$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SiPyPwy9GAOJ0zib0mtlr_sHHKc.roa File: SiPyPwy9GAOJ0zib0mtlr_sHHKc.roa (raw, json) Hash identifier: +ImFsM5winwmVA2wWEpn48yHVPpMLXvgCMZFz3FGrNI= Subject key identifier: 4A:23:F2:3F:0C:BD:18:03:89:D3:38:9B:D2:6B:65:AF:FB:07:1C:A7 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 073A Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SiPyPwy9GAOJ0zib0mtlr_sHHKc.roa Signing time: Tue 31 Mar 2026 08:27:27 +0000 ROA not before: Tue 31 Mar 2026 08:27:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 240a:70:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Mar 31 08:27:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4A23F23F0CBD180389D3389BD26B65AFFB071CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:94:e1:b9:f0:70:2c:55:25:d3:67:51:f0: 87:06:56:be:d2:40:ca:15:2c:37:fd:1c:2e:91:3a: c1:42:ba:6a:2b:cc:c1:3b:a5:f0:30:52:a8:bb:ee: 9c:d4:89:d9:61:29:cb:b5:a7:9e:3c:d9:b3:33:ad: c7:9f:6a:fd:0e:fe:d1:6a:aa:7e:f0:bd:28:e9:65: aa:fe:94:cf:4b:44:4a:fa:52:99:1f:c7:f9:29:f6: c6:b7:d9:42:41:56:b3:7c:5b:7f:1c:38:58:ae:11: 06:78:14:03:f1:06:9e:32:ed:15:37:4a:8b:97:4f: 78:77:f5:b8:fc:54:0a:d8:0d:c3:2f:46:ae:d2:60: 2d:a9:8a:18:cf:2c:5b:bc:2f:8f:5f:51:b3:c6:6f: 9e:9f:86:03:6c:5d:e8:ec:06:8d:a1:6c:3a:c4:a5: e9:fa:4c:5b:25:cf:fa:f9:fb:62:ec:16:12:d5:78: 8c:5a:f2:bb:45:7a:33:24:d6:b2:41:b9:9e:08:6e: a7:41:79:20:59:d0:d1:61:af:2f:b9:64:6a:80:bc: 59:1a:e7:6d:a0:23:ab:5d:b7:24:20:de:05:89:d5: e5:5c:a3:70:49:2c:1f:76:c8:d9:6e:00:f8:a4:56: 6b:b6:78:6c:ae:fc:54:6e:64:74:9a:2e:af:f2:f3: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:23:F2:3F:0C:BD:18:03:89:D3:38:9B:D2:6B:65:AF:FB:07:1C:A7 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SiPyPwy9GAOJ0zib0mtlr_sHHKc.roa sbgp-ipAddrBlock: critical IPv6: 240a:70:8::/48 Signature Algorithm: sha256WithRSAEncryption 4d:b5:87:98:96:cd:84:99:bc:6d:44:3f:c8:b6:ac:ee:98:09: 7d:1f:e7:6f:ee:85:bf:b0:60:98:3c:31:0a:ea:3e:14:dd:4e: ad:af:1c:14:8f:15:60:44:d7:ac:2e:d4:88:c8:4d:9a:fd:7d: be:66:dc:ce:bb:59:54:39:11:fe:3d:ee:a1:af:b3:24:04:7d: 44:90:bb:51:a3:c9:c2:6d:94:d9:ba:7a:d8:52:f8:22:b7:e5: 74:b0:21:b1:74:f4:be:c0:72:59:25:b4:1a:1a:ad:1f:d7:5a: 82:7e:ca:db:ac:1f:e1:8e:1b:51:59:b7:25:e2:aa:10:57:f7: f1:0d:44:aa:45:ad:c7:1c:21:91:2a:bf:66:ef:f4:fd:0a:55: 93:c3:1a:f0:e1:6c:2e:c3:92:bb:84:b8:38:f6:a6:81:93:83: fa:9b:83:71:66:45:b6:40:9a:e1:ab:e8:cd:3d:31:2c:46:58: 68:83:6f:b5:b7:cd:0d:10:fa:c8:b1:45:96:12:a2:59:52:0a: e1:5a:1b:86:3d:88:4d:3c:03:4d:eb:8f:40:d5:d5:63:0c:00: 04:24:a3:31:7a:8a:c0:7e:75:54:fe:29:a8:e1:fc:a5:58:05: ae:68:4d:68:7c:19:aa:39:14:8a:da:d6:df:85:0d:12:38:d9: 00:da:46:5d -----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw ODI3MjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRBMjNGMjNGMENCRDE4 MDM4OUQzMzg5QkQyNkI2NUFGRkIwNzFDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/P5ThufBwLFUl02dR8IcGVr7SQMoVLDf9HC6ROsFCumorzME7 pfAwUqi77pzUidlhKcu1p5482bMzrcefav0O/tFqqn7wvSjpZar+lM9LREr6Upkf x/kp9sa32UJBVrN8W38cOFiuEQZ4FAPxBp4y7RU3SouXT3h39bj8VArYDcMvRq7S YC2pihjPLFu8L49fUbPGb56fhgNsXejsBo2hbDrEpen6TFslz/r5+2LsFhLVeIxa 8rtFejMk1rJBuZ4IbqdBeSBZ0NFhry+5ZGqAvFka522gI6tdtyQg3gWJ1eVco3BJ LB92yNluAPikVmu2eGyu/FRuZHSaLq/y86DdAgMBAAGjggHgMIIB3DAdBgNVHQ4E FgQUSiPyPwy9GAOJ0zib0mtlr/sHHKcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDEyOS9TaVB5UHd5OUdBT0owemliMG10bHJfc0hIS2Mucm9h MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAoAcAAIMA0GCSqGSIb3DQEB CwUAA4IBAQBNtYeYls2EmbxtRD/ItqzumAl9H+dv7oW/sGCYPDEK6j4U3U6trxwU jxVgRNesLtSIyE2a/X2+ZtzOu1lUORH+Pe6hr7MkBH1EkLtRo8nCbZTZunrYUvgi t+V0sCGxdPS+wHJZJbQaGq0f11qCfsrbrB/hjhtRWbcl4qoQV/fxDUSqRa3HHCGR Kr9m7/T9ClWTwxrw4Wwuw5K7hLg49qaBk4P6m4NxZkW2QJrhq+jNPTEsRlhog2+1 t80NEPrIsUWWEqJZUgrhWhuGPYhNPANN649A1dVjDAAEJKMxeorAfnVU/imo4fyl WAWuaE1ofBmqORSK2tbfhQ0SONkA2kZd -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:39 2026 by rpki-client