$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/yue-aFwSKnxTQppL1LbIbkoM600.roa File: yue-aFwSKnxTQppL1LbIbkoM600.roa (raw, json) Hash identifier: yGCTQrULc6nr8HUA3qKn6WJOEoh/dwAMFS6CSCMOQVw= Subject key identifier: CA:E7:BE:68:5C:12:2A:7C:53:42:9A:4B:D4:B6:C8:6E:4A:0C:EB:4D Certificate issuer: /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D Certificate serial: 6A Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/yue-aFwSKnxTQppL1LbIbkoM600.roa Signing time: Tue 31 Mar 2026 07:37:10 +0000 ROA not before: Tue 31 Mar 2026 07:37:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 2400:4000::/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D Validity Not Before: Mar 31 07:37:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CAE7BE685C122A7C53429A4BD4B6C86E4A0CEB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:f3:ab:a8:b0:45:9a:a6:2c:91:2d:f3:14: 63:cf:36:57:17:90:7a:1b:f7:9a:73:88:44:c7:03: 12:b1:99:3e:18:94:5f:b9:f5:57:fd:18:b3:2f:db: c1:92:3c:af:6f:1c:29:0b:f3:b8:16:67:c3:05:53: ab:14:a2:91:85:8b:63:e6:0c:3d:e7:95:b8:f4:2d: 2e:51:b0:2f:c6:7c:f5:ff:2e:2d:a1:0e:0a:82:ae: 80:df:fe:66:5a:fc:a3:35:bc:4c:15:c0:9c:11:0f: 02:a9:36:fe:a6:fb:a4:07:ca:07:08:52:d7:c5:36: 3f:7b:f8:ab:b0:be:e7:6b:03:fd:89:ad:00:00:bc: 2b:da:fe:4a:8a:95:c6:c2:c4:b4:ab:24:aa:54:47: 1b:cf:e7:cb:30:34:9e:b1:a2:d5:5e:62:e8:9d:1a: e1:e7:b2:d4:f7:8d:62:54:64:0f:73:4c:b3:e1:7a: b4:56:63:60:48:48:b4:0a:f8:8b:97:78:64:a5:79: e9:71:e4:de:9a:de:c3:bf:3a:85:98:07:39:3d:51: f1:da:0c:8c:ba:b2:7a:9a:81:2f:c2:e4:b7:a1:49: 0e:de:95:25:dc:d4:87:f3:75:14:e7:58:58:0e:79: 2e:26:a3:6a:6c:21:eb:ce:46:3f:5c:ca:b3:2a:7b: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:BE:68:5C:12:2A:7C:53:42:9A:4B:D4:B6:C8:6E:4A:0C:EB:4D X509v3 Authority Key Identifier: keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/yue-aFwSKnxTQppL1LbIbkoM600.roa sbgp-ipAddrBlock: critical IPv6: 2400:4000::/22 Signature Algorithm: sha256WithRSAEncryption 12:2b:e7:b3:9a:f7:3a:44:8c:40:75:95:b4:40:bf:86:18:f5: 84:8d:00:26:ee:7d:d3:dd:66:dd:b4:24:aa:a0:0d:93:55:ed: bb:b7:c8:62:d5:ff:ee:e0:d4:a2:39:c4:9a:02:a3:a7:04:ef: 43:91:9a:21:ef:ef:7d:85:b1:7b:6f:83:46:1d:ab:d3:a6:9d: c7:ff:ac:9b:ad:8d:2f:26:75:0d:32:44:12:0b:6b:d2:c2:be: 0c:c5:10:cc:fd:12:04:49:91:ff:b4:24:54:01:0f:ff:34:b3: 9e:cc:b0:9c:de:e9:cc:a4:0f:e1:7e:d2:dc:1a:65:a1:b5:e4: c2:84:c4:5c:bf:f6:fc:72:95:0c:9a:4e:04:d8:27:3e:6f:04: 3f:2d:17:c4:41:71:4b:b6:25:6e:b0:96:be:92:78:a9:53:97: 5a:75:ce:ef:ff:dc:14:a4:98:5a:4d:a7:eb:6c:a7:30:64:5b: 61:85:e0:b3:2d:ac:26:4a:59:35:d3:b0:9a:4a:10:3c:97:f0: 3f:e5:5a:d3:81:46:55:69:e3:36:e6:d5:c9:30:83:67:e4:7b: 1c:64:14:b0:49:c4:9e:e3:2e:bb:67:e6:9a:04:97:ad:fb:07: d0:ec:5a:c4:16:15:14:f4:b0:87:02:d5:41:c0:c2:5d:9e:4d: dd:4f:19:64 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0M3 QTE5ODA0RjcyOEU4RkY1RTQ1QkVDOERBNTgyMTA1QTNEQTlEMB4XDTI2MDMzMTA3 MzcxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0FFN0JFNjg1QzEyMkE3 QzUzNDI5QTRCRDRCNkM4NkU0QTBDRUI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOll86uosEWapiyRLfMUY882VxeQehv3mnOIRMcDErGZPhiUX7n1 V/0Ysy/bwZI8r28cKQvzuBZnwwVTqxSikYWLY+YMPeeVuPQtLlGwL8Z89f8uLaEO CoKugN/+Zlr8ozW8TBXAnBEPAqk2/qb7pAfKBwhS18U2P3v4q7C+52sD/YmtAAC8 K9r+SoqVxsLEtKskqlRHG8/nyzA0nrGi1V5i6J0a4eey1PeNYlRkD3NMs+F6tFZj YEhItAr4i5d4ZKV56XHk3prew786hZgHOT1R8doMjLqyepqBL8Lkt6FJDt6VJdzU h/N1FOdYWA55Liajamwh685GP1zKsyp77ekCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBTK575oXBIqfFNCmkvUtshuSgzrTTAfBgNVHSMEGDAWgBSzx6GYBPco6P9eRb7I 2lghBaPanTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzMvczhlaG1BVDNLT2pfWGtXLXlOcFlJUVdqMnAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczhlaG1BVDNLT2pfWGtXLXlOcFlJ UVdqMnAwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDczL3l1ZS1hRndTS254VFFwcEwxTGJJYmtvTTYwMC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgACMAYDBAIkAEAwDQYJKoZIhvcNAQELBQAD ggEBABIr57Oa9zpEjEB1lbRAv4YY9YSNACbufdPdZt20JKqgDZNV7bu3yGLV/+7g 1KI5xJoCo6cE70ORmiHv732FsXtvg0Ydq9Omncf/rJutjS8mdQ0yRBILa9LCvgzF EMz9EgRJkf+0JFQBD/80s57MsJze6cykD+F+0twaZaG15MKExFy/9vxylQyaTgTY Jz5vBD8tF8RBcUu2JW6wlr6SeKlTl1p1zu//3BSkmFpNp+tspzBkW2GF4LMtrCZK WTXTsJpKEDyX8D/lWtOBRlVp4zbm1ckwg2fkexxkFLBJxJ7jLrtn5poEl637B9Ds WsQWFRT0sIcC1UHAwl2eTd1PGWQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:58 2026 by rpki-client