$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30310/HT9jAl_7IEKiCtnxwqatjuaNIww.roa File: HT9jAl_7IEKiCtnxwqatjuaNIww.roa (raw, json) Hash identifier: sbdS265FKMBSgeCAsfDZtWa+xMXccTnwtmnZ0Zj3iZY= Subject key identifier: 1D:3F:63:02:5F:FB:20:42:A2:0A:D9:F1:C2:A6:AD:8E:E6:8D:23:0C Certificate issuer: /CN=9DDC7377517D53593BF1AC966C3B71AF6F5C09CA Certificate serial: 57 Authority key identifier: 9D:DC:73:77:51:7D:53:59:3B:F1:AC:96:6C:3B:71:AF:6F:5C:09:CA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/HT9jAl_7IEKiCtnxwqatjuaNIww.roa Signing time: Tue 31 Mar 2026 07:37:07 +0000 ROA not before: Tue 31 Mar 2026 07:37:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23778 IP address blocks: 2401:cbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDC7377517D53593BF1AC966C3B71AF6F5C09CA Validity Not Before: Mar 31 07:37:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D3F63025FFB2042A20AD9F1C2A6AD8EE68D230C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:48:cc:d1:92:fe:f0:d5:01:33:43:b7:3a: d5:bf:e7:cd:ee:45:99:13:86:63:2f:ba:45:cc:f0: 56:57:c3:0e:dc:d1:89:ff:d4:f6:e5:61:4a:07:ee: 38:e2:6a:44:79:b8:a9:a1:b9:d9:e3:ad:8e:de:57: 4e:09:8c:4b:82:47:93:36:5b:d7:b0:d7:c5:48:63: 37:ad:c4:78:7c:8e:8e:92:91:46:82:c2:e4:78:a4: ec:0c:4c:ea:be:1d:a8:e8:dd:f5:af:f9:e7:14:53: 57:39:77:ca:0a:d7:9a:2e:73:cf:f1:33:8e:2a:08: 6d:dc:d3:95:aa:db:6c:3f:ea:6e:2a:4f:4e:44:7c: c2:d0:72:d0:43:ab:2b:d4:9a:d5:c0:44:d5:0d:26: d2:ad:7c:0f:6e:6a:69:00:85:66:37:65:74:63:25: 5e:1f:ac:55:9b:b0:03:bc:33:f3:56:91:cc:f6:83: a6:5d:bb:1f:49:27:70:d4:e4:c4:3b:8d:6c:6f:72: 3c:7c:45:ed:7b:18:34:49:8f:f5:e3:c0:46:b3:65: 91:45:f4:a9:37:8d:fc:ba:62:42:56:e1:4b:2c:dc: 46:ce:54:55:ac:39:e4:33:8e:1f:96:0b:6d:dc:74: 95:8d:eb:ac:ee:a4:ec:c4:15:2e:36:92:47:49:43: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3F:63:02:5F:FB:20:42:A2:0A:D9:F1:C2:A6:AD:8E:E6:8D:23:0C X509v3 Authority Key Identifier: keyid:9D:DC:73:77:51:7D:53:59:3B:F1:AC:96:6C:3B:71:AF:6F:5C:09:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/HT9jAl_7IEKiCtnxwqatjuaNIww.roa sbgp-ipAddrBlock: critical IPv6: 2401:cbc0::/32 Signature Algorithm: sha256WithRSAEncryption 41:24:5b:1c:1d:b1:00:bf:e8:49:48:2d:d0:75:26:db:4a:5c: 8c:90:d1:74:3e:c4:2b:63:22:0c:42:8f:f0:f7:b7:ee:c1:82: 0e:f4:ef:5f:eb:6a:04:37:4b:a5:5a:0e:f7:96:66:22:87:5c: a0:20:96:5d:09:24:a3:f1:8d:59:c6:70:83:bb:59:1e:da:78: 43:38:6d:c5:85:97:10:90:88:fd:61:c4:1e:3b:c0:62:9b:7b: a2:57:1d:53:6e:fd:56:5f:d5:a7:03:eb:c7:95:2b:49:0a:8c: c3:89:41:6f:94:4a:de:31:b5:2d:ff:c0:dc:4a:7c:34:df:ba: 0b:66:55:c6:03:93:2d:5a:49:91:98:c8:f6:e1:bd:40:e7:52: 18:a4:6e:26:b2:cb:52:8b:74:fb:1a:5f:9e:41:60:7e:8a:0f: d7:96:87:51:1f:8b:77:2f:7e:d8:eb:47:4b:7a:55:a7:07:af: e1:31:ec:12:7b:ad:62:a7:9b:35:17:1a:97:db:89:48:1c:e4: e2:d1:6e:e9:cf:7e:a3:b0:46:3c:70:89:c9:26:63:f5:e6:a4: b4:5e:53:66:91:23:76:83:55:09:18:95:18:d8:ee:00:f7:cc: 8b:b2:e3:97:55:7d:1a:af:3f:e4:23:53:8b:1c:ff:0c:aa:4d: d2:55:2a:fa -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RERD NzM3NzUxN0Q1MzU5M0JGMUFDOTY2QzNCNzFBRjZGNUMwOUNBMB4XDTI2MDMzMTA3 MzcwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUQzRjYzMDI1RkZCMjA0 MkEyMEFEOUYxQzJBNkFEOEVFNjhEMjMwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKihSMzRkv7w1QEzQ7c61b/nze5FmROGYy+6RczwVlfDDtzRif/U 9uVhSgfuOOJqRHm4qaG52eOtjt5XTgmMS4JHkzZb17DXxUhjN63EeHyOjpKRRoLC 5Hik7AxM6r4dqOjd9a/55xRTVzl3ygrXmi5zz/EzjioIbdzTlarbbD/qbipPTkR8 wtBy0EOrK9Sa1cBE1Q0m0q18D25qaQCFZjdldGMlXh+sVZuwA7wz81aRzPaDpl27 H0kncNTkxDuNbG9yPHxF7XsYNEmP9ePARrNlkUX0qTeN/LpiQlbhSyzcRs5UVaw5 5DOOH5YLbdx0lY3rrO6k7MQVLjaSR0lDsJECAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQdP2MCX/sgQqIK2fHCpq2O5o0jDDAfBgNVHSMEGDAWgBSd3HN3UX1TWTvxrJZs O3Gvb1wJyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMTAvbmR4emQxRjlVMWs3OGF5V2JEdHhyMjljQ2NvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmR4emQxRjlVMWs3OGF5V2JEdHhy MjljQ2NvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMzEwL0hUOWpBbF83SUVLaUN0bnh3cWF0anVhTkl3dy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcvAMA0GCSqGSIb3DQEBCwUA A4IBAQBBJFscHbEAv+hJSC3QdSbbSlyMkNF0PsQrYyIMQo/w97fuwYIO9O9f62oE N0ulWg73lmYih1ygIJZdCSSj8Y1ZxnCDu1ke2nhDOG3FhZcQkIj9YcQeO8Bim3ui Vx1Tbv1WX9WnA+vHlStJCozDiUFvlEreMbUt/8DcSnw037oLZlXGA5MtWkmRmMj2 4b1A51IYpG4msstSi3T7Gl+eQWB+ig/XlodRH4t3L37Y60dLelWnB6/hMewSe61i p5s1FxqX24lIHOTi0W7pz36jsEY8cInJJmP15qS0XlNmkSN2g1UJGJUY2O4A98yL suOXVX0arz/kI1OLHP8Mqk3SVSr6 -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:41 2026 by rpki-client