
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/yI9mu7VYcLxUJjczZhPMLRcVuV4.roa
File: yI9mu7VYcLxUJjczZhPMLRcVuV4.roa (raw, json)
Hash identifier: jP/iMut7wAssQP5QOw6Zg/aHwdmpOVDSWU742IBwe18=
Subject key identifier: C8:8F:66:BB:B5:58:70:BC:54:26:37:33:66:13:CC:2D:17:15:B9:5E
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 98
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/yI9mu7VYcLxUJjczZhPMLRcVuV4.roa
Signing time: Sun 01 Feb 2026 01:28:37 +0000
ROA not before: Sun 01 Feb 2026 01:28:37 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Feb 1 01:28:37 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=C88F66BBB55870BC542637336613CC2D1715B95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:17:00:19:1b:84:66:76:45:98:af:d9:c9:
f9:04:53:cd:43:dd:13:7f:e0:66:2d:45:d9:91:18:
e0:c6:37:69:18:03:38:aa:16:5d:cb:ee:aa:02:88:
5e:9d:23:e3:91:a4:ee:2f:87:a9:ed:89:62:79:87:
66:a1:3b:32:98:c3:3d:fb:9d:74:90:e1:88:32:dc:
80:29:de:65:13:6e:2e:83:ee:34:91:a0:69:91:11:
20:05:b6:3a:f5:ff:5e:1f:77:24:54:a9:8b:93:9e:
9a:7b:60:9d:66:58:7f:ca:99:8b:72:22:ca:9f:ab:
00:8c:28:4c:a9:c7:42:f6:6e:30:2a:ba:3f:04:0d:
78:aa:6c:06:8d:dd:18:f1:cb:be:b6:9a:94:75:30:
8b:df:ca:da:b5:c0:f0:17:6a:b5:dd:bf:cd:2e:c1:
5f:8f:4b:c8:8b:41:13:8c:b4:63:41:9f:89:b9:88:
b2:f5:05:77:3e:bc:2e:ee:b8:d2:1a:d1:8e:b5:01:
c3:56:d5:00:7a:27:8d:ea:9b:9e:02:85:43:c5:c1:
54:82:0f:dd:cf:2b:cb:3c:92:50:04:ae:33:1b:37:
da:93:ed:6c:1e:47:0c:bc:fe:08:fc:51:eb:4b:a1:
13:df:47:5b:ce:70:95:d6:f8:da:e5:97:56:dd:09:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:66:BB:B5:58:70:BC:54:26:37:33:66:13:CC:2D:17:15:B9:5E
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/yI9mu7VYcLxUJjczZhPMLRcVuV4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
1c:d8:8f:1c:a9:6e:ad:e7:cf:09:54:4c:21:8c:c6:0f:c9:af:
95:11:3f:94:af:62:15:02:e9:af:7e:21:17:70:0c:b2:b5:0b:
22:e9:68:07:6b:5c:f4:60:e6:66:13:ca:39:9c:73:0e:c6:fe:
42:f5:bf:15:7c:4b:29:76:ff:70:fd:f7:c1:f9:ed:2c:40:5a:
c6:1f:48:2d:03:ac:6a:33:63:96:ad:c1:2c:ea:19:f5:8f:70:
ac:13:92:f4:77:ff:6d:f4:a9:f0:80:6b:9a:8d:31:f3:57:ce:
1e:4a:05:77:b6:45:9a:c8:11:14:7f:f1:0b:cc:ba:2e:60:35:
57:dd:b5:f9:29:89:35:a8:40:aa:0b:d5:c2:01:07:1f:16:dc:
94:01:38:41:b2:ba:51:48:5d:c5:0b:e2:3c:5f:c3:5d:cf:14:
cb:6c:8c:1f:c3:47:7d:77:19:a4:64:a3:d7:00:80:a2:5b:c4:
6d:ac:ca:45:b9:67:32:84:6c:fd:b0:c5:75:84:5f:c6:b9:21:
9c:da:1d:1b:1d:ee:e2:e7:ec:aa:d4:7f:f8:37:af:72:20:fe:
9d:ab:f3:51:4a:52:99:e2:f6:28:80:89:9d:e9:fd:6d:34:95:
2c:59:89:df:bd:8e:de:d2:cb:1f:c7:51:e9:82:b9:26:42:38:
0d:23:19:8c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAyMDEw
MTI4MzdaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4OEY2NkJCQjU1ODcw
QkM1NDI2MzczMzY2MTNDQzJEMTcxNUI5NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIjRcAGRuEZnZFmK/ZyfkEU81D3RN/4GYtRdmRGODGN2kYAziq
Fl3L7qoCiF6dI+ORpO4vh6ntiWJ5h2ahOzKYwz37nXSQ4Ygy3IAp3mUTbi6D7jSR
oGmRESAFtjr1/14fdyRUqYuTnpp7YJ1mWH/KmYtyIsqfqwCMKEypx0L2bjAquj8E
DXiqbAaN3Rjxy762mpR1MIvfytq1wPAXarXdv80uwV+PS8iLQROMtGNBn4m5iLL1
BXc+vC7uuNIa0Y61AcNW1QB6J43qm54ChUPFwVSCD93PK8s8klAErjMbN9qT7Wwe
Rwy8/gj8UetLoRPfR1vOcJXW+Nrll1bdCUX5AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUyI9mu7VYcLxUJjczZhPMLRcVuV4wHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDIyOC95STltdTdWWWNMeFVKamN6WmhQTUxSY1Z1VjQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDJAa7ADANBgkqhkiG9w0BAQsFAAOCAQEAHNiPHKlurefPCVRMIYzG
D8mvlRE/lK9iFQLpr34hF3AMsrULIuloB2tc9GDmZhPKOZxzDsb+QvW/FXxLKXb/
cP33wfntLEBaxh9ILQOsajNjlq3BLOoZ9Y9wrBOS9Hf/bfSp8IBrmo0x81fOHkoF
d7ZFmsgRFH/xC8y6LmA1V921+SmJNahAqgvVwgEHHxbclAE4QbK6UUhdxQviPF/D
Xc8Uy2yMH8NHfXcZpGSj1wCAolvEbazKRblnMoRs/bDFdYRfxrkhnNodGx3u4ufs
qtR/+DevciD+navzUUpSmeL2KICJnen9bTSVLFmJ372O3tLLH8dR6YK5JkI4DSMZ
jA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:02 2026 by rpki-client