$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/ivDe82b1D6y4LKlxKGeIRJ38KpE.roa File: ivDe82b1D6y4LKlxKGeIRJ38KpE.roa (raw, json) Hash identifier: v1ZEV/ThyOOYEpYIHTlkJs2O8dWpICMcWt+gmhB5CwM= Subject key identifier: 8A:F0:DE:F3:66:F5:0F:AC:B8:2C:A9:71:28:67:88:44:9D:FC:2A:91 Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 3B Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/ivDe82b1D6y4LKlxKGeIRJ38KpE.roa Signing time: Tue 31 Mar 2026 08:31:33 +0000 ROA not before: Tue 31 Mar 2026 08:31:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9619 IP address blocks: 2001:cf8:ace::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: Mar 31 08:31:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8AF0DEF366F50FACB82CA971286788449DFC2A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:96:60:68:f1:54:fb:90:97:a2:9c:6a:a7: 0c:27:8f:2b:3a:18:f3:7d:c3:cf:8f:e8:68:02:fd: c2:94:6a:2b:ee:e5:e4:f1:6f:75:ea:db:36:02:6e: 6f:4b:7d:46:00:4e:68:3b:4e:05:ce:7d:b6:95:4d: 89:5c:75:68:3f:1f:90:82:ee:d7:c6:73:ef:8f:3d: a9:c8:21:85:c1:f2:b1:c8:39:04:d6:32:fb:ef:7c: d7:65:93:11:e5:78:7d:4e:78:5c:01:66:4c:d1:24: 11:61:e2:b2:6a:5e:aa:7e:cf:52:57:c4:c5:82:7f: 9e:05:bd:e4:c5:f5:d8:18:92:08:06:27:87:18:34: 8b:92:6d:16:e1:0f:a1:7b:f2:22:05:ac:4e:f4:df: 52:8c:b4:df:a5:36:6b:cc:e1:37:87:f8:0b:26:3b: 81:b9:60:3f:73:92:e2:04:4d:6c:91:4d:4d:1c:90: 0e:43:84:4d:8a:41:8e:18:b5:5b:00:ef:a7:14:f4: 76:c3:0d:09:f5:69:bd:df:ab:fa:9b:92:80:bd:07: 0d:6d:21:de:95:2c:fd:cf:5b:78:93:de:90:05:fe: 3f:c9:9d:41:8b:6e:4e:03:47:d2:70:0a:5c:38:56: 33:75:ac:26:c5:9f:b4:c2:dd:03:35:96:56:d5:bb: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:DE:F3:66:F5:0F:AC:B8:2C:A9:71:28:67:88:44:9D:FC:2A:91 X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/ivDe82b1D6y4LKlxKGeIRJ38KpE.roa sbgp-ipAddrBlock: critical IPv6: 2001:cf8:ace::/48 Signature Algorithm: sha256WithRSAEncryption 48:6f:1c:45:18:a6:e4:06:83:c0:34:4e:8c:96:47:de:e5:67: 95:d8:1e:30:e7:76:08:37:4e:7b:a7:bf:e8:ee:3c:da:ec:c5: a8:bd:17:0a:2d:3a:33:b1:f7:46:60:fc:5f:28:73:b2:7b:37: a4:61:5e:f3:6a:ef:2d:f7:6c:16:4a:d6:6a:fe:6e:de:e8:c5: 0f:e4:3a:1f:17:59:57:ff:45:0e:57:0e:cf:0c:50:94:93:63: f2:fc:c6:5e:45:66:4f:61:9d:8c:36:41:a4:45:2d:e9:6a:fb: 78:fb:ac:ed:3c:6f:ba:f1:f5:7d:33:ce:1c:14:55:e9:a6:46: 71:b1:e4:e4:c8:44:72:a5:27:7c:35:99:aa:c1:33:e1:67:ab: 36:12:75:87:61:0f:c7:3c:c6:d7:a9:cb:84:be:b4:2d:d1:ca: c5:ad:bb:a9:c4:ba:92:32:74:bb:88:90:ab:17:a2:86:e3:3a: 26:cf:32:f8:63:81:b6:c2:4c:a4:0b:33:64:f4:c4:e8:90:4f: d0:f2:fa:c7:75:2e:c1:36:4a:5c:0e:e7:92:cb:87:29:2a:b2: f5:90:f3:68:83:ad:1d:cb:7d:fb:93:be:2e:9f:ee:31:5b:38: 8f:bc:66:2d:79:e5:b3:be:de:e5:b4:9e:25:62:81:23:eb:f9: 7e:f7:e9:70 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI2MDMzMTA4 MzEzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEFGMERFRjM2NkY1MEZB Q0I4MkNBOTcxMjg2Nzg4NDQ5REZDMkE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALPblmBo8VT7kJeinGqnDCePKzoY833Dz4/oaAL9wpRqK+7l5PFv derbNgJub0t9RgBOaDtOBc59tpVNiVx1aD8fkILu18Zz7489qcghhcHyscg5BNYy ++9812WTEeV4fU54XAFmTNEkEWHismpeqn7PUlfExYJ/ngW95MX12BiSCAYnhxg0 i5JtFuEPoXvyIgWsTvTfUoy036U2a8zhN4f4CyY7gblgP3OS4gRNbJFNTRyQDkOE TYpBjhi1WwDvpxT0dsMNCfVpvd+r+puSgL0HDW0h3pUs/c9beJPekAX+P8mdQYtu TgNH0nAKXDhWM3WsJsWftMLdAzWWVtW7jJMCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBSK8N7zZvUPrLgsqXEoZ4hEnfwqkTAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDQwL2l2RGU4MmIxRDZ5NExLbHhLR2VJUkozOEtwRS5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQz4Cs4wDQYJKoZIhvcNAQEL BQADggEBAEhvHEUYpuQGg8A0ToyWR97lZ5XYHjDndgg3Tnunv+juPNrsxai9Fwot OjOx90Zg/F8oc7J7N6RhXvNq7y33bBZK1mr+bt7oxQ/kOh8XWVf/RQ5XDs8MUJST Y/L8xl5FZk9hnYw2QaRFLelq+3j7rO08b7rx9X0zzhwUVemmRnGx5OTIRHKlJ3w1 marBM+FnqzYSdYdhD8c8xtepy4S+tC3RysWtu6nEupIydLuIkKsXoobjOibPMvhj gbbCTKQLM2T0xOiQT9Dy+sd1LsE2SlwO55LLhykqsvWQ82iDrR3LffuTvi6f7jFb OI+8Zi155bO+3uW0niVigSPr+X736XA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:19 2026 by rpki-client