$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/-GFYOvCC0Gr051MPDKbcXnNXvLQ.roa File: -GFYOvCC0Gr051MPDKbcXnNXvLQ.roa (raw, json) Hash identifier: +5hn9VnjI6oDtsAO56LcW85A1rpNzhiMIPbI4FlBtDc= Subject key identifier: F8:61:58:3A:F0:82:D0:6A:F4:E7:53:0F:0C:A6:DC:5E:73:57:BC:B4 Certificate issuer: /CN=395D892753C1595E076B5F10065A048661C3079E Certificate serial: 72 Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/-GFYOvCC0Gr051MPDKbcXnNXvLQ.roa Signing time: Tue 31 Mar 2026 07:32:20 +0000 ROA not before: Tue 31 Mar 2026 07:32:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2515 IP address blocks: 2001:dc2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395D892753C1595E076B5F10065A048661C3079E Validity Not Before: Mar 31 07:32:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F861583AF082D06AF4E7530F0CA6DC5E7357BCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:64:44:89:cf:da:4e:62:76:5b:66:f3:94: c4:45:4d:1c:41:28:ee:3b:87:df:57:7f:9d:39:22: 75:c7:74:76:c4:35:c2:f2:bc:96:8c:9f:b6:22:54: 11:64:df:fe:b2:ac:89:ac:6a:c4:cd:01:6f:b4:e9: 6d:90:59:52:a9:3a:65:6f:b6:55:b4:20:87:43:4b: ff:ab:d8:68:2c:f0:ab:d8:a4:4c:06:1d:da:97:14: 33:00:1a:f6:43:12:8b:12:50:2f:de:f9:71:95:10: 5e:8e:1a:29:9d:5c:6d:7f:ec:32:01:33:66:bc:d0: 43:77:55:16:3b:1b:c8:15:be:17:6d:38:54:dc:cc: 48:de:77:2f:38:b8:b7:ff:aa:13:2e:88:8c:72:8e: 6e:e1:fb:3e:b3:d3:46:08:e6:55:72:b9:2e:30:c1: 2c:85:4d:e5:87:4b:5c:9e:63:70:c0:b8:f3:ee:c1: 5e:76:00:7d:fa:f4:95:01:1c:88:f7:b1:73:f6:be: df:44:63:16:29:18:3f:14:b6:db:ad:7a:e7:1b:e8: bd:20:e3:c2:58:38:76:a4:1b:ca:fc:e3:f8:be:89: 6b:6c:ab:23:75:12:26:55:19:a8:f8:c5:2a:49:3f: 40:4b:6f:26:e2:df:f5:62:7b:9d:65:94:75:57:9f: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:58:3A:F0:82:D0:6A:F4:E7:53:0F:0C:A6:DC:5E:73:57:BC:B4 X509v3 Authority Key Identifier: keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/-GFYOvCC0Gr051MPDKbcXnNXvLQ.roa sbgp-ipAddrBlock: critical IPv6: 2001:dc2::/32 Signature Algorithm: sha256WithRSAEncryption 7c:1d:95:57:2a:76:2c:1d:eb:a5:0a:3a:83:d2:d9:28:70:69: 90:61:f7:3b:75:1d:bc:d7:53:fa:90:f6:e5:a6:2e:da:e1:fe: ac:3a:ae:58:24:c7:26:8a:2f:a4:8f:72:90:54:f8:9d:e3:c9: 35:85:eb:47:d6:d2:73:ce:0b:17:b5:4e:54:a2:57:59:57:a4: 35:16:14:40:73:8c:27:a0:f3:63:46:ce:0a:b3:36:e0:e1:f3: d7:9c:b7:ca:f3:87:30:dc:43:55:81:be:34:55:bd:8a:55:90: 4f:aa:82:4d:4f:60:6c:6c:f2:50:91:09:46:9e:a3:34:59:8c: 0c:64:1d:20:f3:72:60:04:9c:bf:55:05:b0:01:6d:45:1e:eb: 51:cf:c9:a4:fc:4d:07:3c:33:1b:7c:59:b9:38:ca:76:d5:2a: eb:c3:99:25:5f:c9:d9:44:cd:08:ba:69:c6:cf:77:06:55:fd: b8:34:23:a0:d1:d6:6b:b0:b6:35:50:1b:16:8d:a1:74:84:8b: bf:14:0d:ca:81:43:b6:14:bc:bd:f5:74:ff:14:6d:69:31:04: 92:7e:81:ae:56:e8:eb:11:98:b3:b7:36:f4:5d:1d:5e:bb:64: 36:c0:b2:12:a1:e2:fb:16:37:c0:09:68:d8:41:21:5b:83:c7: 1c:b5:7a:95 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOTVE ODkyNzUzQzE1OTVFMDc2QjVGMTAwNjVBMDQ4NjYxQzMwNzlFMB4XDTI2MDMzMTA3 MzIyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjg2MTU4M0FGMDgyRDA2 QUY0RTc1MzBGMENBNkRDNUU3MzU3QkNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALpdZESJz9pOYnZbZvOUxEVNHEEo7juH31d/nTkidcd0dsQ1wvK8 loyftiJUEWTf/rKsiaxqxM0Bb7TpbZBZUqk6ZW+2VbQgh0NL/6vYaCzwq9ikTAYd 2pcUMwAa9kMSixJQL975cZUQXo4aKZ1cbX/sMgEzZrzQQ3dVFjsbyBW+F204VNzM SN53Lzi4t/+qEy6IjHKObuH7PrPTRgjmVXK5LjDBLIVN5YdLXJ5jcMC48+7BXnYA ffr0lQEciPexc/a+30RjFikYPxS226165xvovSDjwlg4dqQbyvzj+L6Ja2yrI3US JlUZqPjFKkk/QEtvJuLf9WJ7nWWUdVefaSMCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBT4YVg68ILQavTnUw8Mptxec1e8tDAfBgNVHSMEGDAWgBQ5XYknU8FZXgdrXxAG WgSGYcMHnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDUvT1YySkoxUEJXVjRIYTE4UUJsb0VobUhEQjU0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT1YySkoxUEJXVjRIYTE4UUJsb0Vo bUhEQjU0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDQ1Ly1HRllPdkNDMEdyMDUxTVBES2JjWG5OWHZMUS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ3CMA0GCSqGSIb3DQEBCwUA A4IBAQB8HZVXKnYsHeulCjqD0tkocGmQYfc7dR2811P6kPblpi7a4f6sOq5YJMcm ii+kj3KQVPid48k1hetH1tJzzgsXtU5UoldZV6Q1FhRAc4wnoPNjRs4Kszbg4fPX nLfK84cw3ENVgb40Vb2KVZBPqoJNT2BsbPJQkQlGnqM0WYwMZB0g83JgBJy/VQWw AW1FHutRz8mk/E0HPDMbfFm5OMp21Srrw5klX8nZRM0IumnGz3cGVf24NCOg0dZr sLY1UBsWjaF0hIu/FA3KgUO2FLy99XT/FG1pMQSSfoGuVujrEZiztzb0XR1eu2Q2 wLISoeL7FjfACWjYQSFbg8cctXqV -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:11 2026 by rpki-client