$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30438/xJmGN4fiJ4IOV1fJygcKehQQpMg.roa File: xJmGN4fiJ4IOV1fJygcKehQQpMg.roa (raw, json) Hash identifier: +IWFct4bDIpQYOYnACdHU+bauJiYLr1EIuQh/a5Kvow= Subject key identifier: C4:99:86:37:87:E2:27:82:0E:57:57:C9:CA:07:0A:7A:14:10:A4:C8 Certificate issuer: /CN=BF791915BC4356AAB7A6EFCD6393E1930B502728 Certificate serial: 1B Authority key identifier: BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/xJmGN4fiJ4IOV1fJygcKehQQpMg.roa Signing time: Tue 31 Mar 2026 08:44:20 +0000 ROA not before: Tue 31 Mar 2026 08:44:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 152860 IP address blocks: 2401:a920::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF791915BC4356AAB7A6EFCD6393E1930B502728 Validity Not Before: Mar 31 08:44:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C499863787E227820E5757C9CA070A7A1410A4C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:c7:f4:fc:11:40:5b:5b:dc:a5:1b:76:f0: a2:85:65:61:e1:39:8f:62:2c:22:e1:c8:2b:e6:08: f6:0a:a9:f1:fd:58:7a:2d:aa:d1:6c:d9:80:ff:b0: 88:92:4a:6d:de:91:db:5d:1e:9f:70:73:13:de:c4: 63:e4:53:82:38:68:3c:8c:66:91:d7:95:32:88:81: e1:96:4a:21:21:0c:d3:43:5b:f0:35:3b:74:de:c5: d3:d4:4b:f8:50:e9:25:8c:68:71:16:ac:fa:9f:e2: a0:32:41:74:e5:5a:96:0b:7d:d1:2e:35:e4:91:89: e8:4b:8f:f7:48:61:8d:20:37:a7:82:d8:c3:15:7a: 66:8d:9e:78:16:1a:18:30:b6:07:65:25:96:76:c2: 22:c4:87:5e:ba:30:a2:d8:56:8b:32:18:79:ff:d6: 0b:c3:37:0f:01:63:b9:25:6a:69:49:b9:e5:b9:db: 43:0c:0a:25:c2:22:17:8d:ec:48:b8:9a:86:68:50: 77:41:69:84:a3:3d:9a:46:44:61:04:77:53:36:cf: c5:b5:2c:08:25:b0:03:a8:f3:de:66:2d:89:b4:ff: 94:0d:9f:4d:64:ec:c4:45:fd:38:22:4d:b6:fa:0d: 7a:c8:8d:06:80:1f:6d:6b:d3:df:94:72:ea:27:93: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:86:37:87:E2:27:82:0E:57:57:C9:CA:07:0A:7A:14:10:A4:C8 X509v3 Authority Key Identifier: keyid:BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/xJmGN4fiJ4IOV1fJygcKehQQpMg.roa sbgp-ipAddrBlock: critical IPv6: 2401:a920::/32 Signature Algorithm: sha256WithRSAEncryption 3e:d6:52:c7:93:93:db:0a:71:0a:a3:c6:a4:0e:51:06:32:60: b6:c9:c8:6f:8c:6a:55:8f:d2:04:7e:bb:4f:de:ab:65:43:46: 9d:c2:39:68:13:5c:56:9d:bd:9e:47:04:15:3e:ff:4b:89:fd: e0:1b:84:8c:45:79:65:91:e5:8f:c9:64:40:97:a7:9b:66:cb: e9:ad:63:ef:6e:d2:e4:42:b0:0e:e5:fa:4d:1a:68:71:a9:b3: 6d:25:f0:1b:cf:86:72:92:fb:15:4f:9d:1c:c2:0d:8a:a2:19: 7a:d0:89:c8:c2:ea:cf:e5:63:e8:4b:e5:5b:f1:71:14:ec:85: 67:8e:eb:35:74:35:02:c4:88:60:5d:6f:39:f8:81:0c:6d:ca: 6c:46:59:1c:d5:ec:0e:ec:28:8b:e4:25:af:23:c8:1e:ff:07: 08:cd:84:0a:4a:43:15:9f:01:e7:68:e2:c8:45:f5:bf:fb:e7: 36:26:29:09:6f:c4:82:b3:68:9b:d2:cf:ab:4d:6a:ee:a5:ed: a4:aa:19:34:f6:91:2a:cc:84:ec:82:d8:ed:65:ba:73:7c:29: 78:47:db:70:dd:89:bb:96:1a:f2:dc:3b:5d:99:9f:4d:0b:32: 72:20:5d:64:5c:b2:db:15:67:57:9c:2b:e7:c1:c1:df:50:ec: 4e:83:e6:1d -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRjc5 MTkxNUJDNDM1NkFBQjdBNkVGQ0Q2MzkzRTE5MzBCNTAyNzI4MB4XDTI2MDMzMTA4 NDQyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzQ5OTg2Mzc4N0UyMjc4 MjBFNTc1N0M5Q0EwNzBBN0ExNDEwQTRDODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK41x/T8EUBbW9ylG3bwooVlYeE5j2IsIuHIK+YI9gqp8f1Yei2q 0WzZgP+wiJJKbd6R210en3BzE97EY+RTgjhoPIxmkdeVMoiB4ZZKISEM00Nb8DU7 dN7F09RL+FDpJYxocRas+p/ioDJBdOValgt90S415JGJ6EuP90hhjSA3p4LYwxV6 Zo2eeBYaGDC2B2UllnbCIsSHXrowothWizIYef/WC8M3DwFjuSVqaUm55bnbQwwK JcIiF43sSLiahmhQd0FphKM9mkZEYQR3UzbPxbUsCCWwA6jz3mYtibT/lA2fTWTs xEX9OCJNtvoNesiNBoAfbWvT35Ry6ieT1osCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBTEmYY3h+Ingg5XV8nKBwp6FBCkyDAfBgNVHSMEGDAWgBS/eRkVvENWqrem781j k+GTC1AnKDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzgvdjNrWkZieERWcXEzcHVfTlk1UGhrd3RRSnlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdjNrWkZieERWcXEzcHVfTlk1UGhr d3RRSnlnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDM4L3hKbUdONGZpSjRJT1YxZkp5Z2NLZWhRUXBNZy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAakgMA0GCSqGSIb3DQEBCwUA A4IBAQA+1lLHk5PbCnEKo8akDlEGMmC2ychvjGpVj9IEfrtP3qtlQ0adwjloE1xW nb2eRwQVPv9Lif3gG4SMRXllkeWPyWRAl6ebZsvprWPvbtLkQrAO5fpNGmhxqbNt JfAbz4ZykvsVT50cwg2Kohl60InIwurP5WPoS+Vb8XEU7IVnjus1dDUCxIhgXW85 +IEMbcpsRlkc1ewO7CiL5CWvI8ge/wcIzYQKSkMVnwHnaOLIRfW/++c2JikJb8SC s2ib0s+rTWrupe2kqhk09pEqzITsgtjtZbpzfCl4R9tw3Ym7lhry3DtdmZ9NCzJy IF1kXLLbFWdXnCvnwcHfUOxOg+Yd -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:37 2026 by rpki-client