$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/AsXQFFllWUs7Lx2gWcQEskwiv3M.roa File: AsXQFFllWUs7Lx2gWcQEskwiv3M.roa (raw, json) Hash identifier: lThvz2n55kabVdspT8zJME044hEWcB8DRsCwosHk/i8= Subject key identifier: 02:C5:D0:14:59:65:59:4B:3B:2F:1D:A0:59:C4:04:B2:4C:22:BF:73 Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Certificate serial: 20 Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/AsXQFFllWUs7Lx2gWcQEskwiv3M.roa Signing time: Tue 31 Mar 2026 08:44:37 +0000 ROA not before: Tue 31 Mar 2026 08:44:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17953 IP address blocks: 2404:7a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Validity Not Before: Mar 31 08:44:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=02C5D0145965594B3B2F1DA059C404B24C22BF73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:62:d2:60:7a:d6:69:73:7b:59:57:48:07: a5:ef:61:e3:b2:d1:c5:82:68:19:40:68:59:3b:54: 76:3f:2d:ae:ce:11:46:5b:6d:a8:cb:0e:6b:d8:ee: 09:c6:10:9b:d5:bc:db:2a:8d:e5:ba:8b:e4:c0:d1: e9:3a:9b:b9:0d:51:9e:0a:25:a1:d7:b9:7a:8b:7a: 1a:30:b2:89:a5:c4:ee:68:7d:13:db:10:66:d4:5a: ea:71:23:89:cd:55:bb:ad:c1:dd:ee:27:e3:40:5b: 4b:fe:ef:ad:be:c8:ec:86:c2:9e:e6:2c:eb:eb:83: 9e:49:bf:c6:cf:7d:bf:ed:ed:59:0f:39:81:3e:6a: 9c:7c:ba:ec:67:56:4c:e8:df:df:95:13:32:7b:70: 74:43:90:c6:3b:f9:0c:f1:da:1f:a7:72:07:bf:46: be:f4:be:2d:cb:e1:89:45:90:fa:13:62:1b:88:5f: 42:b5:c4:0e:29:f9:6a:54:f8:97:da:11:05:18:be: c7:a1:41:3c:15:cc:2d:fe:83:6f:c8:c8:46:6c:05: cb:e6:f1:50:5a:af:7d:d6:5d:0b:d4:5d:7f:eb:18: c2:97:39:51:2a:be:d8:04:cf:47:40:57:64:e0:a9: 7c:02:26:36:48:e3:a6:f4:32:8d:7e:de:74:2c:09: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C5:D0:14:59:65:59:4B:3B:2F:1D:A0:59:C4:04:B2:4C:22:BF:73 X509v3 Authority Key Identifier: keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/AsXQFFllWUs7Lx2gWcQEskwiv3M.roa sbgp-ipAddrBlock: critical IPv6: 2404:7a00::/32 Signature Algorithm: sha256WithRSAEncryption 56:f5:bd:9d:bc:23:c2:77:2f:f0:d1:b1:c3:dc:6b:a6:f2:64: 8f:8c:41:05:5a:ea:31:74:9e:46:ef:58:e1:19:7e:f2:d0:22: d4:9c:52:a0:e1:94:e0:b7:af:5b:65:6f:bd:5a:45:e8:7a:6d: fc:4b:3b:22:3f:80:2e:40:ff:5c:39:e3:ab:fd:90:f9:03:7c: 8d:8e:61:50:af:e1:32:9c:b2:cd:aa:34:c3:e3:c9:82:7b:83: b7:de:41:49:42:62:10:f5:3f:a7:c5:f6:6c:5b:d7:f1:f7:44: fc:fb:cd:d8:3f:68:26:08:90:b9:fe:23:17:4a:ae:67:98:c3: 7c:3c:9a:95:8c:4a:f8:2f:7b:24:ea:46:2d:be:65:17:23:d4: 52:55:8c:b6:2a:02:fa:ec:df:fd:1c:6d:18:65:c6:03:72:dc: ea:08:b5:b0:29:01:99:a9:ad:52:25:d0:e5:c3:58:ae:14:ce: 84:1e:9e:df:5d:e5:87:d5:a1:a9:c4:a6:cc:99:83:9c:70:8c: 43:5d:4d:87:47:a2:9a:52:f0:c2:1e:af:96:33:27:29:7f:c8: 2c:8c:10:70:fb:de:e0:5f:3a:6d:5f:35:eb:01:f5:7b:d7:91: f6:35:9a:17:54:00:04:2b:b2:06:84:bd:57:15:5c:a1:f5:a2: 8d:53:8c:84 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMEVG MDE5NEE1MEQxQ0ZCMUM3Qjk5NEJFRkU0QkU3REE2QUMxOTY4MB4XDTI2MDMzMTA4 NDQzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDJDNUQwMTQ1OTY1NTk0 QjNCMkYxREEwNTlDNDA0QjI0QzIyQkY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2eYtJgetZpc3tZV0gHpe9h47LRxYJoGUBoWTtUdj8trs4RRltt qMsOa9juCcYQm9W82yqN5bqL5MDR6TqbuQ1Rngolode5eot6GjCyiaXE7mh9E9sQ ZtRa6nEjic1Vu63B3e4n40BbS/7vrb7I7IbCnuYs6+uDnkm/xs99v+3tWQ85gT5q nHy67GdWTOjf35UTMntwdEOQxjv5DPHaH6dyB79GvvS+LcvhiUWQ+hNiG4hfQrXE Din5alT4l9oRBRi+x6FBPBXMLf6Db8jIRmwFy+bxUFqvfdZdC9Rdf+sYwpc5USq+ 2ATPR0BXZOCpfAImNkjjpvQyjX7edCwJuWcCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQCxdAUWWVZSzsvHaBZxASyTCK/czAfBgNVHSMEGDAWgBSw7wGUpQ0c+xx7mUvv 5L59pqwZaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTkvc084QmxLVU5IUHNjZTVsTDctUy1mYWFzR1dnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc084QmxLVU5IUHNjZTVsTDctUy1m YWFzR1dnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMTU5L0FzWFFGRmxsV1VzN0x4MmdXY1FFc2t3aXYzTS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBHoAMA0GCSqGSIb3DQEBCwUA A4IBAQBW9b2dvCPCdy/w0bHD3Gum8mSPjEEFWuoxdJ5G71jhGX7y0CLUnFKg4ZTg t69bZW+9WkXoem38SzsiP4AuQP9cOeOr/ZD5A3yNjmFQr+EynLLNqjTD48mCe4O3 3kFJQmIQ9T+nxfZsW9fx90T8+83YP2gmCJC5/iMXSq5nmMN8PJqVjEr4L3sk6kYt vmUXI9RSVYy2KgL67N/9HG0YZcYDctzqCLWwKQGZqa1SJdDlw1iuFM6EHp7fXeWH 1aGpxKbMmYOccIxDXU2HR6KaUvDCHq+WMycpf8gsjBBw+97gXzptXzXrAfV715H2 NZoXVAAEK7IGhL1XFVyh9aKNU4yE -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:52 2026 by rpki-client