$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30250/cxRTbk1jVZBTcsYspz-8i-wLzrU.roa File: cxRTbk1jVZBTcsYspz-8i-wLzrU.roa (raw, json) Hash identifier: WRrbIzNHuSzkOssUGva2cnXf/NCt/JuACh3VPhFi4dw= Subject key identifier: 73:14:53:6E:4D:63:55:90:53:72:C6:2C:A7:3F:BC:8B:EC:0B:CE:B5 Certificate issuer: /CN=EEF0120076917264CD0FE2E6A759B4A499AB5FDF Certificate serial: 15 Authority key identifier: EE:F0:12:00:76:91:72:64:CD:0F:E2:E6:A7:59:B4:A4:99:AB:5F:DF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/cxRTbk1jVZBTcsYspz-8i-wLzrU.roa Signing time: Tue 31 Mar 2026 08:45:17 +0000 ROA not before: Tue 31 Mar 2026 08:45:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18274 IP address blocks: 2407:3300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF0120076917264CD0FE2E6A759B4A499AB5FDF Validity Not Before: Mar 31 08:45:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7314536E4D6355905372C62CA73FBC8BEC0BCEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:82:cb:95:34:59:81:8e:1c:67:19:17:0e: 4c:0d:d6:13:92:b3:9b:2c:0f:64:98:fb:1a:a9:e6: 7c:5a:ba:69:51:a9:8a:b7:e3:ac:72:92:10:a3:2b: 54:22:91:e8:b2:1d:f6:04:3d:de:56:ee:e6:4d:bc: da:b6:b5:3e:d4:9d:15:f4:0d:02:e3:c0:87:3a:8f: 47:7f:42:5c:b7:17:38:88:86:9b:bc:81:0f:c2:df: 03:36:81:87:46:1e:59:5b:82:7d:e0:a1:e8:3b:0a: e8:0e:58:ef:b4:d0:9f:ea:cb:29:78:30:1a:a6:99: 86:6f:e4:d2:cc:91:88:bc:68:7f:0c:ca:4f:5e:84: 53:54:01:4d:f9:87:68:e3:47:57:e3:fc:ab:9b:bc: 84:6e:a3:94:c8:00:ec:69:3c:43:cf:b5:cc:c4:17: 06:c8:07:f3:b1:e3:c7:7b:43:85:61:45:4c:b5:3a: a3:5a:9d:e5:3a:de:d8:05:f7:27:e2:2d:98:91:c5: 87:ef:78:74:63:a8:28:67:72:3e:21:fd:ad:af:4f: b8:83:5c:86:04:f4:01:46:40:d5:77:a3:e9:3b:d3: e4:5c:46:68:ae:f1:0b:59:27:94:8c:97:d3:c0:7c: 7b:54:9a:fd:3d:15:13:0b:97:45:51:fa:fc:c2:94: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:14:53:6E:4D:63:55:90:53:72:C6:2C:A7:3F:BC:8B:EC:0B:CE:B5 X509v3 Authority Key Identifier: keyid:EE:F0:12:00:76:91:72:64:CD:0F:E2:E6:A7:59:B4:A4:99:AB:5F:DF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/cxRTbk1jVZBTcsYspz-8i-wLzrU.roa sbgp-ipAddrBlock: critical IPv6: 2407:3300::/32 Signature Algorithm: sha256WithRSAEncryption 96:1f:03:5d:20:df:ab:e0:eb:7d:e0:cf:17:cb:27:33:02:a8: 1c:d5:fa:ac:27:73:7a:a6:05:81:1f:08:86:20:04:8d:1c:5c: 76:e3:39:a0:ce:c6:5f:e4:d0:3c:0a:dd:18:5c:3a:36:51:a2: b7:85:da:45:08:37:16:6d:6b:c5:ff:2f:5a:34:51:e8:17:36: 3f:af:51:71:08:45:00:96:ac:7c:51:1e:90:d1:aa:be:36:a8: 9f:d6:cc:03:e1:1b:c5:60:25:d7:03:61:1c:ca:5c:b5:81:6a: 20:82:06:5a:0c:3f:1e:2f:7c:ad:ce:9e:a4:f9:3b:25:fe:2f: b7:24:cf:1e:35:96:6a:c1:b9:d7:84:d7:b8:fc:dc:06:1c:5d: e2:7f:03:a9:b8:9e:3f:eb:a3:ca:46:45:88:8c:ce:0a:d1:31: b2:9a:32:e5:28:61:1f:3a:d5:e8:cf:c9:72:0e:da:c7:bc:cb: 98:94:7c:26:96:bd:2f:1b:30:1d:47:cd:fb:72:9e:e6:31:8f: e6:64:31:7a:1f:ab:2a:d4:94:ae:9a:2b:03:a9:04:a3:41:94: 35:e9:54:f1:54:16:36:e7:fb:39:4e:24:18:4d:40:39:be:49: 21:e6:9a:e6:c0:24:ff:34:67:a8:df:0d:37:37:4a:6b:65:db: 85:32:1e:48 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRUYw MTIwMDc2OTE3MjY0Q0QwRkUyRTZBNzU5QjRBNDk5QUI1RkRGMB4XDTI2MDMzMTA4 NDUxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzMxNDUzNkU0RDYzNTU5 MDUzNzJDNjJDQTczRkJDOEJFQzBCQ0VCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOJBgsuVNFmBjhxnGRcOTA3WE5KzmywPZJj7GqnmfFq6aVGpirfj rHKSEKMrVCKR6LId9gQ93lbu5k282ra1PtSdFfQNAuPAhzqPR39CXLcXOIiGm7yB D8LfAzaBh0YeWVuCfeCh6DsK6A5Y77TQn+rLKXgwGqaZhm/k0syRiLxofwzKT16E U1QBTfmHaONHV+P8q5u8hG6jlMgA7Gk8Q8+1zMQXBsgH87Hjx3tDhWFFTLU6o1qd 5Tre2AX3J+ItmJHFh+94dGOoKGdyPiH9ra9PuINchgT0AUZA1Xej6TvT5FxGaK7x C1knlIyX08B8e1Sa/T0VEwuXRVH6/MKUlO8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRzFFNuTWNVkFNyxiynP7yL7AvOtTAfBgNVHSMEGDAWgBTu8BIAdpFyZM0P4uan WbSkmatf3zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNTAvN3ZBU0FIYVJjbVRORC1MbXAxbTBwSm1yWDk4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN3ZBU0FIYVJjbVRORC1MbXAxbTBw Sm1yWDk4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjUwL2N4UlRiazFqVlpCVGNzWXNwei04aS13THpyVS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBzMAMA0GCSqGSIb3DQEBCwUA A4IBAQCWHwNdIN+r4Ot94M8XyyczAqgc1fqsJ3N6pgWBHwiGIASNHFx24zmgzsZf 5NA8Ct0YXDo2UaK3hdpFCDcWbWvF/y9aNFHoFzY/r1FxCEUAlqx8UR6Q0aq+Nqif 1swD4RvFYCXXA2Ecyly1gWogggZaDD8eL3ytzp6k+Tsl/i+3JM8eNZZqwbnXhNe4 /NwGHF3ifwOpuJ4/66PKRkWIjM4K0TGymjLlKGEfOtXoz8lyDtrHvMuYlHwmlr0v GzAdR837cp7mMY/mZDF6H6sq1JSumisDqQSjQZQ16VTxVBY25/s5TiQYTUA5vkkh 5prmwCT/NGeo3w03N0prZduFMh5I -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:46 2026 by rpki-client