
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
File: zKIUaZnlIyXSx3w7Z64n5sarKvo.roa (raw, json)
Hash identifier: erWbHkCBjw+FzGUuZ5zip3fQSza7gObgTbJtyZsgSoE=
Subject key identifier: CC:A2:14:69:99:E5:23:25:D2:C7:7C:3B:67:AE:27:E6:C6:AB:2A:FA
Certificate issuer: /CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
Certificate serial: 3A
Authority key identifier: 93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
Signing time: Sun 01 Feb 2026 01:29:57 +0000
ROA not before: Sun 01 Feb 2026 01:29:57 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 10019
IP address blocks: 2401:3200::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
Validity
Not Before: Feb 1 01:29:57 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=CCA2146999E52325D2C77C3B67AE27E6C6AB2AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:25:84:2c:03:91:e5:21:a6:52:3a:e6:47:
7c:32:b8:07:a5:b8:1f:e6:5d:cd:4b:f0:14:59:fa:
58:39:bd:2b:7d:5f:08:00:63:66:a0:57:71:eb:c8:
69:a5:62:3f:78:2b:14:f2:1a:27:db:0d:24:2c:10:
c4:f7:f7:7a:94:f3:4c:38:fb:fb:3c:c4:59:e4:fe:
ab:63:6f:55:9c:72:5b:ce:bc:fe:82:7e:d5:5f:f2:
98:61:11:d1:fc:02:f8:ae:10:65:0a:bb:00:e8:ab:
1f:0e:2b:ad:d9:d1:4f:83:c6:67:ec:02:ab:58:a4:
0a:11:7a:9b:19:e2:bf:31:27:c6:b9:91:1c:a4:5e:
ba:82:c3:39:ee:2a:17:6d:99:fd:e0:41:71:e1:7c:
83:05:f4:62:2a:a3:73:b9:0f:c6:68:4d:65:96:99:
d3:b2:80:40:a0:14:22:c1:c8:8f:67:a4:f0:3b:39:
25:32:99:8d:ac:a4:9a:4b:a1:fa:10:5b:56:06:9c:
14:44:5d:5b:58:a7:54:71:45:c8:4c:69:b3:e1:0b:
c5:e3:7d:6f:9b:7e:67:94:54:7a:a5:9a:7a:79:f3:
06:5c:63:04:59:f6:9f:58:96:8d:13:31:ad:fa:0f:
6c:62:5f:99:e9:83:7c:e0:d4:b4:a4:c1:e4:54:d1:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:14:69:99:E5:23:25:D2:C7:7C:3B:67:AE:27:E6:C6:AB:2A:FA
X509v3 Authority Key Identifier:
keyid:93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3200::/32
Signature Algorithm: sha256WithRSAEncryption
54:a3:e5:08:94:70:16:b9:b7:13:27:ba:c9:93:c4:d2:b7:a8:
9a:03:21:77:32:43:80:33:71:47:af:a0:6f:e2:42:b1:1c:71:
e1:1f:a9:d4:90:9c:73:89:98:1c:fb:72:22:45:1a:57:63:8f:
3b:69:4e:a3:03:23:08:ca:25:94:47:91:6b:15:56:38:90:f7:
58:d5:da:c5:2f:d1:85:ab:06:7f:7b:25:9c:86:92:6b:6b:11:
e7:7e:af:7b:80:eb:5b:df:63:c8:a0:52:3f:53:ca:f5:34:8c:
32:73:39:e5:f8:cc:2d:22:2d:d9:41:44:49:4a:99:e2:68:eb:
ff:a8:26:41:f9:62:4a:1f:8f:35:60:a6:0e:9d:fc:d2:e5:50:
d8:8a:dd:5b:6c:c9:e7:cb:16:71:b2:b5:df:47:34:19:90:6a:
03:55:7a:eb:2e:5c:76:ab:73:9e:a1:a8:12:d3:5b:22:8b:73:
80:d1:1c:11:e6:4c:62:a4:7e:d0:c6:22:68:67:ca:64:32:b6:
c7:82:ed:1a:af:ac:ea:aa:b6:78:4d:07:8e:2b:f7:09:0b:49:
60:d8:7e:db:5e:f0:65:e6:a9:9f:fa:72:d6:a8:bc:d9:be:01:
8d:b7:a1:3d:de:de:69:63:fa:e0:41:3a:bd:3c:d9:59:84:c5:
69:c1:ad:42
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0ZF
QjNCNkM1RjgzOTQwM0M1N0QwNDM1NDQzN0JDQUVFN0IzOTkxMB4XDTI2MDIwMTAx
Mjk1N1oXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQ0NBMjE0Njk5OUU1MjMy
NUQyQzc3QzNCNjdBRTI3RTZDNkFCMkFGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ3MJYQsA5HlIaZSOuZHfDK4B6W4H+ZdzUvwFFn6WDm9K31fCABj
ZqBXcevIaaViP3grFPIaJ9sNJCwQxPf3epTzTDj7+zzEWeT+q2NvVZxyW868/oJ+
1V/ymGER0fwC+K4QZQq7AOirHw4rrdnRT4PGZ+wCq1ikChF6mxnivzEnxrmRHKRe
uoLDOe4qF22Z/eBBceF8gwX0Yiqjc7kPxmhNZZaZ07KAQKAUIsHIj2ek8Ds5JTKZ
jaykmkuh+hBbVgacFERdW1inVHFFyExps+ELxeN9b5t+Z5RUeqWaennzBlxjBFn2
n1iWjRMxrfoPbGJfmemDfODUtKTB5FTRzx8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTMohRpmeUjJdLHfDtnrifmxqsq+jAfBgNVHSMEGDAWgBST/rO2xfg5QDxX0ENU
Q3vK7ns5kTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMzIva182enRzWDRPVUE4VjlCRFZFTjd5dTU3T1pFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAva182enRzWDRPVUE4VjlCRFZFTjd5
dTU3T1pFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTMyL3pLSVVhWm5sSXlYU3gzdzdaNjRuNXNhckt2by5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkATIAMA0GCSqGSIb3DQEBCwUAA4IBAQBUo+UIlHAWubcTJ7rJk8TS
t6iaAyF3MkOAM3FHr6Bv4kKxHHHhH6nUkJxziZgc+3IiRRpXY487aU6jAyMIyiWU
R5FrFVY4kPdY1drFL9GFqwZ/eyWchpJraxHnfq97gOtb32PIoFI/U8r1NIwycznl
+MwtIi3ZQURJSpniaOv/qCZB+WJKH481YKYOnfzS5VDYit1bbMnnyxZxsrXfRzQZ
kGoDVXrrLlx2q3OeoagS01sii3OA0RwR5kxipH7QxiJoZ8pkMrbHgu0ar6zqqrZ4
TQeOK/cJC0lg2H7bXvBl5qmf+nLWqLzZvgGNt6E93t5pY/rgQTq9PNlZhMVpwa1C
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:16 2026 by rpki-client