$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30012/gnvQyw7zHq-YB1s5Nc5TDRXaDK8.roa File: gnvQyw7zHq-YB1s5Nc5TDRXaDK8.roa (raw, json) Hash identifier: 3g3kGi/6qMnGpXn+xovofgPhqPNt2DB857J2o/kuyng= Subject key identifier: 82:7B:D0:CB:0E:F3:1E:AF:98:07:5B:39:35:CE:53:0D:15:DA:0C:AF Certificate issuer: /CN=153097FB864FAF4C9E646BB21AD05B5A095BBE3E Certificate serial: 2E Authority key identifier: 15:30:97:FB:86:4F:AF:4C:9E:64:6B:B2:1A:D0:5B:5A:09:5B:BE:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FTCX-4ZPr0yeZGuyGtBbWglbvj4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/gnvQyw7zHq-YB1s5Nc5TDRXaDK8.roa Signing time: Tue 31 Mar 2026 08:33:17 +0000 ROA not before: Tue 31 Mar 2026 08:33:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7682 IP address blocks: 2001:398::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/FTCX-4ZPr0yeZGuyGtBbWglbvj4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/FTCX-4ZPr0yeZGuyGtBbWglbvj4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FTCX-4ZPr0yeZGuyGtBbWglbvj4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153097FB864FAF4C9E646BB21AD05B5A095BBE3E Validity Not Before: Mar 31 08:33:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=827BD0CB0EF31EAF98075B3935CE530D15DA0CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:cc:4f:15:40:38:e3:38:6a:f1:2c:25:e5: a2:b5:e6:6f:bb:0e:ac:5f:88:c8:da:55:c5:6c:f2: 2d:93:f3:0f:ac:f8:34:66:42:35:6c:6c:9b:c2:d0: b1:66:59:ae:4d:c8:4b:07:9b:91:05:b3:04:f3:f7: 56:bb:c1:7a:a1:d4:46:f2:93:c3:b0:24:85:f8:e4: 90:49:47:cc:f1:0c:75:6b:bd:46:a5:ba:10:e7:53: d2:77:be:65:78:e2:51:f3:2d:ca:2f:2c:e2:ad:1a: 28:c6:4e:5d:a5:fd:ba:38:ee:9d:b1:b7:97:66:d4: 6d:75:3b:a3:c1:3f:59:16:79:2a:4f:dd:98:87:ae: 5a:6a:94:89:a0:d5:c4:7c:65:5c:33:d8:6f:87:a7: 7b:37:f7:b3:7b:0c:97:ab:a0:f3:5f:ac:f8:65:10: 7b:69:7c:68:ed:87:8b:4a:45:1c:cc:51:03:88:ea: ef:57:37:66:c4:24:a7:f8:50:8c:78:f8:20:a7:cc: 8e:91:8e:90:22:8e:ab:1a:20:c9:46:93:56:47:9c: 0b:7c:27:41:5e:bb:47:4a:fa:8d:bc:51:4a:f0:73: d5:e4:f8:40:f9:e5:d1:49:07:54:28:3c:e5:fa:0c: 3f:15:fb:79:88:5d:db:2d:6b:81:e2:ba:4a:33:b4: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7B:D0:CB:0E:F3:1E:AF:98:07:5B:39:35:CE:53:0D:15:DA:0C:AF X509v3 Authority Key Identifier: keyid:15:30:97:FB:86:4F:AF:4C:9E:64:6B:B2:1A:D0:5B:5A:09:5B:BE:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/FTCX-4ZPr0yeZGuyGtBbWglbvj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FTCX-4ZPr0yeZGuyGtBbWglbvj4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/gnvQyw7zHq-YB1s5Nc5TDRXaDK8.roa sbgp-ipAddrBlock: critical IPv6: 2001:398::/32 Signature Algorithm: sha256WithRSAEncryption 15:84:a9:8e:2f:ed:ca:bd:ad:cf:44:8c:50:4d:c5:85:82:bb: 20:25:fb:df:94:32:cc:f6:48:da:82:0c:09:77:90:6a:a1:a9: 24:e4:51:59:48:9e:ff:4d:08:17:e8:bf:ba:20:2d:79:05:a2: e5:fb:55:b2:a6:cc:b8:62:53:23:15:0b:f1:3a:91:38:7f:eb: f7:d2:c8:87:ed:c3:c1:d7:81:99:78:55:5b:69:7a:0a:55:73: 87:08:87:27:ee:96:b3:8e:98:7e:a6:51:12:35:2f:5c:03:78: 50:1c:e3:be:9d:0a:f2:aa:85:17:88:29:6b:59:9c:f7:bc:68: 9c:23:45:4a:91:17:9a:dc:9a:ba:c6:8d:8a:d2:3c:27:9f:fe: 77:9e:54:04:3a:bc:5c:cc:30:45:95:73:4e:d6:c8:34:fa:60: 50:27:01:dc:03:2f:6c:dc:f4:93:79:69:74:1a:d4:6d:a1:47: f0:50:27:b3:67:18:09:61:30:5b:df:c1:a6:d1:f5:16:ad:4a: 06:51:04:ce:37:27:fa:f0:90:bd:66:51:e5:63:b5:f4:08:34: a4:d4:76:d7:a9:b9:71:f6:2f:2e:6a:f1:dc:84:aa:43:1a:08: 31:c0:3b:aa:4f:ae:96:0b:4a:bc:61:5d:a8:78:f3:50:eb:f0: 63:b3:07:57 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTMw OTdGQjg2NEZBRjRDOUU2NDZCQjIxQUQwNUI1QTA5NUJCRTNFMB4XDTI2MDMzMTA4 MzMxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODI3QkQwQ0IwRUYzMUVB Rjk4MDc1QjM5MzVDRTUzMEQxNURBMENBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK+HzE8VQDjjOGrxLCXlorXmb7sOrF+IyNpVxWzyLZPzD6z4NGZC NWxsm8LQsWZZrk3ISwebkQWzBPP3VrvBeqHURvKTw7AkhfjkkElHzPEMdWu9RqW6 EOdT0ne+ZXjiUfMtyi8s4q0aKMZOXaX9ujjunbG3l2bUbXU7o8E/WRZ5Kk/dmIeu WmqUiaDVxHxlXDPYb4enezf3s3sMl6ug81+s+GUQe2l8aO2Hi0pFHMxRA4jq71c3 ZsQkp/hQjHj4IKfMjpGOkCKOqxogyUaTVkecC3wnQV67R0r6jbxRSvBz1eT4QPnl 0UkHVCg85foMPxX7eYhd2y1rgeK6SjO04x8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBSCe9DLDvMer5gHWzk1zlMNFdoMrzAfBgNVHSMEGDAWgBQVMJf7hk+vTJ5ka7Ia 0FtaCVu+PjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTIvRlRDWC00WlByMHllWkd1eUd0QmJXZ2xidmo0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlRDWC00WlByMHllWkd1eUd0QmJX Z2xidmo0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDEyL2dudlF5dzd6SHEtWUIxczVOYzVURFJYYURLOC5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQOYMA0GCSqGSIb3DQEBCwUA A4IBAQAVhKmOL+3Kva3PRIxQTcWFgrsgJfvflDLM9kjaggwJd5Bqoakk5FFZSJ7/ TQgX6L+6IC15BaLl+1Wypsy4YlMjFQvxOpE4f+v30siH7cPB14GZeFVbaXoKVXOH CIcn7pazjph+plESNS9cA3hQHOO+nQryqoUXiClrWZz3vGicI0VKkRea3Jq6xo2K 0jwnn/53nlQEOrxczDBFlXNO1sg0+mBQJwHcAy9s3PSTeWl0GtRtoUfwUCezZxgJ YTBb38Gm0fUWrUoGUQTONyf68JC9ZlHlY7X0CDSk1HbXqblx9i8uavHchKpDGggx wDuqT66WC0q8YV2oePNQ6/BjswdX -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:54 2026 by rpki-client