$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/ffXcoJ-_4WhO_JgRspP4Uu4rmYU.roa File: ffXcoJ-_4WhO_JgRspP4Uu4rmYU.roa (raw, json) Hash identifier: W5rklEZk2vr3WK0qCRwY+boVHyhC6LnCVnjVW1AT7Sk= Subject key identifier: 7D:F5:DC:A0:9F:BF:E1:68:4E:FC:98:11:B2:93:F8:52:EE:2B:99:85 Certificate issuer: /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Certificate serial: 42 Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/ffXcoJ-_4WhO_JgRspP4Uu4rmYU.roa Signing time: Tue 31 Mar 2026 08:24:22 +0000 ROA not before: Tue 31 Mar 2026 08:24:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17682 IP address blocks: 2402:1580:296::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Validity Not Before: Mar 31 08:24:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7DF5DCA09FBFE1684EFC9811B293F852EE2B9985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:5e:e0:02:a8:a2:36:5a:6a:d2:57:8e:7f: 95:15:73:80:23:b1:04:01:8a:c1:63:b8:c2:0f:4b: 79:8f:94:ef:93:dc:75:56:bb:f5:f4:83:86:ce:6a: 1d:83:73:e1:15:94:c6:df:ad:aa:d9:1a:a9:51:ac: 6c:05:46:5d:a5:46:ac:5a:e3:65:cd:33:1f:e4:ac: 79:46:9b:e9:48:aa:10:7c:b7:d5:1c:48:00:58:f8: ad:20:7f:a3:6b:8c:51:a1:32:80:e5:bf:b3:04:fc: dd:83:8b:0d:81:da:25:9b:1e:7c:db:64:2e:ee:ca: 22:11:25:3a:ef:ad:47:90:a3:98:d3:98:c4:da:fc: b0:7d:0c:f0:6c:cf:5c:5a:7a:a5:ae:b1:99:d4:4c: 97:c1:a4:2c:48:49:74:5f:82:70:ef:8b:da:45:6d: 49:14:f5:d3:0f:33:a3:0a:94:54:ee:7b:cf:33:68: 77:1d:b0:56:26:a3:9f:30:ca:85:ef:88:4b:d3:f0: 21:3b:b6:3f:30:99:11:bb:f8:63:4a:83:20:92:6c: 49:16:86:39:16:03:0d:b7:21:aa:10:e5:e3:b7:a0: 4a:67:08:bb:7c:17:e1:96:65:5b:dc:cf:cc:e8:7c: 5d:89:eb:f1:69:1b:7b:83:0b:f0:90:8b:0e:6f:26: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:DC:A0:9F:BF:E1:68:4E:FC:98:11:B2:93:F8:52:EE:2B:99:85 X509v3 Authority Key Identifier: keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/ffXcoJ-_4WhO_JgRspP4Uu4rmYU.roa sbgp-ipAddrBlock: critical IPv6: 2402:1580:296::/48 Signature Algorithm: sha256WithRSAEncryption 2e:fe:fc:7b:ee:f8:70:be:f6:6c:fa:6a:f3:a3:34:ff:e3:f1: 26:58:e7:f8:f3:6b:32:61:ae:32:13:85:95:08:40:32:4d:aa: e5:00:c2:a8:1e:d2:fd:c6:08:ed:a2:7e:47:ce:bc:47:c9:43: cf:80:37:e1:67:0d:bb:86:62:69:2e:b8:04:6e:c0:df:b7:ab: 48:09:b1:fe:07:8a:93:72:22:bd:1c:74:43:05:9b:35:32:df: ce:c6:14:f3:1e:fe:d5:57:98:6a:56:ee:80:18:64:6b:a0:ef: db:00:ad:97:8f:8b:e2:69:50:a6:25:ab:58:9a:9a:00:6f:1f: 7b:43:9e:7d:78:30:01:9e:a7:8d:0c:d0:3d:52:f3:ff:ef:ae: 81:fd:bd:6e:f7:ab:0d:ec:ec:fe:14:b6:dc:8d:73:9b:65:f7: b6:be:66:0a:17:10:05:0a:78:fc:30:d4:25:e5:00:d4:c7:0a: fb:11:2f:a8:b7:25:04:a7:e4:0d:63:9b:56:50:8e:f3:9c:82: 97:61:5e:99:c8:43:16:7d:0b:36:4d:1d:8a:be:77:b0:03:71: b6:b7:9d:b2:e1:b8:8f:de:f3:2e:b6:c5:3a:e6:bf:6c:b0:ca: 55:cb:cd:f7:96:46:35:a0:5d:0c:a2:a8:f8:ca:80:6d:7d:8f: c2:d2:6c:a5 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjQ2 OEIzMURCMjc1QTVEREFFN0E1NDlBQzA1OERDMjBEN0Y4QzlDMB4XDTI2MDMzMTA4 MjQyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0RGNURDQTA5RkJGRTE2 ODRFRkM5ODExQjI5M0Y4NTJFRTJCOTk4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM4qXuACqKI2WmrSV45/lRVzgCOxBAGKwWO4wg9LeY+U75PcdVa7 9fSDhs5qHYNz4RWUxt+tqtkaqVGsbAVGXaVGrFrjZc0zH+SseUab6UiqEHy31RxI AFj4rSB/o2uMUaEygOW/swT83YOLDYHaJZsefNtkLu7KIhElOu+tR5CjmNOYxNr8 sH0M8GzPXFp6pa6xmdRMl8GkLEhJdF+CcO+L2kVtSRT10w8zowqUVO57zzNodx2w ViajnzDKhe+IS9PwITu2PzCZEbv4Y0qDIJJsSRaGORYDDbchqhDl47egSmcIu3wX 4ZZlW9zPzOh8XYnr8Wkbe4ML8JCLDm8mmw8CAwEAAaOCAeAwggHcMB0GA1UdDgQW BBR99dygn7/haE78mBGyk/hS7iuZhTAfBgNVHSMEGDAWgBRfRosx2ydaXdrnpUms BY3CDX+MnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNzIvWDBhTE1kc25XbDNhNTZWSnJBV053ZzFfakp3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWDBhTE1kc25XbDNhNTZWSnJBV053 ZzFfakp3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjcyL2ZmWGNvSi1fNFdoT19KZ1JzcFA0VXU0cm1ZVS5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAhWAApYwDQYJKoZIhvcNAQEL BQADggEBAC7+/Hvu+HC+9mz6avOjNP/j8SZY5/jzazJhrjIThZUIQDJNquUAwqge 0v3GCO2ifkfOvEfJQ8+AN+FnDbuGYmkuuARuwN+3q0gJsf4HipNyIr0cdEMFmzUy 387GFPMe/tVXmGpW7oAYZGug79sArZePi+JpUKYlq1iamgBvH3tDnn14MAGep40M 0D1S8//vroH9vW73qw3s7P4UttyNc5tl97a+ZgoXEAUKePww1CXlANTHCvsRL6i3 JQSn5A1jm1ZQjvOcgpdhXpnIQxZ9CzZNHYq+d7ADcba3nbLhuI/e8y62xTrmv2yw ylXLzfeWRjWgXQyiqPjKgG19j8LSbKU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:46 2026 by rpki-client