$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30295/5iSpj_CQHwW9khvOjuqcHukimkk.roa File: 5iSpj_CQHwW9khvOjuqcHukimkk.roa (raw, json) Hash identifier: 6PJAs+Awr4mOD+gYLbjX0wVwfbCrSK810Iqpiu6DebM= Subject key identifier: E6:24:A9:8F:F0:90:1F:05:BD:92:1B:CE:8E:EA:9C:1E:E9:22:9A:49 Certificate issuer: /CN=73F79C0E7A150B942456715CF5209C82F2961A96 Certificate serial: 2A Authority key identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/5iSpj_CQHwW9khvOjuqcHukimkk.roa Signing time: Tue 31 Mar 2026 08:36:02 +0000 ROA not before: Tue 31 Mar 2026 08:36:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7511 IP address blocks: 2401:c800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73F79C0E7A150B942456715CF5209C82F2961A96 Validity Not Before: Mar 31 08:36:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E624A98FF0901F05BD921BCE8EEA9C1EE9229A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:4e:83:31:38:0d:0b:4a:e0:01:e9:a9:fa: e8:b5:10:8b:88:93:00:32:e9:e2:cd:04:16:44:ab: a6:5f:cc:d3:b7:6d:d8:89:cd:5d:dd:4e:02:0e:e8: 10:c2:a2:7d:be:97:09:9d:31:5d:9c:46:c7:7f:20: 88:5e:47:66:bf:6b:4d:da:7c:45:62:f6:47:ac:2b: 32:8f:48:ea:ac:dd:72:48:f1:3c:8e:63:a2:dd:d9: cc:7d:ab:34:6f:2a:a0:66:bc:42:0a:03:6a:ca:2a: 77:c3:8e:dc:12:e2:2e:27:f9:cc:1c:5a:2d:9a:6c: 16:28:dd:8d:f6:e9:64:e6:e1:11:9c:05:9f:dd:e9: fc:1e:90:3b:ba:80:54:f1:81:2c:a0:d0:ae:da:0a: 23:52:4e:55:df:a0:2f:88:17:0c:9c:4a:a6:e6:15: 09:5b:e3:ca:d8:ea:88:1c:36:eb:14:0d:d0:43:e1: 31:d2:ce:75:72:63:2e:4a:00:b2:dd:e8:2a:b7:91: 80:17:c4:2f:4e:81:ae:ea:ab:8a:04:a2:9d:8b:30: 9e:c9:07:5b:b3:e8:02:4a:b6:c1:69:dd:c8:37:a6: d4:e2:95:b7:0b:42:f6:08:f4:e1:25:3e:df:80:88: 2a:dd:6b:21:db:15:fd:a4:06:2d:77:5a:41:d4:57: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:A9:8F:F0:90:1F:05:BD:92:1B:CE:8E:EA:9C:1E:E9:22:9A:49 X509v3 Authority Key Identifier: keyid:73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/5iSpj_CQHwW9khvOjuqcHukimkk.roa sbgp-ipAddrBlock: critical IPv6: 2401:c800::/32 Signature Algorithm: sha256WithRSAEncryption c3:0c:f8:bb:f3:6d:5e:34:52:d2:3a:ed:ad:c5:9b:92:20:a9: 37:4b:89:f4:e8:b3:81:ac:cc:92:51:ea:b1:29:10:61:34:f6: 5d:d4:75:a1:16:62:98:1a:8f:3d:52:e6:8d:ad:80:c4:89:27: 9c:2f:a9:21:67:ed:c7:91:70:4d:e9:33:ba:1a:59:1b:f8:2a: 72:1d:c3:16:77:f2:dd:f2:1b:92:31:f6:bb:59:60:e6:37:06: 23:80:97:66:9a:f9:b4:03:f3:ba:1e:c6:a4:27:3f:04:f3:32: 58:91:da:4a:5a:4d:43:2f:eb:2d:5e:98:1b:a2:58:52:80:25: 6b:70:fb:72:47:6e:be:6f:21:6e:a5:04:df:90:cd:cf:0b:46: c9:ef:96:06:a6:52:98:2f:ae:25:4d:dc:f5:d2:22:46:c3:96: f9:2e:32:ba:55:00:bd:22:90:e0:80:5f:bc:12:67:fe:09:d3: f1:54:64:20:94:e4:00:6f:29:71:9d:0c:52:e0:1f:a1:d0:bd: b2:07:0f:ed:74:25:4b:84:a3:71:3c:03:66:bc:21:ba:a6:f4: 85:7e:89:d2:35:d0:6f:d9:c0:9a:d9:51:04:fd:41:c7:36:4a: 4a:64:e7:55:f8:88:3b:8f:e3:91:f4:9f:7b:18:9e:e8:21:44: a6:83:30:2e -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3M0Y3 OUMwRTdBMTUwQjk0MjQ1NjcxNUNGNTIwOUM4MkYyOTYxQTk2MB4XDTI2MDMzMTA4 MzYwMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTYyNEE5OEZGMDkwMUYw NUJEOTIxQkNFOEVFQTlDMUVFOTIyOUE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMIToMxOA0LSuAB6an66LUQi4iTADLp4s0EFkSrpl/M07dt2InN Xd1OAg7oEMKifb6XCZ0xXZxGx38giF5HZr9rTdp8RWL2R6wrMo9I6qzdckjxPI5j ot3ZzH2rNG8qoGa8QgoDasoqd8OO3BLiLif5zBxaLZpsFijdjfbpZObhEZwFn93p /B6QO7qAVPGBLKDQrtoKI1JOVd+gL4gXDJxKpuYVCVvjytjqiBw26xQN0EPhMdLO dXJjLkoAst3oKreRgBfEL06BruqrigSinYswnskHW7PoAkq2wWndyDem1OKVtwtC 9gj04SU+34CIKt1rIdsV/aQGLXdaQdRXIQkCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBTmJKmP8JAfBb2SG86O6pwe6SKaSTAfBgNVHSMEGDAWgBRz95wOehULlCRWcVz1 IJyC8pYaljAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTUvY19lY0Rub1ZDNVFrVm5GYzlTQ2NndktXR3BZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY19lY0Rub1ZDNVFrVm5GYzlTQ2Nn dktXR3BZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMjk1LzVpU3BqX0NRSHdXOWtodk9qdXFjSHVraW1ray5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcgAMA0GCSqGSIb3DQEBCwUA A4IBAQDDDPi7821eNFLSOu2txZuSIKk3S4n06LOBrMySUeqxKRBhNPZd1HWhFmKY Go89UuaNrYDEiSecL6khZ+3HkXBN6TO6Glkb+CpyHcMWd/Ld8huSMfa7WWDmNwYj gJdmmvm0A/O6HsakJz8E8zJYkdpKWk1DL+stXpgbolhSgCVrcPtyR26+byFupQTf kM3PC0bJ75YGplKYL64lTdz10iJGw5b5LjK6VQC9IpDggF+8Emf+CdPxVGQglOQA bylxnQxS4B+h0L2yBw/tdCVLhKNxPANmvCG6pvSFfonSNdBv2cCa2VEE/UHHNkpK ZOdV+Ig7j+OR9J97GJ7oIUSmgzAu -----END CERTIFICATE-----Generated at Tue Apr 7 19:35:05 2026 by rpki-client