7R//YK+6bxn8MTpMRwvLpqVYUIlkvG8JzNaK9hbRj/YBuWB7viWk2AHItq7
it1G2uz8146NlVUjalklcY6OiJpJeIhC7oOLWXOHodY92ggD60CmzRx0Kujj4QK8
MtdbfGCVsDvj6weL1aMvq1pHyKPt
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client