$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/2SjZbSDLZgq7_VlibP4FNZMTRtA.roa File: 2SjZbSDLZgq7_VlibP4FNZMTRtA.roa (raw, json) Hash identifier: IRUaJ28EqeJcDLChg+Q1rrTrBGvrwhzfYIy3F4Jw6UM= Subject key identifier: D9:28:D9:6D:20:CB:66:0A:BB:FD:59:62:6C:FE:05:35:93:13:46:D0 Certificate issuer: /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Certificate serial: 59 Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/2SjZbSDLZgq7_VlibP4FNZMTRtA.roa Signing time: Tue 31 Mar 2026 07:41:03 +0000 ROA not before: Tue 31 Mar 2026 07:41:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7514 IP address blocks: 2001:2f0::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Validity Not Before: Mar 31 07:41:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D928D96D20CB660ABBFD59626CFE0535931346D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:f8:c8:8f:cf:13:85:d7:69:08:81:18:cf: 53:1c:1f:3c:c0:3e:82:02:84:22:e8:95:d9:b5:ca: fe:ac:12:10:4d:01:b6:f1:62:0d:f5:7b:13:c3:f7: 15:40:ff:85:57:e9:67:cb:10:fb:4b:60:67:f9:57: 62:9b:d3:e2:a4:b6:c4:8c:69:d7:75:59:04:6f:1a: 2c:cc:16:36:a2:a2:85:bb:d1:7e:7f:1e:81:f5:3c: f3:57:95:ca:5d:f1:d1:2b:a9:c6:fe:b7:9b:f0:be: 21:8f:86:ec:47:1d:8b:57:9f:2c:d5:2f:82:54:77: ec:27:19:1d:9e:a0:3a:83:e3:3b:de:5d:3f:dd:13: 0b:fa:ca:7a:32:09:32:b8:0a:11:39:9e:3d:cc:b5: 97:37:c1:ac:a0:43:a2:3f:4c:a2:a2:e4:19:6a:02: 46:92:3c:71:95:3f:0a:89:15:7c:f2:1c:d3:76:89: 91:6b:43:3c:ea:c7:b2:68:01:24:a9:c8:03:52:01: 6b:95:f5:8a:6c:00:3f:df:7f:b7:d3:bd:cb:cd:b7: fd:56:1c:d1:67:6a:28:bd:6e:c0:62:22:be:ef:b0: 93:5e:ba:bc:29:98:a0:a1:69:84:ce:06:d0:fb:8c: 4a:26:b4:ca:46:ba:cc:aa:93:92:ec:c1:b4:ff:b3: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:28:D9:6D:20:CB:66:0A:BB:FD:59:62:6C:FE:05:35:93:13:46:D0 X509v3 Authority Key Identifier: keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/2SjZbSDLZgq7_VlibP4FNZMTRtA.roa sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 55:0e:b8:85:36:3f:cd:ac:56:49:78:ca:62:df:22:88:e9:4f: 07:cb:b0:9d:35:1b:c8:18:61:ab:7e:ec:20:1f:e8:44:33:9c: b5:0b:b1:5d:f7:eb:97:8b:dd:9a:46:4a:d9:cc:c3:d6:e3:b0: 6a:94:dd:9e:7f:bc:6e:82:d6:53:08:57:ca:6d:9e:6a:49:ce: 69:bd:b8:39:8d:a6:52:49:66:51:73:37:9f:ff:81:e7:4b:c4: 91:07:ac:01:06:d7:1a:ea:ad:b2:52:e1:6f:d7:7a:4f:7f:d1: 95:8f:86:25:5c:49:c8:d1:fe:e0:0f:62:37:f5:c2:b5:3f:b7: 41:6f:19:2a:ae:9e:eb:6e:eb:4b:13:f4:c0:1e:7e:00:29:18: 5a:67:04:69:77:f2:e6:5a:41:3a:18:d5:13:55:1b:83:d4:58: 81:09:d7:ca:0f:54:4e:16:1c:7a:d8:87:8c:cb:75:99:f3:ed: ef:e5:4b:ca:49:84:40:73:f7:fc:37:bb:2a:cd:5d:36:11:f8: fe:0a:0a:1c:41:ad:ba:35:c0:2e:73:17:0a:3d:13:2a:f3:3c: bb:8b:1a:ba:de:3f:72:2f:80:7d:40:eb:b6:5f:59:a5:34:a6: ff:b2:ab:21:14:f3:09:d9:fb:09:e8:46:ba:5c:59:77:f9:60: 40:52:a1:c3 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5N0Yy QjRCOEZFMjVBMEMwQzdGNEQ2RkQ0RkExQkE3Q0FFNjEyQTEyMB4XDTI2MDMzMTA3 NDEwM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDkyOEQ5NkQyMENCNjYw QUJCRkQ1OTYyNkNGRTA1MzU5MzEzNDZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM23+MiPzxOF12kIgRjPUxwfPMA+ggKEIuiV2bXK/qwSEE0BtvFi DfV7E8P3FUD/hVfpZ8sQ+0tgZ/lXYpvT4qS2xIxp13VZBG8aLMwWNqKihbvRfn8e gfU881eVyl3x0Supxv63m/C+IY+G7Ecdi1efLNUvglR37CcZHZ6gOoPjO95dP90T C/rKejIJMrgKETmePcy1lzfBrKBDoj9MoqLkGWoCRpI8cZU/CokVfPIc03aJkWtD POrHsmgBJKnIA1IBa5X1imwAP99/t9O9y823/VYc0WdqKL1uwGIivu+wk166vCmY oKFphM4G0PuMSia0yka6zKqTkuzBtP+zzRkCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBTZKNltIMtmCrv9WWJs/gU1kxNG0DAfBgNVHSMEGDAWgBSX8rS4/iWgwMf01v1P obp8rmEqEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNjAvbF9LMHVQNGxvTURIOU5iOVQ2RzZmSzVoS2hJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbF9LMHVQNGxvTURIOU5iOVQ2RzZm SzVoS2hJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjYwLzJTalpiU0RMWmdxN19WbGliUDRGTlpNVFJ0QS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3DQEBCwUA A4IBAQBVDriFNj/NrFZJeMpi3yKI6U8Hy7CdNRvIGGGrfuwgH+hEM5y1C7Fd9+uX i92aRkrZzMPW47BqlN2ef7xugtZTCFfKbZ5qSc5pvbg5jaZSSWZRczef/4HnS8SR B6wBBtca6q2yUuFv13pPf9GVj4YlXEnI0f7gD2I39cK1P7dBbxkqrp7rbutLE/TA Hn4AKRhaZwRpd/LmWkE6GNUTVRuD1FiBCdfKD1ROFhx62IeMy3WZ8+3v5UvKSYRA c/f8N7sqzV02Efj+CgocQa26NcAucxcKPRMq8zy7ixq63j9yL4B9QOu2X1mlNKb/ sqshFPMJ2fsJ6Ea6XFl3+WBAUqHD -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:45 2026 by rpki-client