$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30450/Sa1TSVceQP9ZsSLYCO0-XR5cAGQ.roa File: Sa1TSVceQP9ZsSLYCO0-XR5cAGQ.roa (raw, json) Hash identifier: xIo+gFh+imnW+WIOxPIKTqjKNqG8d6UsX2ccKAGwc0E= Subject key identifier: 49:AD:53:49:57:1E:40:FF:59:B1:22:D8:08:ED:3E:5D:1E:5C:00:64 Certificate issuer: /CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Certificate serial: 0F Authority key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/Sa1TSVceQP9ZsSLYCO0-XR5cAGQ.roa Signing time: Tue 31 Mar 2026 08:47:34 +0000 ROA not before: Tue 31 Mar 2026 08:47:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 152873 IP address blocks: 2402:2f60::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Validity Not Before: Mar 31 08:47:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=49AD5349571E40FF59B122D808ED3E5D1E5C0064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:ce:b2:e0:b4:6a:99:b1:6c:3c:6e:aa:c0: dd:07:56:37:4d:b4:e9:95:92:fa:04:ae:27:92:93: e3:36:a9:5d:41:98:b4:d3:34:24:ee:78:a6:1e:c8: 4d:b6:03:5c:38:08:9b:27:a0:a7:ab:0f:cd:b0:73: 72:f1:59:19:2c:2c:ad:93:29:d2:89:37:b6:66:30: 14:97:f1:e4:e7:03:09:19:cf:10:a0:a0:47:af:7d: d7:e5:ad:a6:f6:36:75:ff:e9:23:79:df:3d:87:1c: ae:45:52:85:fa:22:a2:f9:05:1c:22:ef:60:e6:35: 16:11:73:53:8e:00:f5:a7:f0:01:89:5d:cc:ec:b8: 11:0e:72:1c:03:69:e4:49:48:ec:b9:49:ee:9b:9d: ce:53:e4:0d:ca:9a:44:2b:4a:9c:47:bc:69:fe:db: af:21:23:b6:c9:0f:70:6b:d5:f4:b2:84:d9:ed:1f: f2:4b:c5:c7:68:64:3a:5e:42:cb:a3:8b:42:44:b9: 79:ea:da:cf:7d:e5:2f:99:df:5a:f6:dd:a5:12:75: ce:5e:a7:83:d5:34:9b:b6:59:53:a8:9e:5c:05:ec: 60:62:9b:cd:87:71:cc:fa:72:65:1c:3a:39:14:71: f7:62:cc:13:08:63:ea:7f:26:71:11:3a:7d:1a:91: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:53:49:57:1E:40:FF:59:B1:22:D8:08:ED:3E:5D:1E:5C:00:64 X509v3 Authority Key Identifier: keyid:CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/Sa1TSVceQP9ZsSLYCO0-XR5cAGQ.roa sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 55:bf:0d:dc:b2:c1:c6:8a:ba:b7:4f:14:d7:62:74:b1:4e:f1: 37:9c:3d:80:24:ae:67:3a:df:92:93:9d:f2:c6:7a:d1:de:b3: d2:b5:cc:68:2d:8a:ad:a5:9e:73:ed:22:e7:41:85:0b:c4:e9: ae:7f:08:8d:a1:19:32:03:1a:22:e4:99:50:5d:ca:7e:ff:c4: ca:12:47:fd:34:07:99:64:8b:8f:17:80:7d:79:f2:1f:f5:22: 01:45:4d:be:c4:b8:ea:04:59:9a:8f:a1:2b:82:81:cd:7e:c0: 32:66:89:a0:8a:af:5c:63:b5:cc:41:b2:5e:b1:3b:d3:ac:1f: 0b:08:e2:8c:4e:dd:92:54:53:96:75:cd:9a:ae:d4:82:ec:d9: 3f:d7:0b:06:d8:80:b6:4f:e5:2b:7c:a3:f1:33:9b:31:3e:ca: d6:c1:7a:94:09:97:62:09:31:10:24:94:27:67:02:24:dc:08: c9:5b:83:f1:98:1e:3b:72:50:f5:5b:91:96:eb:be:d5:21:68: cb:c8:a3:27:3c:41:8f:7f:41:e9:f1:51:84:cd:4e:84:78:af: df:4e:48:c4:7b:20:d8:74:26:b2:65:45:e5:7e:a0:1e:3a:ba: e2:90:1a:3c:50:1b:1a:00:5c:b4:f4:68:53:ec:50:60:20:b4: 38:65:e8:b2 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQkEz MkY0NEJDMzJGMUUxRTE5MkZFMkM1NDczQzBENzI5Rjg4QzRFMB4XDTI2MDMzMTA4 NDczNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDlBRDUzNDk1NzFFNDBG RjU5QjEyMkQ4MDhFRDNFNUQxRTVDMDA2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMT3zrLgtGqZsWw8bqrA3QdWN0206ZWS+gSuJ5KT4zapXUGYtNM0 JO54ph7ITbYDXDgImyegp6sPzbBzcvFZGSwsrZMp0ok3tmYwFJfx5OcDCRnPEKCg R6991+WtpvY2df/pI3nfPYccrkVShfoiovkFHCLvYOY1FhFzU44A9afwAYldzOy4 EQ5yHANp5ElI7LlJ7pudzlPkDcqaRCtKnEe8af7bryEjtskPcGvV9LKE2e0f8kvF x2hkOl5Cy6OLQkS5eeraz33lL5nfWvbdpRJ1zl6ng9U0m7ZZU6ieXAXsYGKbzYdx zPpyZRw6ORRx92LMEwhj6n8mcRE6fRqRwKMCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRJrVNJVx5A/1mxItgI7T5dHlwAZDAfBgNVHSMEGDAWgBTLoy9EvDLx4eGS/ixU c8DXKfiMTjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NTAveTZNdlJMd3k4ZUhoa3Y0c1ZIUEExeW40akU0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveTZNdlJMd3k4ZUhoa3Y0c1ZIUEEx eW40akU0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDUwL1NhMVRTVmNlUVA5WnNTTFlDTzAtWFI1Y0FHUS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3DQEBCwUA A4IBAQBVvw3cssHGirq3TxTXYnSxTvE3nD2AJK5nOt+Sk53yxnrR3rPStcxoLYqt pZ5z7SLnQYULxOmufwiNoRkyAxoi5JlQXcp+/8TKEkf9NAeZZIuPF4B9efIf9SIB RU2+xLjqBFmaj6ErgoHNfsAyZomgiq9cY7XMQbJesTvTrB8LCOKMTt2SVFOWdc2a rtSC7Nk/1wsG2IC2T+UrfKPxM5sxPsrWwXqUCZdiCTEQJJQnZwIk3AjJW4PxmB47 clD1W5GW677VIWjLyKMnPEGPf0Hp8VGEzU6EeK/fTkjEeyDYdCayZUXlfqAeOrri kBo8UBsaAFy09GhT7FBgILQ4Zeiy -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:54 2026 by rpki-client