
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
File: mThXovw0FMYG1ywocRw0CCI-0DM.roa (raw, json)
Hash identifier: SjGPj07DN9FmT24vB9bZId8ZSIzWVZfwBu6HSzG2Q34=
Subject key identifier: 99:38:57:A2:FC:34:14:C6:06:D7:2C:28:71:1C:34:08:22:3E:D0:33
Certificate issuer: /CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
Certificate serial: 02
Authority key identifier: D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
Signing time: Thu 29 Jan 2026 15:36:08 +0000
ROA not before: Thu 29 Jan 2026 15:36:08 +0000
ROA not after: Fri 29 Jan 2027 14:53:57 +0000
asID: 37906
IP address blocks: 2402:d700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
Validity
Not Before: Jan 29 15:36:08 2026 GMT
Not After : Jan 29 14:53:57 2027 GMT
Subject: CN=993857A2FC3414C606D72C28711C3408223ED033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:bd:fd:b0:d2:cc:04:1c:5e:68:fe:fa:5d:
6c:25:29:f8:1e:4e:1f:8d:cd:9b:ea:d0:3b:38:ab:
65:4e:da:4f:a7:41:6a:09:db:42:57:40:e5:83:e2:
6d:42:90:45:af:93:0d:e0:9f:8b:eb:ff:98:bc:b2:
16:12:01:e4:1c:44:95:2c:34:06:df:8c:33:64:fc:
07:82:89:09:3d:91:22:c6:89:b8:da:45:0b:1d:3e:
f3:8a:a1:fa:19:6b:24:27:dc:a6:32:64:bc:9a:a7:
f3:d1:d6:38:a7:97:7c:02:26:6e:c2:81:e7:75:7a:
76:ac:69:c6:21:08:34:07:a8:db:9e:dd:55:5e:28:
0b:68:5f:35:7c:df:e2:0c:c3:9c:05:3d:2a:ef:9e:
ce:49:74:5f:4b:b0:36:a7:78:d5:ef:9b:c7:55:f8:
ae:7e:74:68:ad:bc:78:5d:2d:cf:4c:82:09:54:e7:
95:bb:97:c7:0a:2c:74:02:2d:63:57:19:d9:10:f8:
70:72:ca:0a:11:1c:1d:fe:a0:b0:00:70:c3:a4:5e:
b2:71:61:41:0c:5d:06:16:f0:0b:e1:32:d0:71:49:
91:08:8f:35:10:bf:cb:a8:8a:0c:19:ea:56:b4:af:
a3:0a:c8:90:ae:49:06:68:5a:d1:c6:9c:9d:83:cb:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:57:A2:FC:34:14:C6:06:D7:2C:28:71:1C:34:08:22:3E:D0:33
X509v3 Authority Key Identifier:
keyid:D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:d700::/32
Signature Algorithm: sha256WithRSAEncryption
60:6e:7e:42:d4:43:c9:eb:3b:14:2e:8d:87:5f:4a:0e:00:b9:
e9:1b:c7:88:1a:f6:b3:42:74:b8:00:26:9a:f5:43:7c:4f:16:
dc:7a:be:26:99:85:2e:98:f8:a2:1e:22:30:32:3d:50:37:6a:
b5:23:b7:0b:3b:bc:8f:32:cd:fc:7c:41:49:77:a1:d4:90:ae:
3c:25:28:c9:b4:73:6c:32:c9:5e:f7:bf:6b:cb:f6:f3:92:85:
34:db:a5:c3:57:2d:24:e0:bc:18:b7:10:0f:1f:46:26:56:fe:
8d:19:15:87:01:84:f1:cd:a4:ba:71:e2:a6:ff:66:c4:6a:08:
d9:77:00:85:72:97:c4:9a:93:be:98:f3:b2:f6:ed:b1:21:e9:
b4:8d:55:d9:f0:b5:dc:17:92:14:4b:ed:63:18:69:0f:27:e5:
49:81:8c:d1:f9:e6:c3:f5:db:33:73:37:dc:51:93:e6:91:1f:
86:e7:1e:9b:cc:f0:d2:2a:47:1d:cd:71:f4:a1:07:65:e8:d4:
5b:0b:b3:a2:9e:19:f2:81:cc:3c:0d:13:e4:b3:08:5c:ba:00:
57:50:b6:8f:13:74:fa:4b:8c:8b:0a:8e:4f:25:80:c0:a8:bb:
1b:57:94:9e:56:3f:0d:06:ce:44:9b:eb:7c:9d:5a:8e:f0:19:
88:80:9c:97
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEE3
RTNFNjZFRjgzMEY2MkVEOTRBQjdBNTRBODg4NDRGMUMwQTBCMB4XDTI2MDEyOTE1
MzYwOFoXDTI3MDEyOTE0NTM1N1owMzExMC8GA1UEAxMoOTkzODU3QTJGQzM0MTRD
NjA2RDcyQzI4NzExQzM0MDgyMjNFRDAzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM28vf2w0swEHF5o/vpdbCUp+B5OH43Nm+rQOzirZU7aT6dBagnb
QldA5YPibUKQRa+TDeCfi+v/mLyyFhIB5BxElSw0Bt+MM2T8B4KJCT2RIsaJuNpF
Cx0+84qh+hlrJCfcpjJkvJqn89HWOKeXfAImbsKB53V6dqxpxiEINAeo257dVV4o
C2hfNXzf4gzDnAU9Ku+ezkl0X0uwNqd41e+bx1X4rn50aK28eF0tz0yCCVTnlbuX
xwosdAItY1cZ2RD4cHLKChEcHf6gsABww6ResnFhQQxdBhbwC+Ey0HFJkQiPNRC/
y6iKDBnqVrSvowrIkK5JBmha0cacnYPLWQsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSZOFei/DQUxgbXLChxHDQIIj7QMzAfBgNVHSMEGDAWgBTQp+Pmbvgw9i7ZSrel
SoiETxwKCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMjEvMEtmajVtNzRNUFl1MlVxM3BVcUloRThjQ2dzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMEtmajVtNzRNUFl1MlVxM3BVcUlo
RThjQ2dzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjIxL21UaFhvdncwRk1ZRzF5d29jUncwQ0NJLTBETS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAtcAMA0GCSqGSIb3DQEBCwUAA4IBAQBgbn5C1EPJ6zsULo2HX0oO
ALnpG8eIGvazQnS4ACaa9UN8Txbcer4mmYUumPiiHiIwMj1QN2q1I7cLO7yPMs38
fEFJd6HUkK48JSjJtHNsMsle979ry/bzkoU026XDVy0k4LwYtxAPH0YmVv6NGRWH
AYTxzaS6ceKm/2bEagjZdwCFcpfEmpO+mPOy9u2xIem0jVXZ8LXcF5IUS+1jGGkP
J+VJgYzR+ebD9dszczfcUZPmkR+G5x6bzPDSKkcdzXH0oQdl6NRbC7Oinhnygcw8
DRPkswhcugBXULaPE3T6S4yLCo5PJYDAqLsbV5SeVj8NBs5Em+t8nVqO8BmIgJyX
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:57 2026 by rpki-client