$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30428/ARnO9bn_xj---a7p2lqi_7jtNGg.roa File: ARnO9bn_xj---a7p2lqi_7jtNGg.roa (raw, json) Hash identifier: 1IVznt9omDzLaPVhgSp4t72sspKesiPShkH5DiJ+tdo= Subject key identifier: 01:19:CE:F5:B9:FF:C6:3F:BE:F9:AE:E9:DA:5A:A2:FF:B8:ED:34:68 Certificate issuer: /CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E Certificate serial: 25 Authority key identifier: CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/ARnO9bn_xj---a7p2lqi_7jtNGg.roa Signing time: Tue 31 Mar 2026 08:39:17 +0000 ROA not before: Tue 31 Mar 2026 08:39:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23831 IP address blocks: 2401:2f20::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E Validity Not Before: Mar 31 08:39:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0119CEF5B9FFC63FBEF9AEE9DA5AA2FFB8ED3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:96:51:bb:c0:ba:cb:51:6d:12:f9:af:a4: 78:9d:f5:70:aa:e9:1c:5f:21:cf:17:14:d3:95:f9: bf:f8:04:15:29:6b:7f:40:e4:bc:64:da:78:06:d8: 83:b3:79:f6:71:5d:03:34:ba:00:23:f1:24:dd:fb: 12:1f:32:c8:90:fa:8d:d4:af:79:60:b9:ad:bf:33: eb:8f:9b:0b:af:69:d5:02:5e:2a:e5:48:e1:93:77: 03:c8:68:11:cd:56:45:39:14:b4:de:c5:14:f9:94: 30:25:5a:4c:4e:75:1e:83:dc:97:80:74:fe:82:60: 4c:b0:ee:a3:71:81:be:41:49:b3:99:77:f2:75:01: 2a:ce:cd:ba:18:e9:1b:9e:15:e6:6a:22:30:3a:94: 29:e2:ff:21:8a:3a:c4:92:23:cd:3d:72:93:70:6d: 96:72:07:44:6c:ab:fc:63:4a:a3:f3:55:b0:3c:bc: 01:a4:b1:c0:48:9e:ad:5f:6c:d2:32:80:63:70:cc: 71:df:c1:8a:c0:92:6d:0d:75:bb:57:b5:30:2e:dc: 8e:8d:2e:93:67:d4:fd:74:47:a3:6a:c6:88:66:4a: 40:07:ed:b4:d1:7e:69:48:47:4a:15:c6:65:6e:89: 14:84:a5:35:6a:f5:20:be:fe:0a:9a:ba:4d:be:e1: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:19:CE:F5:B9:FF:C6:3F:BE:F9:AE:E9:DA:5A:A2:FF:B8:ED:34:68 X509v3 Authority Key Identifier: keyid:CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/ARnO9bn_xj---a7p2lqi_7jtNGg.roa sbgp-ipAddrBlock: critical IPv6: 2401:2f20::/32 Signature Algorithm: sha256WithRSAEncryption 9d:b3:23:84:89:5e:65:42:c3:f9:3a:18:b2:66:80:6d:7c:b4: 2c:4a:7d:28:2c:1f:72:f8:7e:7b:a2:30:08:63:55:fe:50:1f: 6f:78:6a:dc:3e:d0:cc:ed:b4:46:ef:0c:7e:ff:54:6f:48:93: d5:4f:5c:71:37:fb:10:bf:d7:5e:fb:4a:d1:31:a2:ce:c3:38: 0f:4f:5b:27:17:1f:4c:57:59:89:bd:ab:e3:7a:60:a9:52:54: 1d:e1:0e:fa:78:05:b0:62:f4:8b:0f:a4:13:f7:07:82:df:f2: 29:0a:87:f1:a3:99:55:05:dd:51:6e:57:21:be:c0:34:79:1a: a0:c8:31:00:52:a8:2e:4c:ba:45:42:f5:da:69:d1:7e:c4:59: ea:7b:f9:4b:4a:0d:83:a2:75:df:d6:14:7a:00:ec:13:32:75: 56:fc:0b:17:e1:d0:d6:b7:04:69:a4:ea:55:e1:0b:6d:14:69: 87:e8:e1:bc:f4:73:54:e6:8e:dc:7e:44:d9:23:08:04:c6:4f: 70:ff:87:a3:53:89:91:05:39:28:d1:fc:f5:9e:bc:87:81:91: 47:ba:c0:0f:5b:63:08:34:7a:37:19:94:01:11:72:25:fd:97: 36:7d:c9:e3:e4:10:c1:bc:3a:6a:9a:c0:48:3a:e2:82:9c:b6: f2:47:7e:c2 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQkFB QjZFOTAyQTc1NEFCMjBGRjEyNTZBMkFGQzY3OUM0MTMzNzNFMB4XDTI2MDMzMTA4 MzkxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDExOUNFRjVCOUZGQzYz RkJFRjlBRUU5REE1QUEyRkZCOEVEMzQ2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALZ4llG7wLrLUW0S+a+keJ31cKrpHF8hzxcU05X5v/gEFSlrf0Dk vGTaeAbYg7N59nFdAzS6ACPxJN37Eh8yyJD6jdSveWC5rb8z64+bC69p1QJeKuVI 4ZN3A8hoEc1WRTkUtN7FFPmUMCVaTE51HoPcl4B0/oJgTLDuo3GBvkFJs5l38nUB Ks7NuhjpG54V5moiMDqUKeL/IYo6xJIjzT1yk3BtlnIHRGyr/GNKo/NVsDy8AaSx wEierV9s0jKAY3DMcd/BisCSbQ11u1e1MC7cjo0uk2fU/XRHo2rGiGZKQAfttNF+ aUhHShXGZW6JFISlNWr1IL7+Cpq6Tb7h7i8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQBGc71uf/GP775runaWqL/uO00aDAfBgNVHSMEGDAWgBTLqrbpAqdUqyD/Elai r8Z5xBM3PjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjgveTZxMjZRS25WS3NnX3hKV29xX0dlY1FUTno0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveTZxMjZRS25WS3NnX3hKV29xX0dl Y1FUTno0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDI4L0FSbk85Ym5feGotLS1hN3AybHFpXzdqdE5HZy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAS8gMA0GCSqGSIb3DQEBCwUA A4IBAQCdsyOEiV5lQsP5OhiyZoBtfLQsSn0oLB9y+H57ojAIY1X+UB9veGrcPtDM 7bRG7wx+/1RvSJPVT1xxN/sQv9de+0rRMaLOwzgPT1snFx9MV1mJvavjemCpUlQd 4Q76eAWwYvSLD6QT9weC3/IpCofxo5lVBd1RblchvsA0eRqgyDEAUqguTLpFQvXa adF+xFnqe/lLSg2DonXf1hR6AOwTMnVW/AsX4dDWtwRppOpV4QttFGmH6OG89HNU 5o7cfkTZIwgExk9w/4ejU4mRBTko0fz1nryHgZFHusAPW2MINHo3GZQBEXIl/Zc2 fcnj5BDBvDpqmsBIOuKCnLbyR37C -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:57 2026 by rpki-client