$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/gEdNK05e4ipMsSQxkOFYnE8KIfc.roa File: gEdNK05e4ipMsSQxkOFYnE8KIfc.roa (raw, json) Hash identifier: 5hrE1rswolFaIZ80Yjo5D/GUUEhwUt8Q39PgaOY7kE4= Subject key identifier: 80:47:4D:2B:4E:5E:E2:2A:4C:B1:24:31:90:E1:58:9C:4F:0A:21:F7 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 72 Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/gEdNK05e4ipMsSQxkOFYnE8KIfc.roa Signing time: Tue 31 Mar 2026 07:48:43 +0000 ROA not before: Tue 31 Mar 2026 07:48:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 2001:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Mar 31 07:48:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=80474D2B4E5EE22A4CB1243190E1589C4F0A21F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:33:c0:7b:b4:bc:6a:fc:8e:42:9e:0e:2d: d2:c0:50:38:bd:ac:d0:b8:f9:bf:5b:de:52:4c:52: b2:ae:c2:03:f7:e0:88:7a:17:c9:cd:92:c4:75:68: 89:dc:43:87:85:aa:11:ba:20:9d:8e:80:55:b9:66: 71:86:28:e0:29:b0:c3:20:7b:7f:76:9a:de:1f:a4: e6:9f:e0:f2:80:3d:6e:f5:4e:bc:f0:7b:e7:b1:cb: 48:d3:d3:ab:e7:e4:ed:95:72:a8:b4:4f:b7:c6:88: 2a:51:78:f6:fb:57:31:e9:a6:d4:aa:01:10:18:d3: e4:ae:71:7e:8c:42:b1:7a:28:2c:97:cd:39:34:4f: ed:e1:a3:40:bb:45:31:d3:49:c5:20:5c:d9:a5:6d: 67:62:4c:e2:03:17:cf:0a:b9:d6:34:1d:66:44:15: 15:d0:42:99:a7:5b:5f:40:51:91:e6:84:00:c7:1e: 19:59:04:e8:87:b5:af:3a:ef:67:57:1a:28:c3:13: d8:65:4f:be:63:40:5a:f3:6f:6a:eb:19:b7:b3:43: ad:c0:08:96:13:b7:bb:e6:a5:fb:dd:ef:11:3b:fb: ab:88:a9:f1:52:4d:58:5f:6d:c9:9c:1b:a8:63:29: 81:9f:02:68:c3:0d:1a:a9:d5:44:2f:af:47:a7:45: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:47:4D:2B:4E:5E:E2:2A:4C:B1:24:31:90:E1:58:9C:4F:0A:21:F7 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/gEdNK05e4ipMsSQxkOFYnE8KIfc.roa sbgp-ipAddrBlock: critical IPv6: 2001:300::/32 Signature Algorithm: sha256WithRSAEncryption 61:7f:22:93:4d:34:9a:94:d5:34:7c:ca:a0:9c:4a:de:d2:48: 62:5c:0f:3f:b4:0a:cf:b4:02:30:1a:5a:cd:d2:31:86:d6:44: 97:cd:3c:1e:b7:54:fc:08:b5:5f:8f:d4:ef:fe:45:81:9c:be: 53:39:17:fc:ea:b7:77:c5:7a:81:a2:25:0b:a5:87:ac:ed:38: 93:2b:00:63:0d:1b:ad:c5:23:81:3e:f1:0c:76:43:94:b0:ac: c3:87:73:49:3c:97:e2:1b:aa:42:11:44:8d:5a:af:c3:cd:27: 04:7a:58:e0:ea:2d:37:b1:a2:15:a2:d6:1d:73:ee:75:cd:81: a7:b3:5b:6e:7d:63:6e:a8:06:04:2e:64:ec:a5:91:16:90:f3: 40:83:d0:4b:61:4d:83:84:9c:88:1a:e5:7d:64:8d:cf:01:c3: e9:3a:b4:e9:cb:7a:98:7c:83:b7:8b:6f:7c:cd:1b:5a:05:87: b1:51:6b:e6:bf:5b:2a:a8:72:13:2a:29:6d:ec:c5:15:99:9d: 03:33:e7:2b:63:d7:22:92:2f:6f:63:5c:42:c7:64:64:73:f7: 30:da:c7:43:f5:cd:a6:93:ea:fb:81:59:39:cb:2d:30:52:d5: b6:c7:31:50:6b:af:fd:38:b6:55:21:e0:13:4d:79:1f:d0:5e: 7d:68:ae:66 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI2MDMzMTA3 NDg0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODA0NzREMkI0RTVFRTIy QTRDQjEyNDMxOTBFMTU4OUM0RjBBMjFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOm0M8B7tLxq/I5Cng4t0sBQOL2s0Lj5v1veUkxSsq7CA/fgiHoX yc2SxHVoidxDh4WqEbognY6AVblmcYYo4CmwwyB7f3aa3h+k5p/g8oA9bvVOvPB7 57HLSNPTq+fk7ZVyqLRPt8aIKlF49vtXMemm1KoBEBjT5K5xfoxCsXooLJfNOTRP 7eGjQLtFMdNJxSBc2aVtZ2JM4gMXzwq51jQdZkQVFdBCmadbX0BRkeaEAMceGVkE 6Ie1rzrvZ1caKMMT2GVPvmNAWvNvausZt7NDrcAIlhO3u+al+93vETv7q4ip8VJN WF9tyZwbqGMpgZ8CaMMNGqnVRC+vR6dFjuUCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBSAR00rTl7iKkyxJDGQ4VicTwoh9zAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDE2L2dFZE5LMDVlNGlwTXNTUXhrT0ZZbkU4S0lmYy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQMAMA0GCSqGSIb3DQEBCwUA A4IBAQBhfyKTTTSalNU0fMqgnEre0khiXA8/tArPtAIwGlrN0jGG1kSXzTwet1T8 CLVfj9Tv/kWBnL5TORf86rd3xXqBoiULpYes7TiTKwBjDRutxSOBPvEMdkOUsKzD h3NJPJfiG6pCEUSNWq/DzScEeljg6i03saIVotYdc+51zYGns1tufWNuqAYELmTs pZEWkPNAg9BLYU2DhJyIGuV9ZI3PAcPpOrTpy3qYfIO3i298zRtaBYexUWvmv1sq qHITKilt7MUVmZ0DM+crY9ciki9vY1xCx2Rkc/cw2sdD9c2mk+r7gVk5yy0wUtW2 xzFQa6/9OLZVIeATTXkf0F59aK5m -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:00 2026 by rpki-client