$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/-dDkaVg8Dmc0FHMV7840qTSdm0c.roa File: -dDkaVg8Dmc0FHMV7840qTSdm0c.roa (raw, json) Hash identifier: 601A2rR9M44W0c6Q6biudDVEQgCr5Q+KknrQ4uCmPlg= Subject key identifier: F9:D0:E4:69:58:3C:0E:67:34:14:73:15:EF:CE:34:A9:34:9D:9B:47 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 7C Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/-dDkaVg8Dmc0FHMV7840qTSdm0c.roa Signing time: Tue 31 Mar 2026 07:48:47 +0000 ROA not before: Tue 31 Mar 2026 07:48:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4774 IP address blocks: 2001:300:fff7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Mar 31 07:48:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F9D0E469583C0E6734147315EFCE34A9349D9B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:00:9f:ba:3b:4e:a6:ff:50:f4:e6:21:06: 63:3a:9c:d3:45:45:d2:c8:8b:94:4a:f6:e7:2f:9d: 9c:80:3c:70:71:2a:a8:bc:cb:ce:22:4f:ca:94:06: 64:bc:8c:05:01:ee:e5:e6:59:31:e7:cc:ba:1b:69: e9:07:2a:8f:91:20:c8:b5:c9:2c:f5:fa:c0:a4:7d: d3:62:26:db:4c:96:34:a3:11:bf:04:78:e9:fe:09: 29:4a:83:e5:04:e1:5b:23:85:76:99:82:77:6c:f9: 88:dd:7a:e8:dd:89:0b:c7:67:67:23:ea:29:c0:76: 4f:83:5c:78:34:b7:bf:90:a1:0f:3f:5c:d3:be:ad: 73:53:a8:7f:b6:18:d3:19:76:c9:3f:2b:d5:e3:e1: b5:4d:f3:a4:84:61:c8:1c:45:65:c7:de:a4:91:08: 84:b2:e5:5c:48:1b:69:31:ba:52:5d:e6:08:e8:5e: 0d:7c:f4:e6:1c:bc:6d:82:e3:b5:eb:6c:34:7e:04: 80:df:d7:2a:df:5d:f3:9a:af:17:76:ac:6a:ec:71: 87:d7:0f:d8:64:e7:74:48:fc:85:f7:4b:94:a7:ab: 01:16:7e:f4:07:25:0b:7d:5c:1f:db:5e:ad:f2:a1: fa:09:15:6c:62:bd:16:d3:1a:1a:12:90:c7:52:19: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:E4:69:58:3C:0E:67:34:14:73:15:EF:CE:34:A9:34:9D:9B:47 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/-dDkaVg8Dmc0FHMV7840qTSdm0c.roa sbgp-ipAddrBlock: critical IPv6: 2001:300:fff7::/48 Signature Algorithm: sha256WithRSAEncryption 26:e1:aa:7c:b1:e3:84:78:28:5f:21:4d:0b:e8:b7:e6:f4:b7: a8:57:4c:b1:67:83:0d:26:97:2b:06:8e:13:89:59:0f:0b:40: 1d:61:85:6c:8d:2e:29:99:60:76:f2:35:89:9b:79:42:5f:cf: 27:32:14:41:94:e0:39:33:c7:45:a1:f2:46:4a:68:62:ed:e8: 38:74:59:50:6c:f1:48:46:10:bc:ab:2a:b5:d1:52:26:72:df: 7a:58:bc:90:72:d3:97:a7:28:ed:5b:be:ec:f1:f5:eb:0f:5b: b6:ae:30:8f:ed:8b:a9:af:b2:de:b0:95:ba:10:79:5d:25:dc: 72:07:b0:c5:90:8a:c7:69:28:d3:69:3d:ed:14:08:ef:77:9a: 81:77:08:88:cc:8b:79:e3:26:46:60:83:f5:de:49:d2:46:2e: b4:00:e0:2d:ae:d0:96:f9:d5:2f:4b:99:93:80:8c:5e:cc:57: 3f:df:41:31:66:71:f0:61:44:9a:19:07:19:3c:0e:33:2e:66: d0:85:2a:fd:8b:be:a7:80:6e:78:d3:a0:55:c6:38:4f:bc:87: b1:a6:8e:51:cc:f5:91:ef:0b:d1:08:73:ff:f7:b9:36:07:85: 0d:79:ba:f0:c5:e4:1e:b9:58:59:11:26:74:68:e8:4a:e2:b2: c1:06:a7:42 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI2MDMzMTA3 NDg0N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjlEMEU0Njk1ODNDMEU2 NzM0MTQ3MzE1RUZDRTM0QTkzNDlEOUI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMoTAJ+6O06m/1D05iEGYzqc00VF0siLlEr25y+dnIA8cHEqqLzL ziJPypQGZLyMBQHu5eZZMefMuhtp6Qcqj5EgyLXJLPX6wKR902Im20yWNKMRvwR4 6f4JKUqD5QThWyOFdpmCd2z5iN166N2JC8dnZyPqKcB2T4NceDS3v5ChDz9c076t c1Oof7YY0xl2yT8r1ePhtU3zpIRhyBxFZcfepJEIhLLlXEgbaTG6Ul3mCOheDXz0 5hy8bYLjtetsNH4EgN/XKt9d85qvF3asauxxh9cP2GTndEj8hfdLlKerARZ+9Acl C31cH9terfKh+gkVbGK9FtMaGhKQx1IZSZkCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBT50ORpWDwOZzQUcxXvzjSpNJ2bRzAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDE2Ly1kRGthVmc4RG1jMEZITVY3ODQwcVRTZG0wYy5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQMA//cwDQYJKoZIhvcNAQEL BQADggEBACbhqnyx44R4KF8hTQvot+b0t6hXTLFngw0mlysGjhOJWQ8LQB1hhWyN LimZYHbyNYmbeUJfzycyFEGU4Dkzx0Wh8kZKaGLt6Dh0WVBs8UhGELyrKrXRUiZy 33pYvJBy05enKO1bvuzx9esPW7auMI/ti6mvst6wlboQeV0l3HIHsMWQisdpKNNp Pe0UCO93moF3CIjMi3njJkZgg/XeSdJGLrQA4C2u0Jb51S9LmZOAjF7MVz/fQTFm cfBhRJoZBxk8DjMuZtCFKv2LvqeAbnjToFXGOE+8h7GmjlHM9ZHvC9EIc//3uTYH hQ15uvDF5B65WFkRJnRo6ErissEGp0I= -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:15 2026 by rpki-client