
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
File: d2yUWW2M_gbGmM9eftlZkmwtcO4.roa (raw, json)
Hash identifier: 1Gs4K2PYmgS4SkybihFAovL3Klv2FbW7NZcikb39/Xs=
Subject key identifier: 77:6C:94:59:6D:8C:FE:06:C6:98:CF:5E:7E:D9:59:92:6C:2D:70:EE
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 73
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
Signing time: Sun 01 Feb 2026 01:35:58 +0000
ROA not before: Sun 01 Feb 2026 01:35:58 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 219.101.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:58 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=776C94596D8CFE06C698CF5E7ED959926C2D70EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:bd:88:ec:84:2a:93:ed:da:59:13:17:c1:
88:66:89:15:28:21:af:cc:56:c8:67:6b:27:7e:3d:
9a:13:d8:d7:5a:af:6d:cc:4a:b2:28:38:27:35:8c:
f2:4d:fd:f3:3f:b0:3b:9a:5e:9f:37:d7:1d:36:05:
b3:5b:cc:83:d9:68:7d:aa:cc:f9:9a:65:92:d5:cb:
a7:19:c8:1a:45:9b:12:15:fb:e6:bf:b4:c9:a3:43:
fa:7a:b3:45:41:1a:15:d7:c7:c7:71:50:1a:b0:86:
be:89:6c:21:59:1e:de:a8:08:b9:98:a3:45:66:cf:
4c:b9:71:0c:05:60:1c:cb:dd:90:25:e6:74:5e:20:
f7:d9:63:75:f8:f4:5a:01:03:ae:09:b1:47:bc:6b:
aa:05:ac:39:95:99:75:6d:13:93:2d:e6:17:cd:eb:
6f:23:ea:9e:e9:54:a4:d4:3a:df:2b:47:8f:4b:0c:
31:7e:60:35:a0:3a:4f:17:20:0e:cf:4e:14:76:49:
22:ff:0e:73:96:c4:2d:70:95:3e:22:e4:b4:d4:a5:
3d:5f:5c:5a:12:3d:b2:8c:8a:0f:0b:24:95:4f:90:
8d:05:3e:f7:16:64:f7:a4:83:d2:8d:0d:1a:c1:c0:
d0:65:37:e4:aa:e0:7b:ba:3c:2a:f9:ad:a0:8d:9a:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:94:59:6D:8C:FE:06:C6:98:CF:5E:7E:D9:59:92:6C:2D:70:EE
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.101.0.0/19
Signature Algorithm: sha256WithRSAEncryption
75:29:da:53:d1:79:bf:4f:06:aa:18:4f:22:de:9d:aa:43:7c:
97:82:33:23:3a:5a:53:64:40:37:7b:db:ac:b5:f4:05:68:7e:
b9:60:06:d1:11:83:a3:5d:3d:4e:23:18:2a:45:bd:0d:24:b8:
11:e7:0f:18:40:5d:5c:0e:dc:8d:a9:aa:1b:05:e3:85:77:4b:
43:38:21:40:91:bc:bd:e8:86:3a:53:d8:40:24:11:7b:9f:77:
cd:d4:ad:79:f7:21:34:41:11:e9:5d:95:8d:bd:b1:55:cd:88:
7b:f9:a3:c8:1d:1e:3c:2e:aa:19:b2:ed:5e:91:9a:ce:3e:0b:
ca:83:ab:61:84:d5:12:8c:2a:2f:73:37:49:91:75:16:c8:d8:
c7:1f:27:7d:99:1e:18:05:78:aa:44:16:a0:8c:8b:91:d9:00:
df:9e:a3:53:e1:09:37:9e:7f:33:ff:9a:24:ee:6b:2c:ae:11:
0e:e8:29:78:99:5c:a4:f0:67:38:a7:3d:99:06:1e:e9:f1:79:
42:59:a9:63:c1:fa:aa:11:fa:9c:4d:55:5b:f0:35:00:34:57:
32:27:5b:26:d5:f0:43:43:82:8c:3f:e4:43:f1:c5:cc:d6:9d:
4a:e2:13:00:b4:d3:cc:40:b2:f7:38:71:d9:a3:72:d0:0d:4f:
e3:b6:8d:dd
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx
MzU1OFoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNzc2Qzk0NTk2RDhDRkUw
NkM2OThDRjVFN0VEOTU5OTI2QzJENzBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJwUvYjshCqT7dpZExfBiGaJFSghr8xWyGdrJ349mhPY11qvbcxK
sig4JzWM8k398z+wO5penzfXHTYFs1vMg9lofarM+ZplktXLpxnIGkWbEhX75r+0
yaND+nqzRUEaFdfHx3FQGrCGvolsIVke3qgIuZijRWbPTLlxDAVgHMvdkCXmdF4g
99ljdfj0WgEDrgmxR7xrqgWsOZWZdW0Tky3mF83rbyPqnulUpNQ63ytHj0sMMX5g
NaA6TxcgDs9OFHZJIv8Oc5bELXCVPiLktNSlPV9cWhI9soyKDwsklU+QjQU+9xZk
96SD0o0NGsHA0GU35Krge7o8KvmtoI2amjcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBR3bJRZbYz+BsaYz15+2VmSbC1w7jAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL2QyeVVXVzJNX2diR21NOWVmdGxaa213dGNPNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXbZQAwDQYJKoZIhvcNAQELBQADggEBAHUp2lPReb9PBqoYTyLenapD
fJeCMyM6WlNkQDd726y19AVofrlgBtERg6NdPU4jGCpFvQ0kuBHnDxhAXVwO3I2p
qhsF44V3S0M4IUCRvL3ohjpT2EAkEXufd83UrXn3ITRBEeldlY29sVXNiHv5o8gd
Hjwuqhmy7V6Rms4+C8qDq2GE1RKMKi9zN0mRdRbI2McfJ32ZHhgFeKpEFqCMi5HZ
AN+eo1PhCTeefzP/miTuayyuEQ7oKXiZXKTwZzinPZkGHunxeUJZqWPB+qoR+pxN
VVvwNQA0VzInWybV8ENDgow/5EPxxczWnUriEwC008xAsvc4cdmjctANT+O2jd0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:19:33 2026 by rpki-client