$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ICtg_YfGNQFn7J8dbV-tO6OjYUA.roa File: ICtg_YfGNQFn7J8dbV-tO6OjYUA.roa (raw, json) Hash identifier: FyiAs79Q1PTdCbrrUZn1R2dJnpHFXx/dH2DTcNO3sgw= Subject key identifier: 20:2B:60:FD:87:C6:35:01:67:EC:9F:1D:6D:5F:AD:3B:A3:A3:61:40 Certificate issuer: /CN=9D5A540C122FD0C70CE511170044FF6580D7631B Certificate serial: 15 Authority key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ICtg_YfGNQFn7J8dbV-tO6OjYUA.roa Signing time: Tue 31 Mar 2026 08:45:25 +0000 ROA not before: Tue 31 Mar 2026 08:45:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9607 IP address blocks: 2404:c700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Validity Not Before: Mar 31 08:45:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=202B60FD87C6350167EC9F1D6D5FAD3BA3A36140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:13:ef:f9:b2:d5:a8:a7:a0:9e:8b:c4:8c: a4:70:83:da:d4:ba:4c:9b:d5:bd:a0:7e:e5:8e:3e: af:76:61:59:d3:df:76:dc:5e:fe:af:84:c6:a7:48: 6f:70:d2:23:6e:20:de:bd:ef:df:a0:de:be:5a:ec: 6a:e1:38:3e:37:2b:f5:57:67:3f:c8:bc:7a:e4:4e: 04:83:aa:d3:b8:8b:c1:b4:71:cd:d7:dd:3b:ed:74: 85:c5:20:dd:d7:90:de:59:86:7b:ee:4c:0b:22:df: 35:c3:8c:e3:89:fa:27:05:8e:e3:18:bf:18:b9:d0: fc:02:6c:a0:ef:14:07:9a:bd:7b:62:c8:f3:6f:d4: fa:e7:8f:ee:b9:81:06:a5:1f:cc:21:af:f2:43:9e: f5:05:39:56:cd:84:2a:e1:0f:01:08:6c:00:96:47: d1:3c:fd:66:e1:a5:47:72:a4:97:76:bc:18:10:75: d3:b3:e0:24:1d:53:52:5a:80:bf:04:72:3b:9c:62: 54:3f:4c:a1:f5:76:44:ad:00:b3:6a:5e:cc:da:c5: e9:02:fe:51:52:f0:bd:30:53:af:46:e1:a5:03:43: cd:d1:81:f0:96:6d:4e:05:82:ce:8b:c3:85:5c:bd: b2:d1:ee:37:53:99:53:92:3a:bd:e1:4d:c5:2f:08: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2B:60:FD:87:C6:35:01:67:EC:9F:1D:6D:5F:AD:3B:A3:A3:61:40 X509v3 Authority Key Identifier: keyid:9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ICtg_YfGNQFn7J8dbV-tO6OjYUA.roa sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption 4c:68:f7:79:73:75:29:8c:35:5e:d5:07:91:51:9a:1b:3f:5b: a2:f1:6b:70:15:76:1b:79:d8:93:85:86:4a:20:f1:4c:f9:24: 61:9b:4f:05:83:90:9b:7e:3c:01:1b:41:62:a3:87:0d:94:f3: e5:b3:cd:b2:c9:28:19:44:2c:29:c2:c2:74:30:60:af:aa:1c: 02:5f:1f:b6:2b:b2:39:ce:82:f4:c0:0f:40:07:18:66:d9:9f: f9:95:75:16:e2:fa:77:17:01:64:92:d2:24:8d:f8:98:94:45: 0a:57:7e:74:63:f5:d7:d8:80:f9:c3:b9:20:b3:59:39:ab:38: 23:7b:04:11:e4:11:9a:f4:96:48:34:61:76:ea:4b:ef:ba:ab: cf:02:02:3f:64:aa:b5:53:4d:8e:93:e5:7b:2a:ae:f9:7b:c0: 99:54:78:61:e4:fe:2f:96:86:02:d8:e3:03:12:e8:4f:9b:cc: a4:9a:98:77:6c:25:d7:13:ae:03:bb:35:5d:2d:d1:dd:25:15: a0:6e:19:d7:7d:b5:42:5f:ff:bb:9a:4f:54:de:22:26:62:51: ad:a0:46:f5:73:eb:08:8c:d0:b4:8b:0d:7a:10:44:bc:53:73: 00:bb:18:03:be:32:a4:fa:58:d7:d4:96:7d:28:bf:69:f1:91: f0:16:00:5e -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDVB NTQwQzEyMkZEMEM3MENFNTExMTcwMDQ0RkY2NTgwRDc2MzFCMB4XDTI2MDMzMTA4 NDUyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjAyQjYwRkQ4N0M2MzUw MTY3RUM5RjFENkQ1RkFEM0JBM0EzNjE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANe8E+/5stWop6Cei8SMpHCD2tS6TJvVvaB+5Y4+r3ZhWdPfdtxe /q+ExqdIb3DSI24g3r3v36DevlrsauE4Pjcr9VdnP8i8euROBIOq07iLwbRxzdfd O+10hcUg3deQ3lmGe+5MCyLfNcOM44n6JwWO4xi/GLnQ/AJsoO8UB5q9e2LI82/U +ueP7rmBBqUfzCGv8kOe9QU5Vs2EKuEPAQhsAJZH0Tz9ZuGlR3Kkl3a8GBB107Pg JB1TUlqAvwRyO5xiVD9MofV2RK0As2pezNrF6QL+UVLwvTBTr0bhpQNDzdGB8JZt TgWCzovDhVy9stHuN1OZU5I6veFNxS8IxH0CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQgK2D9h8Y1AWfsnx1tX607o6NhQDAfBgNVHSMEGDAWgBSdWlQMEi/QxwzlERcA RP9lgNdjGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMzYvblZwVURCSXYwTWNNNVJFWEFFVF9aWURYWXhzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvblZwVURCSXYwTWNNNVJFWEFFVF9a WURYWXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjM2L0lDdGdfWWZHTlFGbjdKOGRiVi10TzZPallVQS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3DQEBCwUA A4IBAQBMaPd5c3UpjDVe1QeRUZobP1ui8WtwFXYbediThYZKIPFM+SRhm08Fg5Cb fjwBG0Fio4cNlPPls82yySgZRCwpwsJ0MGCvqhwCXx+2K7I5zoL0wA9ABxhm2Z/5 lXUW4vp3FwFkktIkjfiYlEUKV350Y/XX2ID5w7kgs1k5qzgjewQR5BGa9JZINGF2 6kvvuqvPAgI/ZKq1U02Ok+V7Kq75e8CZVHhh5P4vloYC2OMDEuhPm8ykmph3bCXX E64DuzVdLdHdJRWgbhnXfbVCX/+7mk9U3iImYlGtoEb1c+sIjNC0iw16EES8U3MA uxgDvjKk+ljX1JZ9KL9p8ZHwFgBe -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:25 2026 by rpki-client