$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/TpQ2zhYDJN-8eokKWan9fytNG0o.roa File: TpQ2zhYDJN-8eokKWan9fytNG0o.roa (raw, json) Hash identifier: Fg3Umt30XSA4nwb1uP5OpR0DEZrgqDMoWkvPNrO6zoA= Subject key identifier: 4E:94:36:CE:16:03:24:DF:BC:7A:89:0A:59:A9:FD:7F:2B:4D:1B:4A Certificate issuer: /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Certificate serial: 41 Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/TpQ2zhYDJN-8eokKWan9fytNG0o.roa Signing time: Tue 31 Mar 2026 08:24:22 +0000 ROA not before: Tue 31 Mar 2026 08:24:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17682 IP address blocks: 2402:1580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Validity Not Before: Mar 31 08:24:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4E9436CE160324DFBC7A890A59A9FD7F2B4D1B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:c2:2f:a5:93:89:d8:28:fa:74:2b:d0:a1: 99:12:8e:d3:53:4e:7d:67:cc:4b:4a:56:11:8f:9d: 3f:aa:9b:7d:03:45:a9:d2:e0:4c:d7:95:fc:68:a8: 07:09:e3:57:19:45:a6:f4:d8:99:23:77:91:e6:b2: 03:61:2f:bb:c0:81:d6:63:d5:37:9f:3f:22:40:e0: 7d:30:15:a4:fd:02:e6:75:e4:c0:52:00:b2:6c:c5: c3:b2:b5:59:ec:95:a8:09:37:36:30:df:8a:2e:b9: f5:69:c2:f3:83:3a:a2:51:0a:b3:82:73:8c:b4:70: 2c:28:59:a4:e4:e8:5f:a9:c6:42:80:3b:dd:45:eb: 31:72:3a:30:5a:63:fb:98:61:71:5a:7f:87:88:41: e8:8c:8d:21:09:67:19:4a:75:69:d9:57:c1:de:56: 29:1c:c8:4f:9c:ad:a4:a0:1d:86:b1:5a:c7:e7:e1: 90:2c:47:76:77:8e:7c:c7:16:67:85:04:bf:3d:2c: 2a:a5:35:2c:cd:98:b8:8f:be:4e:32:19:52:bc:c0: d0:f4:f2:e2:8b:df:33:e8:2e:bf:1e:d7:ee:c2:8d: e7:84:3c:d1:04:9e:4f:23:cc:73:40:49:be:76:c8: 32:69:53:db:e4:35:60:2f:ac:7d:f1:86:b9:7b:da: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:94:36:CE:16:03:24:DF:BC:7A:89:0A:59:A9:FD:7F:2B:4D:1B:4A X509v3 Authority Key Identifier: keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/TpQ2zhYDJN-8eokKWan9fytNG0o.roa sbgp-ipAddrBlock: critical IPv6: 2402:1580::/32 Signature Algorithm: sha256WithRSAEncryption 17:3e:ee:80:f1:2a:7a:fb:cf:69:39:e9:fb:56:7d:25:15:f9: db:f1:70:af:b7:76:77:ff:3f:a0:b4:54:0c:50:e5:93:0b:5b: c3:30:3e:74:4d:5d:fb:44:a0:3e:7e:99:09:66:0e:46:8c:17: 5e:ad:4a:4d:c9:e8:c4:26:b5:34:6e:2d:87:19:ec:0c:01:df: f7:61:61:f8:2b:04:25:77:4e:b3:41:45:80:37:72:7e:16:f9: 0c:b3:a4:b1:0b:b5:54:ca:ff:0e:ba:3f:0f:10:20:1e:6e:6d: 47:69:21:b4:cd:e0:9c:65:86:e4:d8:1f:cb:d6:7e:a5:13:3a: 90:1d:17:65:a8:fc:21:99:11:5f:0a:2f:64:01:50:f4:06:3d: d0:36:b4:24:64:2d:ff:1b:da:cb:ab:32:0a:bc:05:45:a9:97: 4c:c2:11:88:18:43:b0:c5:e6:75:08:4f:ec:fb:60:b7:1e:6f: 8e:e7:45:15:20:ec:fc:8f:7e:ea:82:d4:a0:ff:52:45:36:7e: a2:db:2d:2e:a6:a4:3e:1f:94:6e:5a:79:1f:2c:13:e6:db:99: d7:95:c5:90:67:7e:12:ca:19:b4:5b:51:dd:5a:75:2c:51:9b: e6:a2:0e:5e:b3:74:96:28:12:a2:86:9a:cb:09:17:5a:e8:b4: bc:e4:c1:10 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjQ2 OEIzMURCMjc1QTVEREFFN0E1NDlBQzA1OERDMjBEN0Y4QzlDMB4XDTI2MDMzMTA4 MjQyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEU5NDM2Q0UxNjAzMjRE RkJDN0E4OTBBNTlBOUZEN0YyQjREMUI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCSwi+lk4nYKPp0K9ChmRKO01NOfWfMS0pWEY+dP6qbfQNFqdLg TNeV/GioBwnjVxlFpvTYmSN3keayA2Evu8CB1mPVN58/IkDgfTAVpP0C5nXkwFIA smzFw7K1WeyVqAk3NjDfii659WnC84M6olEKs4JzjLRwLChZpOToX6nGQoA73UXr MXI6MFpj+5hhcVp/h4hB6IyNIQlnGUp1adlXwd5WKRzIT5ytpKAdhrFax+fhkCxH dneOfMcWZ4UEvz0sKqU1LM2YuI++TjIZUrzA0PTy4ovfM+guvx7X7sKN54Q80QSe TyPMc0BJvnbIMmlT2+Q1YC+sffGGuXva2/UCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBROlDbOFgMk37x6iQpZqf1/K00bSjAfBgNVHSMEGDAWgBRfRosx2ydaXdrnpUms BY3CDX+MnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNzIvWDBhTE1kc25XbDNhNTZWSnJBV053ZzFfakp3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWDBhTE1kc25XbDNhNTZWSnJBV053 ZzFfakp3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjcyL1RwUTJ6aFlESk4tOGVva0tXYW45Znl0Tkcwby5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAhWAMA0GCSqGSIb3DQEBCwUA A4IBAQAXPu6A8Sp6+89pOen7Vn0lFfnb8XCvt3Z3/z+gtFQMUOWTC1vDMD50TV37 RKA+fpkJZg5GjBderUpNyejEJrU0bi2HGewMAd/3YWH4KwQld06zQUWAN3J+FvkM s6SxC7VUyv8Ouj8PECAebm1HaSG0zeCcZYbk2B/L1n6lEzqQHRdlqPwhmRFfCi9k AVD0Bj3QNrQkZC3/G9rLqzIKvAVFqZdMwhGIGEOwxeZ1CE/s+2C3Hm+O50UVIOz8 j37qgtSg/1JFNn6i2y0upqQ+H5RuWnkfLBPm25nXlcWQZ34Syhm0W1HdWnUsUZvm og5es3SWKBKihprLCRda6LS85MEQ -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:10 2026 by rpki-client