$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/Q2D72OEspLej90kPioqwltOO3Sw.roa File: Q2D72OEspLej90kPioqwltOO3Sw.roa (raw, json) Hash identifier: z4fX9DCiz50jnXGKhAWT6utim1bheJi3L2a01SJceMg= Subject key identifier: 43:60:FB:D8:E1:2C:A4:B7:A3:F7:49:0F:8A:8A:B0:96:D3:8E:DD:2C Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 39 Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/Q2D72OEspLej90kPioqwltOO3Sw.roa Signing time: Tue 31 Mar 2026 08:32:49 +0000 ROA not before: Tue 31 Mar 2026 08:32:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131925 IP address blocks: 2401:4d44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Mar 31 08:32:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4360FBD8E12CA4B7A3F7490F8A8AB096D38EDD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:36:c8:06:69:fb:18:0d:22:05:7b:ac:37: c0:00:d9:4e:fc:59:2e:1c:8c:9d:28:a2:28:99:b0: 8d:97:9b:9a:7b:e0:ed:91:04:34:a8:85:c9:4c:83: 68:0a:88:31:5c:39:ea:79:83:66:cd:a8:0e:0c:a5: b7:27:5e:36:56:43:fd:05:c4:0e:44:89:7b:fb:36: c5:c9:4e:5c:1e:8e:14:80:83:18:ea:a4:9c:ce:cc: ba:52:ab:8b:2d:9f:9f:80:97:d8:c3:b0:1f:f9:e5: 49:56:99:5b:39:93:4f:3a:0f:a5:ff:f5:bd:c3:ba: 22:39:6c:75:19:e7:9b:8e:17:5b:00:40:37:da:fa: 4d:c3:d6:b1:b1:51:bf:c6:4c:0f:5a:0f:aa:e7:73: 09:5b:dc:6e:8e:ae:24:ed:2d:2f:28:12:37:a3:61: c7:01:4d:a4:cc:e9:23:aa:e3:4b:16:58:88:30:4a: 6b:77:50:fe:b9:63:f5:03:cf:10:e2:ba:3a:75:36: 86:e4:44:a2:6c:79:bf:d7:95:2b:79:e2:da:d0:2c: 30:95:c6:6e:21:2f:e7:dd:38:2c:c3:e4:ac:8a:52: aa:1e:d7:c8:29:47:87:25:dd:39:73:6e:43:72:1d: 00:ef:4f:0c:3b:71:e1:91:97:92:2f:5c:9c:83:08: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:FB:D8:E1:2C:A4:B7:A3:F7:49:0F:8A:8A:B0:96:D3:8E:DD:2C X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/Q2D72OEspLej90kPioqwltOO3Sw.roa sbgp-ipAddrBlock: critical IPv6: 2401:4d44::/30 Signature Algorithm: sha256WithRSAEncryption 58:ae:27:5e:8d:de:61:c8:fe:11:cc:e3:42:ad:0a:04:65:1b: 9d:73:00:6a:1d:9f:4e:94:14:00:75:57:55:77:7a:63:e6:9e: 24:34:f1:8f:23:d7:39:7c:07:26:af:80:eb:c2:a0:09:eb:18: 38:8f:c9:ea:6c:ff:14:3d:93:da:d1:0e:e6:35:4f:4b:31:3d: 18:2e:15:c4:8d:da:cc:d8:dd:87:58:d4:72:76:31:a8:6c:1f: 6c:90:ad:1e:ce:0b:53:68:1c:60:30:2d:42:a8:e6:eb:cc:6f: 64:4c:93:4a:e0:ce:b4:c4:85:1a:7f:2d:b7:7e:2c:88:34:ad: e1:3e:48:8d:6f:89:d7:7c:16:b5:6b:d1:75:b3:63:e4:05:66: b5:6a:dd:8d:bd:67:05:92:a2:c7:6e:8c:75:4a:40:86:8d:ea: c0:a2:7a:9a:6b:c7:ab:ad:31:41:7f:01:6d:ce:ae:a4:43:0d: e6:5b:93:d8:34:26:24:48:be:c2:90:51:2c:c4:55:a5:17:60: ba:f3:17:2c:d9:80:1a:c1:24:81:65:cb:1e:1f:e1:00:fa:bb: 4a:a5:3f:6d:29:ac:c7:cd:e0:ec:11:d8:87:58:3c:ee:9c:6b: 26:70:34:bb:f2:44:04:42:2c:1a:56:80:38:6f:d8:58:ff:5a: 46:01:da:0f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI2MDMzMTA4 MzI0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDM2MEZCRDhFMTJDQTRC N0EzRjc0OTBGOEE4QUIwOTZEMzhFREQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANTqNsgGafsYDSIFe6w3wADZTvxZLhyMnSiiKJmwjZebmnvg7ZEE NKiFyUyDaAqIMVw56nmDZs2oDgyltydeNlZD/QXEDkSJe/s2xclOXB6OFICDGOqk nM7MulKriy2fn4CX2MOwH/nlSVaZWzmTTzoPpf/1vcO6IjlsdRnnm44XWwBAN9r6 TcPWsbFRv8ZMD1oPqudzCVvcbo6uJO0tLygSN6NhxwFNpMzpI6rjSxZYiDBKa3dQ /rlj9QPPEOK6OnU2huREomx5v9eVK3ni2tAsMJXGbiEv5904LMPkrIpSqh7XyClH hyXdOXNuQ3IdAO9PDDtx4ZGXki9cnIMIBtcCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRDYPvY4Sykt6P3SQ+KirCW047dLDAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjkxL1EyRDcyT0VzcExlajkwa1Bpb3F3bHRPTzNTdy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQIkAU1EMA0GCSqGSIb3DQEBCwUA A4IBAQBYridejd5hyP4RzONCrQoEZRudcwBqHZ9OlBQAdVdVd3pj5p4kNPGPI9c5 fAcmr4DrwqAJ6xg4j8nqbP8UPZPa0Q7mNU9LMT0YLhXEjdrM2N2HWNRydjGobB9s kK0ezgtTaBxgMC1CqObrzG9kTJNK4M60xIUafy23fiyINK3hPkiNb4nXfBa1a9F1 s2PkBWa1at2NvWcFkqLHbox1SkCGjerAonqaa8errTFBfwFtzq6kQw3mW5PYNCYk SL7CkFEsxFWlF2C68xcs2YAawSSBZcseH+EA+rtKpT9tKazHzeDsEdiHWDzunGsm cDS78kQEQiwaVoA4b9hY/1pGAdoP -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:01 2026 by rpki-client