$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30438/emUqNt711w8Id7XG8z20py0_tUE.roa File: emUqNt711w8Id7XG8z20py0_tUE.roa (raw, json) Hash identifier: 2n0rg2Vjv/trEw3Cszhu2qtX6xlA3poPkA4OH+dH9RU= Subject key identifier: 7A:65:2A:36:DE:F5:D7:0F:08:77:B5:C6:F3:3D:B4:A7:2D:3F:B5:41 Certificate issuer: /CN=BF791915BC4356AAB7A6EFCD6393E1930B502728 Certificate serial: 1A Authority key identifier: BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/emUqNt711w8Id7XG8z20py0_tUE.roa Signing time: Tue 31 Mar 2026 08:44:19 +0000 ROA not before: Tue 31 Mar 2026 08:44:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 1008 IP address blocks: 2401:a920::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF791915BC4356AAB7A6EFCD6393E1930B502728 Validity Not Before: Mar 31 08:44:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7A652A36DEF5D70F0877B5C6F33DB4A72D3FB541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:90:24:82:43:a6:8b:03:38:ae:25:9a:20: 12:f8:e2:fd:87:2b:32:30:97:8d:aa:e8:04:ba:41: af:12:da:ef:ab:99:dd:ba:c7:0d:9c:59:cf:0c:b0: d0:6a:7e:4a:fd:ab:22:3c:12:7d:79:e4:5c:e0:0e: d2:c3:8d:4f:f3:1f:f1:ce:bd:d6:bf:75:1a:57:48: 0b:53:fe:de:6e:02:1c:74:11:36:73:45:a0:27:30: 4e:d0:36:dc:e8:2a:05:11:f2:c8:33:0b:ac:47:29: 2e:5b:d3:48:d1:2a:23:26:27:19:66:c1:0f:3e:54: 4a:80:7a:ac:16:70:c2:2a:33:93:a1:d9:b9:83:4c: b3:b5:7f:ab:af:7b:bc:37:27:cc:f7:f4:30:c4:87: c8:39:3e:ce:10:a9:fe:28:ad:af:b5:db:0f:b1:f3: 7c:27:e6:e9:4f:2e:18:bc:42:b3:0e:de:74:11:03: 26:fa:bd:22:44:41:ba:de:ed:8b:1e:be:c5:4e:3f: 18:29:11:ba:00:14:4c:65:ca:5a:90:e2:38:06:6c: 13:a0:c0:76:a4:09:54:02:4f:a7:ee:5d:54:d3:2c: 54:18:d9:df:2f:cd:b5:f6:62:5f:c5:99:dd:f8:fe: b7:76:9a:4b:1e:11:3f:23:ca:18:82:48:b7:22:db: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:2A:36:DE:F5:D7:0F:08:77:B5:C6:F3:3D:B4:A7:2D:3F:B5:41 X509v3 Authority Key Identifier: keyid:BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/emUqNt711w8Id7XG8z20py0_tUE.roa sbgp-ipAddrBlock: critical IPv6: 2401:a920::/32 Signature Algorithm: sha256WithRSAEncryption 69:fe:d7:e3:24:68:72:98:71:6e:d2:72:a0:73:95:f1:86:b1: 9b:ee:b9:50:2d:e8:df:32:8c:75:99:dd:50:98:51:c9:5c:d3: 7c:29:c9:8f:74:5c:82:af:72:1b:d1:16:11:8e:2c:4f:d1:03: 64:dd:89:be:8e:c4:32:ae:39:83:9a:a2:e7:ec:2d:db:98:38: ba:16:e3:f3:97:c6:ac:88:20:f1:fe:fc:8e:d8:a1:f3:90:5e: b6:dd:9c:d6:bf:5f:0a:3f:a4:88:32:72:a8:4b:95:7f:33:f1: 0a:b7:12:c3:d6:b7:94:96:f0:52:38:6e:c3:98:20:f5:2c:44: e4:6c:fd:42:9c:60:55:14:64:61:6c:9e:30:cd:b7:6f:ea:d7: 66:f6:fa:28:4f:a7:60:de:eb:e6:46:a7:b1:3f:ab:56:cb:31: 07:0f:55:c8:b5:e1:8c:80:06:ce:99:3f:37:70:45:2f:f4:2a: b5:85:5e:c5:0c:54:48:04:fd:8c:68:3f:2b:c0:09:30:2a:52: 8c:dd:58:33:57:38:b5:2a:b3:d1:eb:36:34:ef:c0:12:6a:18: e5:da:ce:36:f6:4d:91:7c:2d:fa:1d:af:87:6a:47:b3:5a:0c: 37:c0:2c:69:d9:33:af:c7:58:fa:ed:1d:2e:18:4b:c8:3f:f6: ae:25:e8:ec -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRjc5 MTkxNUJDNDM1NkFBQjdBNkVGQ0Q2MzkzRTE5MzBCNTAyNzI4MB4XDTI2MDMzMTA4 NDQxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0E2NTJBMzZERUY1RDcw RjA4NzdCNUM2RjMzREI0QTcyRDNGQjU0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKlnkCSCQ6aLAziuJZogEvji/YcrMjCXjaroBLpBrxLa76uZ3brH DZxZzwyw0Gp+Sv2rIjwSfXnkXOAO0sONT/Mf8c691r91GldIC1P+3m4CHHQRNnNF oCcwTtA23OgqBRHyyDMLrEcpLlvTSNEqIyYnGWbBDz5USoB6rBZwwiozk6HZuYNM s7V/q697vDcnzPf0MMSHyDk+zhCp/iitr7XbD7HzfCfm6U8uGLxCsw7edBEDJvq9 IkRBut7tix6+xU4/GCkRugAUTGXKWpDiOAZsE6DAdqQJVAJPp+5dVNMsVBjZ3y/N tfZiX8WZ3fj+t3aaSx4RPyPKGIJItyLbqr8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBR6ZSo23vXXDwh3tcbzPbSnLT+1QTAfBgNVHSMEGDAWgBS/eRkVvENWqrem781j k+GTC1AnKDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzgvdjNrWkZieERWcXEzcHVfTlk1UGhrd3RRSnlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdjNrWkZieERWcXEzcHVfTlk1UGhr d3RRSnlnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDM4L2VtVXFOdDcxMXc4SWQ3WEc4ejIwcHkwX3RVRS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAakgMA0GCSqGSIb3DQEBCwUA A4IBAQBp/tfjJGhymHFu0nKgc5XxhrGb7rlQLejfMox1md1QmFHJXNN8KcmPdFyC r3Ib0RYRjixP0QNk3Ym+jsQyrjmDmqLn7C3bmDi6FuPzl8asiCDx/vyO2KHzkF62 3ZzWv18KP6SIMnKoS5V/M/EKtxLD1reUlvBSOG7DmCD1LETkbP1CnGBVFGRhbJ4w zbdv6tdm9vooT6dg3uvmRqexP6tWyzEHD1XIteGMgAbOmT83cEUv9Cq1hV7FDFRI BP2MaD8rwAkwKlKM3VgzVzi1KrPR6zY078ASahjl2s429k2RfC36Ha+HakezWgw3 wCxp2TOvx1j67R0uGEvIP/auJejs -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:36 2026 by rpki-client