$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30391/h5kv7yHR_Y_9cbdX-kuDvc9GCJ8.roa File: h5kv7yHR_Y_9cbdX-kuDvc9GCJ8.roa (raw, json) Hash identifier: y8QKw+j/FNQu+j618oNeCMvl3kkvvAM8gcKfYq6dPqw= Subject key identifier: 87:99:2F:EF:21:D1:FD:8F:FD:71:B7:57:FA:4B:83:BD:CF:46:08:9F Certificate issuer: /CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F Certificate serial: 3A Authority key identifier: 4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/h5kv7yHR_Y_9cbdX-kuDvc9GCJ8.roa Signing time: Tue 31 Mar 2026 08:23:17 +0000 ROA not before: Tue 31 Mar 2026 08:23:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 146974 IP address blocks: 2400:1920::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F Validity Not Before: Mar 31 08:23:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=87992FEF21D1FD8FFD71B757FA4B83BDCF46089F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:ac:2c:ad:76:1d:fd:60:ae:04:33:6e:13: ae:cc:c9:91:f9:4f:88:79:be:38:a5:10:05:40:f1: f0:9e:86:d9:5f:23:29:55:3b:14:93:36:b3:1c:96: d2:74:9d:3f:dc:56:0c:f2:ab:5d:c0:65:a1:89:8d: a5:fd:1a:17:70:34:f1:d1:fa:44:aa:ea:88:8d:8f: bf:23:c7:85:88:1a:55:b5:83:c0:7d:5d:e4:96:56: e7:13:ca:67:7b:db:21:a3:6b:f2:bd:1d:e7:cc:ae: 5c:12:de:64:91:ee:89:53:06:e2:70:9e:db:df:12: 97:30:34:c9:b5:80:8c:d0:48:a7:bc:c6:97:aa:30: ce:61:39:3b:eb:bc:5e:01:91:0f:46:5b:75:e4:f1: 71:b3:fc:a3:4c:75:74:6d:53:89:c5:99:a8:d8:e0: a1:ab:09:99:e7:b4:39:fc:e6:b6:26:b5:66:fe:a5: 3a:c4:12:5f:e9:71:7c:af:13:8c:ba:cd:ca:33:21: 85:ca:f6:6d:18:28:34:a2:0b:7d:68:76:e5:03:97: cd:6c:97:b1:f6:13:bc:33:b9:41:f4:bd:b4:42:cc: 94:d4:5a:6f:19:57:20:ae:1a:ca:90:dc:a4:40:7b: 73:1e:1c:04:05:28:cc:31:64:33:a9:b0:a9:f0:37: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:99:2F:EF:21:D1:FD:8F:FD:71:B7:57:FA:4B:83:BD:CF:46:08:9F X509v3 Authority Key Identifier: keyid:4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/h5kv7yHR_Y_9cbdX-kuDvc9GCJ8.roa sbgp-ipAddrBlock: critical IPv6: 2400:1920::/32 Signature Algorithm: sha256WithRSAEncryption 5d:2a:c8:52:2b:1b:65:99:b8:d9:e2:51:86:6d:8b:f2:43:66: c2:04:72:1c:67:8b:eb:53:37:1a:92:c2:58:ac:49:50:cf:d0: f3:4e:e9:76:b1:b8:fe:5f:92:69:5b:fa:c2:b3:a8:56:05:59: 8a:a1:21:59:08:d4:28:8d:f5:e7:98:ed:5c:d5:ff:f2:72:eb: f7:47:a5:c7:ae:29:40:6d:7a:1e:bd:09:00:16:30:00:bf:38: cd:4c:22:1e:cb:af:dd:f7:93:5b:e5:90:0a:96:b9:60:ae:a1: dc:47:f6:60:fa:e9:f9:35:9c:e0:63:22:02:32:0e:c3:9e:9d: 37:64:ae:b9:b9:64:29:59:be:de:dc:27:24:17:06:b9:c8:95: b9:ce:c0:3c:d1:23:e8:ab:e2:3e:92:2a:f8:24:05:c4:3c:48: 9f:01:60:97:6f:dd:ec:a1:9d:1b:de:04:d3:e8:3d:bf:67:e5: 2c:4d:fc:ae:d6:39:06:15:24:85:9e:51:7a:fb:c7:32:02:3f: 7a:92:79:d9:30:97:ed:d2:fe:52:ee:e7:4c:8f:3e:d4:4f:e2: 7c:5e:75:a6:af:8d:e3:3d:e6:ad:e8:3d:84:16:ee:03:58:51: 1c:8e:fa:df:07:d8:f4:7a:4b:9c:48:2e:ae:cb:08:81:19:88: 53:83:d1:fb -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzVD NTI1NDA4MTNFNUQxQzczNkNFM0Y1N0E0QzlGMzI2OTk1OTFGMB4XDTI2MDMzMTA4 MjMxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODc5OTJGRUYyMUQxRkQ4 RkZENzFCNzU3RkE0QjgzQkRDRjQ2MDg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN31rCytdh39YK4EM24TrszJkflPiHm+OKUQBUDx8J6G2V8jKVU7 FJM2sxyW0nSdP9xWDPKrXcBloYmNpf0aF3A08dH6RKrqiI2PvyPHhYgaVbWDwH1d 5JZW5xPKZ3vbIaNr8r0d58yuXBLeZJHuiVMG4nCe298SlzA0ybWAjNBIp7zGl6ow zmE5O+u8XgGRD0ZbdeTxcbP8o0x1dG1TicWZqNjgoasJmee0Ofzmtia1Zv6lOsQS X+lxfK8TjLrNyjMhhcr2bRgoNKILfWh25QOXzWyXsfYTvDO5QfS9tELMlNRabxlX IK4aypDcpEB7cx4cBAUozDFkM6mwqfA3VN8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBSHmS/vIdH9j/1xt1f6S4O9z0YInzAfBgNVHSMEGDAWgBRMXFJUCBPl0cc2zj9X pMnzJplZHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzOTEvVEZ4U1ZBZ1Q1ZEhITnM0X1Y2VEo4eWFaV1I4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVEZ4U1ZBZ1Q1ZEhITnM0X1Y2VEo4 eWFaV1I4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMzkxL2g1a3Y3eUhSX1lfOWNiZFgta3VEdmM5R0NKOC5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkABkgMA0GCSqGSIb3DQEBCwUA A4IBAQBdKshSKxtlmbjZ4lGGbYvyQ2bCBHIcZ4vrUzcaksJYrElQz9DzTul2sbj+ X5JpW/rCs6hWBVmKoSFZCNQojfXnmO1c1f/ycuv3R6XHrilAbXoevQkAFjAAvzjN TCIey6/d95Nb5ZAKlrlgrqHcR/Zg+un5NZzgYyICMg7Dnp03ZK65uWQpWb7e3Cck Fwa5yJW5zsA80SPoq+I+kir4JAXEPEifAWCXb93soZ0b3gTT6D2/Z+UsTfyu1jkG FSSFnlF6+8cyAj96knnZMJft0v5S7udMjz7UT+J8XnWmr43jPeat6D2EFu4DWFEc jvrfB9j0ekucSC6uywiBGYhTg9H7 -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:12 2026 by rpki-client