$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30248/CdEDOmGWvlK5vGYV_LNZvww4f-g.roa File: CdEDOmGWvlK5vGYV_LNZvww4f-g.roa (raw, json) Hash identifier: 6ePK/DrXwKiOv0YHLeoDZFmeaj3b3AqLH+7a8g4V0Zo= Subject key identifier: 09:D1:03:3A:61:96:BE:52:B9:BC:66:15:FC:B3:59:BF:0C:38:7F:E8 Certificate issuer: /CN=EDC085084F8F13D9228C94C2D2F98336341E373F Certificate serial: 19 Authority key identifier: ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/CdEDOmGWvlK5vGYV_LNZvww4f-g.roa Signing time: Tue 31 Mar 2026 08:44:11 +0000 ROA not before: Tue 31 Mar 2026 08:44:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17936 IP address blocks: 2406:9900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDC085084F8F13D9228C94C2D2F98336341E373F Validity Not Before: Mar 31 08:44:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=09D1033A6196BE52B9BC6615FCB359BF0C387FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:05:83:df:35:94:3c:65:4b:b0:b7:17:bc: 9c:81:68:ae:02:fe:cc:82:55:8a:09:9e:53:e5:58: 77:95:7e:9d:2b:15:b1:3b:35:9f:75:f5:ce:be:3a: 1d:6f:29:bd:6b:82:1b:ad:49:02:a0:82:f6:71:e3: bb:85:dc:83:6f:85:45:9e:c5:73:11:89:82:8d:4a: 90:12:5a:9b:09:cf:92:c5:82:4d:a4:ca:ee:c7:51: ac:75:e4:96:de:53:b7:8d:25:6f:a1:d0:95:e2:64: 48:61:22:4e:08:85:1a:23:f6:de:9d:69:be:16:bc: 5d:47:66:40:ea:20:1f:74:f5:04:d3:13:bc:1f:eb: a8:e4:47:23:83:e4:1a:f4:7b:14:af:c6:95:71:9e: cd:ba:56:73:15:a8:f8:9a:9c:cb:d0:57:4b:bb:49: 18:fd:d9:94:a2:65:e8:da:8d:14:e6:e0:a3:11:bd: 1c:50:7c:09:32:a4:fc:03:b1:8f:a9:1a:ab:45:6b: 17:21:d5:e7:3a:aa:ba:52:09:3a:21:0f:88:39:9c: 46:11:99:58:3b:6f:39:44:c3:7e:f6:d0:19:2f:5f: 51:ef:50:41:55:12:6f:20:c8:ae:9a:33:83:32:70: 22:dc:62:86:74:80:80:f0:da:78:30:02:a5:9d:5b: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:03:3A:61:96:BE:52:B9:BC:66:15:FC:B3:59:BF:0C:38:7F:E8 X509v3 Authority Key Identifier: keyid:ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/CdEDOmGWvlK5vGYV_LNZvww4f-g.roa sbgp-ipAddrBlock: critical IPv6: 2406:9900::/32 Signature Algorithm: sha256WithRSAEncryption 1e:4b:3b:c8:6a:10:75:10:fd:de:89:3e:ff:b1:ce:13:c8:ee: d5:7f:72:f6:04:ac:ad:cb:9d:8c:5a:33:cb:09:b5:25:78:9a: 08:7d:23:60:1c:65:53:81:4c:34:93:eb:5e:43:8c:b4:04:0e: 06:26:3e:9a:3d:55:06:93:76:9e:89:74:d1:5c:6b:e4:ea:cc: f0:ec:26:7e:f9:62:1a:67:85:5f:4d:5b:14:fc:e1:dd:df:ab: f4:06:cf:7a:48:dd:8e:ba:14:ca:ec:17:18:90:bb:21:21:4f: 3d:5c:6b:35:ee:68:f8:08:43:a7:79:18:65:2c:88:80:05:ed: 2b:54:bd:96:66:c9:53:ae:ab:c8:6a:8d:f9:2d:d0:93:ce:7d: 41:37:9c:e6:3e:c1:15:1c:74:5e:7f:33:75:aa:76:b0:c1:06: 92:7a:84:70:e6:26:18:b7:d8:ac:16:49:93:a7:f7:47:2f:03: 0f:c2:db:f4:1b:b0:8f:0c:c6:e1:4f:a9:9b:dc:36:50:48:7f: 40:79:a3:36:92:75:18:d2:1b:4a:69:a0:72:d0:17:82:91:da: c0:3e:73:bf:51:e8:30:0b:53:82:e1:59:00:5b:5f:6d:39:7f: 74:95:ea:b6:91:1a:9a:66:90:37:00:b1:28:75:56:1b:28:52: b4:34:a4:a3 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFREMw ODUwODRGOEYxM0Q5MjI4Qzk0QzJEMkY5ODMzNjM0MUUzNzNGMB4XDTI2MDMzMTA4 NDQxMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDlEMTAzM0E2MTk2QkU1 MkI5QkM2NjE1RkNCMzU5QkYwQzM4N0ZFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKLbBYPfNZQ8ZUuwtxe8nIForgL+zIJVigmeU+VYd5V+nSsVsTs1 n3X1zr46HW8pvWuCG61JAqCC9nHju4Xcg2+FRZ7FcxGJgo1KkBJamwnPksWCTaTK 7sdRrHXklt5Tt40lb6HQleJkSGEiTgiFGiP23p1pvha8XUdmQOogH3T1BNMTvB/r qORHI4PkGvR7FK/GlXGezbpWcxWo+Jqcy9BXS7tJGP3ZlKJl6NqNFObgoxG9HFB8 CTKk/AOxj6kaq0VrFyHV5zqqulIJOiEPiDmcRhGZWDtvOUTDfvbQGS9fUe9QQVUS byDIrpozgzJwItxihnSAgPDaeDACpZ1bEb0CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQJ0QM6YZa+Urm8ZhX8s1m/DDh/6DAfBgNVHSMEGDAWgBTtwIUIT48T2SKMlMLS +YM2NB43PzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDgvN2NDRkNFLVBFOWtpakpUQzB2bUROalFlTno4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN2NDRkNFLVBFOWtpakpUQzB2bURO alFlTno4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjQ4L0NkRURPbUdXdmxLNXZHWVZfTE5adnd3NGYtZy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBpkAMA0GCSqGSIb3DQEBCwUA A4IBAQAeSzvIahB1EP3eiT7/sc4TyO7Vf3L2BKyty52MWjPLCbUleJoIfSNgHGVT gUw0k+teQ4y0BA4GJj6aPVUGk3aeiXTRXGvk6szw7CZ++WIaZ4VfTVsU/OHd36v0 Bs96SN2OuhTK7BcYkLshIU89XGs17mj4CEOneRhlLIiABe0rVL2WZslTrqvIao35 LdCTzn1BN5zmPsEVHHRefzN1qnawwQaSeoRw5iYYt9isFkmTp/dHLwMPwtv0G7CP DMbhT6mb3DZQSH9AeaM2knUY0htKaaBy0BeCkdrAPnO/UegwC1OC4VkAW19tOX90 leq2kRqaZpA3ALEodVYbKFK0NKSj -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:21 2026 by rpki-client