$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CdXCq1OmpSrPDBsrVsdiMoQ4rOE.roa File: CdXCq1OmpSrPDBsrVsdiMoQ4rOE.roa (raw, json) Hash identifier: ovNl7v4LpWRhq6uj8QTx2ATPIDyD3QI5fBEhYopw8MQ= Subject key identifier: 09:D5:C2:AB:53:A6:A5:2A:CF:0C:1B:2B:56:C7:62:32:84:38:AC:E1 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 7B Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CdXCq1OmpSrPDBsrVsdiMoQ4rOE.roa Signing time: Tue 31 Mar 2026 07:48:46 +0000 ROA not before: Tue 31 Mar 2026 07:48:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4774 IP address blocks: 2001:300:fff6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Mar 31 07:48:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=09D5C2AB53A6A52ACF0C1B2B56C762328438ACE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:4f:eb:43:aa:4e:b9:f7:bf:71:bc:25:c6: b2:da:31:9c:36:eb:f8:2b:6e:ac:87:6d:49:ad:f0: d8:72:29:b2:f0:9a:a5:61:42:27:6b:64:85:21:26: 79:e4:53:f6:b6:b5:64:52:32:70:73:a7:83:ee:68: 04:73:ee:26:70:0a:04:82:58:61:38:d4:3a:df:26: f0:fb:69:5c:ba:59:83:da:78:b0:dd:6e:a2:82:da: cd:97:27:dd:9f:ce:6d:12:a0:c7:6f:c8:9f:c0:c1: 93:f0:46:e5:2d:a8:17:1e:e9:1c:46:57:64:c6:96: b4:3c:c1:50:20:f1:15:17:84:da:9f:c9:9e:13:9f: 19:7e:b8:29:e6:71:d2:9a:cf:12:75:72:5d:14:e5: 43:14:11:d7:20:52:f5:eb:49:99:f5:82:df:1f:58: eb:fc:7e:79:22:e9:82:63:72:b5:8b:ce:cc:a3:99: a9:42:37:0f:27:5b:d6:8d:b4:e5:41:a6:d2:74:f5: 54:3b:6a:7b:e5:5f:53:59:07:aa:22:a6:dc:17:e6: a0:4b:39:1d:f4:8c:2f:ae:e3:c6:ab:9a:eb:fd:41: 13:e1:eb:e7:f1:ba:11:09:3e:53:e3:a6:35:6c:92: ec:3b:8d:7d:b1:d7:27:ec:53:9b:14:c5:44:86:9d: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D5:C2:AB:53:A6:A5:2A:CF:0C:1B:2B:56:C7:62:32:84:38:AC:E1 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CdXCq1OmpSrPDBsrVsdiMoQ4rOE.roa sbgp-ipAddrBlock: critical IPv6: 2001:300:fff6::/48 Signature Algorithm: sha256WithRSAEncryption 41:c5:46:a8:40:89:b2:c8:77:6c:0f:4d:2b:1b:a7:0b:6d:c0: 12:fd:c7:ce:de:3a:48:ec:f1:16:f0:11:11:7a:7b:9a:ad:8f: 15:fc:5a:a6:4f:ce:6a:36:84:67:97:4b:9b:8b:ae:42:1a:ce: f6:e2:7a:bf:2c:e2:51:a4:38:20:c3:af:45:a6:e4:6b:b0:a8: ed:60:20:d3:58:b4:d3:d6:2b:1d:99:88:8a:c5:a0:0d:85:e2: ee:ab:3f:d6:96:b0:e6:f3:ee:ab:c7:1a:3b:2a:b8:c8:a4:83: b0:e5:47:d1:14:a9:85:35:67:05:96:f8:c9:97:90:fa:0a:bc: 7b:c6:33:0a:3e:ee:68:b8:42:e0:5b:58:80:5c:97:17:0b:14: 0f:71:9a:31:b3:3e:1b:36:e5:c7:8b:a6:ca:06:fc:88:e2:cc: 20:1d:a3:90:1e:77:23:44:e3:b4:ee:3d:cb:32:c8:8f:fd:81: cf:c8:7e:9d:b3:12:98:0a:ac:2a:dd:ca:1b:b3:69:4e:2d:9e: ac:4c:c8:ea:9b:34:9c:ff:5c:3d:78:8f:70:1c:d2:bc:bd:f1: b2:74:1e:75:83:2a:43:7c:d8:25:42:17:3c:d9:ff:c1:19:4b: 94:6d:7c:fc:63:0c:3f:54:12:29:a1:ce:35:32:58:eb:c8:cc: 9e:bf:f0:3b -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI2MDMzMTA3 NDg0NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDlENUMyQUI1M0E2QTUy QUNGMEMxQjJCNTZDNzYyMzI4NDM4QUNFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ03T+tDqk65979xvCXGstoxnDbr+CturIdtSa3w2HIpsvCapWFC J2tkhSEmeeRT9ra1ZFIycHOng+5oBHPuJnAKBIJYYTjUOt8m8PtpXLpZg9p4sN1u ooLazZcn3Z/ObRKgx2/In8DBk/BG5S2oFx7pHEZXZMaWtDzBUCDxFReE2p/JnhOf GX64KeZx0prPEnVyXRTlQxQR1yBS9etJmfWC3x9Y6/x+eSLpgmNytYvOzKOZqUI3 Dydb1o205UGm0nT1VDtqe+VfU1kHqiKm3BfmoEs5HfSML67jxqua6/1BE+Hr5/G6 EQk+U+OmNWyS7DuNfbHXJ+xTmxTFRIad/T0CAwEAAaOCAeAwggHcMB0GA1UdDgQW BBQJ1cKrU6alKs8MGytWx2IyhDis4TAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDE2L0NkWENxMU9tcFNyUERCc3JWc2RpTW9RNHJPRS5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQMA//YwDQYJKoZIhvcNAQEL BQADggEBAEHFRqhAibLId2wPTSsbpwttwBL9x87eOkjs8RbwERF6e5qtjxX8WqZP zmo2hGeXS5uLrkIazvbier8s4lGkOCDDr0Wm5GuwqO1gINNYtNPWKx2ZiIrFoA2F 4u6rP9aWsObz7qvHGjsquMikg7DlR9EUqYU1ZwWW+MmXkPoKvHvGMwo+7mi4QuBb WIBclxcLFA9xmjGzPhs25ceLpsoG/IjizCAdo5AedyNE47TuPcsyyI/9gc/Ifp2z EpgKrCrdyhuzaU4tnqxMyOqbNJz/XD14j3Ac0ry98bJ0HnWDKkN82CVCFzzZ/8EZ S5RtfPxjDD9UEimhzjUyWOvIzJ6/8Ds= -----END CERTIFICATE-----Generated at Tue Apr 7 13:24:49 2026 by rpki-client