$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/N4lwQTQnKjsL5FIzyoUD18PDCx8.roa File: N4lwQTQnKjsL5FIzyoUD18PDCx8.roa (raw, json) Hash identifier: xa56TOBPMJVriTLuvJH40f/hlH49Jw3vSBPz6qF+5Mo= Subject key identifier: 37:89:70:41:34:27:2A:3B:0B:E4:52:33:CA:85:03:D7:C3:C3:0B:1F Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 3C Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/N4lwQTQnKjsL5FIzyoUD18PDCx8.roa Signing time: Tue 31 Mar 2026 08:31:33 +0000 ROA not before: Tue 31 Mar 2026 08:31:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9619 IP address blocks: 2001:cf8:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: Mar 31 08:31:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3789704134272A3B0BE45233CA8503D7C3C30B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:f3:33:ad:da:1b:4c:bd:6e:c2:e7:a7:77: 04:45:56:39:eb:57:e4:3e:03:69:f8:c9:5c:1a:7c: 2f:61:1d:4a:e7:4b:a3:84:09:06:a0:3b:fa:72:b4: 2c:ab:62:d3:bc:15:66:47:fa:19:b0:f4:66:b8:4a: 2d:8d:d6:cb:48:35:23:84:42:61:52:08:e2:7b:17: 13:14:e6:c6:c0:2c:4c:67:61:cd:25:35:5b:d9:73: 1d:43:3e:cf:db:ae:de:e3:ba:44:32:b0:5c:b7:5f: 45:5d:ae:c3:4a:27:a7:f1:e7:de:eb:34:fd:2e:a1: b9:76:8c:f1:1c:c2:eb:84:4d:38:a5:41:aa:5a:7e: db:ce:7a:88:b6:1a:88:c3:5f:8d:9c:f2:4a:0c:c5: cb:e4:08:27:67:de:58:fb:6e:95:5c:22:18:44:1e: 79:f0:6a:df:ea:be:6b:33:90:5f:da:b8:da:78:67: f9:1f:1f:93:f3:61:10:04:46:a6:fa:42:88:cc:5c: ac:58:c2:1e:a4:48:4d:3f:1d:7b:1d:ca:69:93:1d: 29:05:25:37:33:5f:45:5f:c5:64:da:0f:36:b1:63: 8f:65:0d:66:c1:41:ee:af:bc:f9:50:76:73:54:7e: 17:32:35:fb:f0:f1:7d:bc:db:6e:48:ef:33:97:55: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:70:41:34:27:2A:3B:0B:E4:52:33:CA:85:03:D7:C3:C3:0B:1F X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/N4lwQTQnKjsL5FIzyoUD18PDCx8.roa sbgp-ipAddrBlock: critical IPv6: 2001:cf8:5::/48 Signature Algorithm: sha256WithRSAEncryption 60:3c:65:13:85:45:51:38:da:74:1a:69:fb:56:b7:07:b1:fa: 9d:94:84:c6:32:56:c6:32:d8:86:8d:e7:c8:61:97:e5:25:09: f8:30:94:38:69:4b:c1:95:92:06:c5:37:02:bf:9b:34:16:d5: 45:2e:dc:39:8e:32:fa:d8:12:1f:a6:7d:cd:45:72:e2:b8:61: be:52:d9:53:83:6f:27:84:51:ea:c0:7a:b3:e7:75:d9:db:d9: 94:3b:65:b7:0d:b5:5b:17:1a:cc:76:c5:a8:36:f7:2c:b5:79: 43:3c:49:19:40:6a:62:4d:46:c6:34:ac:79:68:ee:36:f0:3d: f9:5f:e4:de:ff:ed:e9:cd:1f:1b:f6:45:52:9b:9f:37:80:de: e0:8d:f5:8f:31:5b:bd:5e:61:ad:24:c6:a8:19:67:8c:a5:09: a5:25:0c:01:9f:15:66:cb:5d:8e:cf:b9:73:06:9c:f1:29:5b: 56:22:cd:5f:2c:a4:3a:46:1e:1b:0f:87:36:ac:f4:7a:49:ad: c7:b8:2e:c4:39:6e:86:01:a2:cb:52:01:b5:9b:0e:6e:70:39: 6b:b7:dc:68:9a:7a:5d:03:f5:b5:0f:cb:97:17:06:2d:d6:d3: 1b:d2:3f:c5:e0:ce:99:26:56:d8:41:ca:53:43:ed:43:87:eb: 17:ad:87:77 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI2MDMzMTA4 MzEzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzc4OTcwNDEzNDI3MkEz QjBCRTQ1MjMzQ0E4NTAzRDdDM0MzMEIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALya8zOt2htMvW7C56d3BEVWOetX5D4DafjJXBp8L2EdSudLo4QJ BqA7+nK0LKti07wVZkf6GbD0ZrhKLY3Wy0g1I4RCYVII4nsXExTmxsAsTGdhzSU1 W9lzHUM+z9uu3uO6RDKwXLdfRV2uw0onp/Hn3us0/S6huXaM8RzC64RNOKVBqlp+ 2856iLYaiMNfjZzySgzFy+QIJ2feWPtulVwiGEQeefBq3+q+azOQX9q42nhn+R8f k/NhEARGpvpCiMxcrFjCHqRITT8dex3KaZMdKQUlNzNfRV/FZNoPNrFjj2UNZsFB 7q+8+VB2c1R+FzI1+/DxfbzbbkjvM5dVTjUCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBQ3iXBBNCcqOwvkUjPKhQPXw8MLHzAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDQwL040bHdRVFFuS2pzTDVGSXp5b1VEMThQREN4OC5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQz4AAUwDQYJKoZIhvcNAQEL BQADggEBAGA8ZROFRVE42nQaaftWtwex+p2UhMYyVsYy2IaN58hhl+UlCfgwlDhp S8GVkgbFNwK/mzQW1UUu3DmOMvrYEh+mfc1FcuK4Yb5S2VODbyeEUerAerPnddnb 2ZQ7ZbcNtVsXGsx2xag29yy1eUM8SRlAamJNRsY0rHlo7jbwPflf5N7/7enNHxv2 RVKbnzeA3uCN9Y8xW71eYa0kxqgZZ4ylCaUlDAGfFWbLXY7PuXMGnPEpW1YizV8s pDpGHhsPhzas9HpJrce4LsQ5boYBostSAbWbDm5wOWu33Giael0D9bUPy5cXBi3W 0xvSP8XgzpkmVthBylND7UOH6xeth3c= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:58 2026 by rpki-client