$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nUZtrMuVMVkYU03EXtvc8fnOKkE.roa File: nUZtrMuVMVkYU03EXtvc8fnOKkE.roa (raw, json) Hash identifier: WPoE13/C382fgxv9yjAlEYjwN0cJH4GK3BM8uHSegpA= Subject key identifier: 9D:46:6D:AC:CB:95:31:59:18:53:4D:C4:5E:DB:DC:F1:F9:CE:2A:41 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0671 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nUZtrMuVMVkYU03EXtvc8fnOKkE.roa Signing time: Tue 31 Mar 2026 08:25:51 +0000 ROA not before: Tue 31 Mar 2026 08:25:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 240a:70:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Mar 31 08:25:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9D466DACCB95315918534DC45EDBDCF1F9CE2A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6d:cc:be:f5:79:a0:7d:c0:d2:65:dd:a8:e0: 82:92:c6:6b:0b:ff:fc:3f:39:c6:e9:7e:84:8a:d5: 6c:b7:f9:ff:a2:08:e9:3d:14:55:44:7d:00:bd:39: ec:3a:79:67:b9:1d:f0:57:9c:8b:7c:94:2e:82:f9: d9:a9:14:e0:8a:13:bb:ad:31:e3:24:ab:e2:98:90: a5:60:26:0d:1d:0d:1c:f6:e6:11:27:9e:d1:ba:62: 0d:d5:2d:82:9c:2b:0f:20:3e:22:59:19:14:9f:7e: 66:06:d4:39:99:97:2a:c3:d2:47:b5:83:70:62:90: 47:e7:b7:54:9d:0d:9f:cb:45:12:d3:11:6a:c0:35: 3e:2b:3b:60:01:6f:bb:f3:4c:de:08:dc:6a:ed:ef: fb:3f:49:ea:27:38:c8:94:cd:88:25:ef:f4:c0:67: 52:fd:0a:2a:44:9a:33:bf:bd:01:04:ee:b4:d4:22: ea:35:ba:48:7f:b6:6a:b8:33:c3:45:0b:5e:a6:8a: 9b:0e:d7:c2:35:db:22:48:48:a7:0b:5c:42:30:3a: 03:e8:a8:08:8a:9f:35:d7:1a:29:7c:fe:76:72:4b: de:50:25:c0:1b:c1:aa:aa:7d:09:af:7f:d8:0a:f2: 08:a0:c4:9a:a9:c9:1a:5f:6d:c0:4b:c8:05:e2:e3: 22:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:46:6D:AC:CB:95:31:59:18:53:4D:C4:5E:DB:DC:F1:F9:CE:2A:41 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nUZtrMuVMVkYU03EXtvc8fnOKkE.roa sbgp-ipAddrBlock: critical IPv6: 240a:70:1::/48 Signature Algorithm: sha256WithRSAEncryption bf:ad:50:ef:0d:51:11:e2:c6:80:8f:a2:60:90:2a:cc:f0:2f: 93:00:f6:f2:00:b2:bb:ed:b0:af:1f:66:eb:03:45:85:6a:20: 87:e3:2c:57:06:18:d7:c3:14:a4:a8:48:04:93:63:e7:4c:76: 02:96:6d:77:c2:79:d9:c7:27:b4:81:da:1e:98:d1:19:56:3a: 8a:6a:4d:b3:42:d3:91:42:18:72:f1:e7:a8:e1:1f:6d:3e:c6: 62:ee:f6:11:8d:4a:8c:ac:1a:76:c7:74:b3:b3:da:0f:6a:60: cd:fd:64:d4:ce:62:c0:97:f5:db:48:01:88:8e:1b:a5:04:6d: 34:f1:f2:25:ac:18:5f:bc:0a:7c:a3:ce:96:4a:ea:48:e6:25: 5e:1f:ac:32:59:e3:0a:b0:d9:9a:c2:96:6b:f1:9d:4b:1e:ae: 6c:46:97:87:42:2e:46:45:84:ac:67:4a:80:1d:d6:14:4c:c8: fd:a9:32:34:5e:e1:14:ca:8a:83:d5:d9:34:a1:79:ec:78:d5: f4:80:bd:06:a1:b2:16:fc:b9:9b:37:78:26:ce:b8:03:58:4e: de:80:67:ef:51:44:28:53:0d:ff:0a:67:36:dc:9e:cb:02:b6: 32:0a:6b:39:d0:59:48:03:bc:8f:58:27:92:ac:26:9a:25:be: 74:96:9f:48 -----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw ODI1NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlENDY2REFDQ0I5NTMx NTkxODUzNERDNDVFREJEQ0YxRjlDRTJBNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwbcy+9XmgfcDSZd2o4IKSxmsL//w/OcbpfoSK1Wy3+f+iCOk9 FFVEfQC9Oew6eWe5HfBXnIt8lC6C+dmpFOCKE7utMeMkq+KYkKVgJg0dDRz25hEn ntG6Yg3VLYKcKw8gPiJZGRSffmYG1DmZlyrD0ke1g3BikEfnt1SdDZ/LRRLTEWrA NT4rO2ABb7vzTN4I3Grt7/s/SeonOMiUzYgl7/TAZ1L9CipEmjO/vQEE7rTUIuo1 ukh/tmq4M8NFC16mipsO18I12yJISKcLXEIwOgPoqAiKnzXXGil8/nZyS95QJcAb waqqfQmvf9gK8gigxJqpyRpfbcBLyAXi4yLjAgMBAAGjggHgMIIB3DAdBgNVHQ4E FgQUnUZtrMuVMVkYU03EXtvc8fnOKkEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDEyOS9uVVp0ck11Vk1Wa1lVMDNFWHR2Yzhmbk9La0Uucm9h MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAoAcAABMA0GCSqGSIb3DQEB CwUAA4IBAQC/rVDvDVER4saAj6JgkCrM8C+TAPbyALK77bCvH2brA0WFaiCH4yxX BhjXwxSkqEgEk2PnTHYClm13wnnZxye0gdoemNEZVjqKak2zQtORQhhy8eeo4R9t PsZi7vYRjUqMrBp2x3Szs9oPamDN/WTUzmLAl/XbSAGIjhulBG008fIlrBhfvAp8 o86WSupI5iVeH6wyWeMKsNmawpZr8Z1LHq5sRpeHQi5GRYSsZ0qAHdYUTMj9qTI0 XuEUyoqD1dk0oXnseNX0gL0GobIW/LmbN3gmzrgDWE7egGfvUUQoUw3/Cmc23J7L ArYyCms50FlIA7yPWCeSrCaaJb50lp9I -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:55 2026 by rpki-client