
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
File: xmv5XniQEgbAV-f_d2cXciksEDo.roa (raw, json)
Hash identifier: EpJHDw9yoRrxoKvUtOcZRuX2mALGURohXbMRnYG6Ios=
Subject key identifier: C6:6B:F9:5E:78:90:12:06:C0:57:E7:FF:77:67:17:72:29:2C:10:3A
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 4D
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
Signing time: Sun 01 Feb 2026 01:29:55 +0000
ROA not before: Sun 01 Feb 2026 01:29:55 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 131954
IP address blocks: 121.58.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Feb 1 01:29:55 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=C66BF95E78901206C057E7FF77671772292C103A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:fc:00:81:ec:df:a3:3e:23:91:ae:c0:c1:
93:f9:4b:f2:d4:ad:bf:ee:03:a6:97:7c:ad:74:3d:
5e:22:7c:e1:b3:66:58:f5:d5:e8:bc:e9:3d:99:ad:
c3:98:e2:d3:09:ae:f8:70:5a:9a:ed:9e:92:82:3c:
1e:47:15:95:1e:8a:3d:df:b0:5b:e6:7f:25:c9:d6:
77:cf:f6:b8:26:9a:f1:27:84:f7:27:c3:e0:78:bf:
f9:10:2b:18:d3:44:b8:7c:dd:fe:b5:07:78:b9:bd:
5a:b6:d3:f5:de:6d:fa:cb:40:0e:f7:1e:36:9e:7a:
2d:6b:d2:e1:92:6a:46:3c:b5:49:51:a9:5d:c6:1b:
ed:33:bb:d6:99:1c:64:13:65:ec:d4:a7:90:7a:46:
71:1b:fb:2a:27:b7:54:2f:da:1a:1f:e3:18:ff:03:
ef:be:22:1d:ec:fc:01:c3:14:cd:ca:93:46:6d:f4:
cf:44:b5:15:9d:8d:c7:da:81:96:81:c0:96:70:7b:
b6:9e:35:05:9e:e6:24:df:da:af:1a:c1:ee:3a:e6:
bb:13:ed:d7:36:d5:4e:c0:1a:73:c5:d7:6a:4c:9f:
32:7a:11:82:9d:3f:5c:1e:69:88:cd:bb:89:4d:ec:
32:5a:81:27:63:bb:1c:4b:25:97:e7:37:13:3d:95:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:F9:5E:78:90:12:06:C0:57:E7:FF:77:67:17:72:29:2C:10:3A
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.58.128.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:24:04:8a:5e:94:2c:1f:39:d2:a4:57:a7:ef:c1:7c:e2:c9:
62:f1:0c:c4:ba:5b:c6:c4:7a:b1:f8:39:d4:9d:c8:f6:6c:19:
61:eb:e5:95:4c:5e:93:cf:0c:63:b3:de:5b:04:62:57:01:7d:
9e:f5:6d:6f:7c:b5:eb:fa:f1:6e:80:78:0a:e0:7c:db:c2:70:
a5:66:01:f4:69:2b:45:33:05:ed:bc:7c:11:73:4a:af:c0:1a:
5b:52:61:d0:9e:f4:62:7f:07:14:77:f7:34:ec:c5:48:5c:52:
1f:fc:70:fa:f7:0e:44:9a:07:49:7e:7a:26:70:30:e0:0f:e8:
e8:16:72:aa:e3:1d:af:9c:2e:ce:d0:a2:cf:cd:1d:8f:31:35:
e6:1a:98:a7:b2:58:31:6b:08:73:8a:ec:53:56:51:6d:dc:91:
7e:f9:16:37:5a:76:57:9b:5e:9b:4e:d6:e2:e0:93:6e:0b:eb:
8b:e6:58:a2:7e:98:68:60:51:cb:06:fa:1c:ad:88:54:74:9e:
22:e9:fb:85:5b:86:fe:7d:d9:14:07:94:6d:f9:e6:8e:dd:ef:
d6:a0:dd:4a:6a:c1:7f:75:68:de:84:eb:c1:35:65:d4:c6:05:
08:3b:76:b1:8e:2d:89:89:89:81:c3:54:b3:f2:c6:7b:79:d5:
51:84:de:f0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI2MDIwMTAx
Mjk1NVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQzY2QkY5NUU3ODkwMTIw
NkMwNTdFN0ZGNzc2NzE3NzIyOTJDMTAzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJg/ACB7N+jPiORrsDBk/lL8tStv+4Dppd8rXQ9XiJ84bNmWPXV
6LzpPZmtw5ji0wmu+HBamu2ekoI8HkcVlR6KPd+wW+Z/JcnWd8/2uCaa8SeE9yfD
4Hi/+RArGNNEuHzd/rUHeLm9WrbT9d5t+stADvceNp56LWvS4ZJqRjy1SVGpXcYb
7TO71pkcZBNl7NSnkHpGcRv7Kie3VC/aGh/jGP8D774iHez8AcMUzcqTRm30z0S1
FZ2Nx9qBloHAlnB7tp41BZ7mJN/arxrB7jrmuxPt1zbVTsAac8XXakyfMnoRgp0/
XB5piM27iU3sMlqBJ2O7HEsll+c3Ez2Vas0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTGa/leeJASBsBX5/93ZxdyKSwQOjAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTQveG12NVhuaVFFZ2JBVi1mX2QyY1hjaWtzRURvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3k6gDANBgkqhkiG9w0BAQsFAAOCAQEAjCQEil6ULB850qRXp+/BfOLJYvEM
xLpbxsR6sfg51J3I9mwZYevllUxek88MY7PeWwRiVwF9nvVtb3y16/rxboB4CuB8
28JwpWYB9GkrRTMF7bx8EXNKr8AaW1Jh0J70Yn8HFHf3NOzFSFxSH/xw+vcORJoH
SX56JnAw4A/o6BZyquMdr5wuztCiz80djzE15hqYp7JYMWsIc4rsU1ZRbdyRfvkW
N1p2V5tem07W4uCTbgvri+ZYon6YaGBRywb6HK2IVHSeIun7hVuG/n3ZFAeUbfnm
jt3v1qDdSmrBf3Vo3oTrwTVl1MYFCDt2sY4tiYmJgcNUs/LGe3nVUYTe8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:25 2026 by rpki-client