$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/biXcwgLgO-o3ihCd5tqexvXjj4I.roa File: biXcwgLgO-o3ihCd5tqexvXjj4I.roa (raw, json) Hash identifier: 6bg8FtZHWvuMKa+4xPj18mMgu4ROunX5uDbAjLcpzjA= Subject key identifier: 6E:25:DC:C2:02:E0:3B:EA:37:8A:10:9D:E6:DA:9E:C6:F5:E3:8F:82 Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Certificate serial: 30 Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/biXcwgLgO-o3ihCd5tqexvXjj4I.roa Signing time: Tue 31 Mar 2026 08:32:46 +0000 ROA not before: Tue 31 Mar 2026 08:32:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24271 IP address blocks: 2400:99a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Validity Not Before: Mar 31 08:32:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6E25DCC202E03BEA378A109DE6DA9EC6F5E38F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:91:be:d4:8d:fd:a9:ac:71:f0:41:13:43: d4:a0:1b:1c:47:a6:48:bc:b8:9f:4c:61:04:5d:34: f0:c0:ee:53:25:20:77:f3:a2:1c:a8:dd:69:0d:87: 1d:b0:a0:57:c8:6f:e4:9f:32:bc:db:40:b5:a2:55: 58:f4:bb:34:8c:0d:48:e6:a9:51:ad:8e:d5:03:44: da:a0:f0:29:e0:fc:b9:e5:63:69:24:e2:54:47:0f: 38:7e:a8:d4:72:8c:e5:40:4c:41:3a:35:6f:25:0c: a0:12:9d:8d:4e:49:98:2c:e9:c9:ec:b1:b2:ef:c4: 8c:ab:7f:b9:36:12:85:00:f6:e4:b2:38:26:87:4a: 75:10:43:21:a3:0e:d6:2a:92:ce:44:28:c2:cd:49: e5:fb:71:af:26:b2:a4:79:93:22:2b:ef:1e:3f:79: 6a:7b:7d:b5:4f:fc:3d:45:ea:88:77:aa:9a:43:3c: 91:69:6f:76:74:fc:b0:76:bd:ca:e8:0e:e7:eb:69: d8:02:be:5b:de:00:12:e2:3d:25:39:c9:1b:e4:56: 2b:97:30:01:7f:f6:cf:f8:d6:5b:52:3a:f5:db:10: 5b:60:e8:4d:02:a0:52:ff:94:5e:39:af:ed:63:12: 2f:7c:f6:fd:6b:e2:ac:71:df:5c:d2:c4:7f:52:97: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:25:DC:C2:02:E0:3B:EA:37:8A:10:9D:E6:DA:9E:C6:F5:E3:8F:82 X509v3 Authority Key Identifier: keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/biXcwgLgO-o3ihCd5tqexvXjj4I.roa sbgp-ipAddrBlock: critical IPv6: 2400:99a0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:8b:65:10:e3:8e:e2:d1:ac:46:cb:6f:33:a9:0f:cc:d7:e9: bd:47:a4:0f:ab:cc:c4:dd:f2:31:1d:3e:2b:2d:b4:c2:87:83: 24:1d:12:da:32:d3:58:55:2c:09:12:37:33:52:c8:3a:21:44: 82:35:af:8f:f1:73:d2:6a:8a:32:39:6a:5c:5f:ef:6d:8a:f8: 10:af:63:f9:e8:65:3d:b8:66:b4:b6:ba:0a:16:dc:85:b6:9c: 1c:6f:c6:a2:ca:87:0f:ef:92:e4:87:55:89:f7:0c:7b:18:c5: f8:67:96:1d:60:db:b0:d8:0a:a7:1e:cf:63:2c:25:49:2c:d0: 00:57:02:cd:67:51:7c:a9:90:be:59:e7:e0:66:25:66:da:a5: 11:b4:db:be:c4:c1:fd:b1:d4:43:1a:40:bd:1d:81:a9:ea:01: 72:b6:49:c3:13:0e:47:e3:94:95:22:76:39:04:ad:a6:c0:8a: f9:ba:52:f1:38:96:e2:d6:6d:38:58:1a:ce:43:82:ca:85:1a: 1d:48:12:85:e8:3b:14:25:b3:35:a4:9e:c7:82:0a:b0:18:49: e4:02:ba:46:fb:ae:8a:98:51:2e:d6:31:0a:55:3d:1a:ca:c5: 00:6b:fe:e5:a3:f1:15:10:a6:32:91:34:4b:6b:95:79:18:d2: 88:f2:28:c4 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkNC MjExRjI5M0U1NEU4NEUzQ0JEOUQyMkIwODg0Njc1QkIxQzYzMB4XDTI2MDMzMTA4 MzI0NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkUyNURDQzIwMkUwM0JF QTM3OEExMDlERTZEQTlFQzZGNUUzOEY4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM76kb7Ujf2prHHwQRND1KAbHEemSLy4n0xhBF008MDuUyUgd/Oi HKjdaQ2HHbCgV8hv5J8yvNtAtaJVWPS7NIwNSOapUa2O1QNE2qDwKeD8ueVjaSTi VEcPOH6o1HKM5UBMQTo1byUMoBKdjU5JmCzpyeyxsu/EjKt/uTYShQD25LI4JodK dRBDIaMO1iqSzkQows1J5ftxryaypHmTIivvHj95ant9tU/8PUXqiHeqmkM8kWlv dnT8sHa9yugO5+tp2AK+W94AEuI9JTnJG+RWK5cwAX/2z/jWW1I69dsQW2DoTQKg Uv+UXjmv7WMSL3z2/WvirHHfXNLEf1KXQpUCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRuJdzCAuA76jeKEJ3m2p7G9eOPgjAfBgNVHSMEGDAWgBTiyyEfKT5U6E48vZ0i sIhGdbscYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDYvNHNzaEh5ay1WT2hPUEwyZElyQ0lSblc3SEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHNzaEh5ay1WT2hPUEwyZElyQ0lS blc3SEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDA2L2JpWGN3Z0xnTy1vM2loQ2Q1dHFleHZYamo0SS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAJmgMA0GCSqGSIb3DQEBCwUA A4IBAQAei2UQ447i0axGy28zqQ/M1+m9R6QPq8zE3fIxHT4rLbTCh4MkHRLaMtNY VSwJEjczUsg6IUSCNa+P8XPSaooyOWpcX+9tivgQr2P56GU9uGa0troKFtyFtpwc b8aiyocP75Lkh1WJ9wx7GMX4Z5YdYNuw2AqnHs9jLCVJLNAAVwLNZ1F8qZC+Wefg ZiVm2qURtNu+xMH9sdRDGkC9HYGp6gFytknDEw5H45SVInY5BK2mwIr5ulLxOJbi 1m04WBrOQ4LKhRodSBKF6DsUJbM1pJ7HggqwGEnkArpG+66KmFEu1jEKVT0aysUA a/7lo/EVEKYykTRLa5V5GNKI8ijE -----END CERTIFICATE-----Generated at Tue Apr 7 20:44:41 2026 by rpki-client