$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39006/--mAQ9aK63ahXoNaVaEJiXIIQL0.roa File: --mAQ9aK63ahXoNaVaEJiXIIQL0.roa (raw, json) Hash identifier: xzO1k6Yi8+l/rfj5b1qTOaTwzVmpsC6TMnTrCcZTG2U= Subject key identifier: FB:E9:80:43:D6:8A:EB:76:A1:5E:83:5A:55:A1:09:89:72:08:40:BD Certificate issuer: /CN=CDA5D42260459716CE5AB243ADAFFA66FDE60079 Certificate serial: 0B Authority key identifier: CD:A5:D4:22:60:45:97:16:CE:5A:B2:43:AD:AF:FA:66:FD:E6:00:79 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zaXUImBFlxbOWrJDra_6Zv3mAHk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39006/--mAQ9aK63ahXoNaVaEJiXIIQL0.roa Signing time: Tue 31 Mar 2026 08:46:57 +0000 ROA not before: Tue 31 Mar 2026 08:46:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 45689 IP address blocks: 2001:df0:68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39006/zaXUImBFlxbOWrJDra_6Zv3mAHk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39006/zaXUImBFlxbOWrJDra_6Zv3mAHk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zaXUImBFlxbOWrJDra_6Zv3mAHk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA5D42260459716CE5AB243ADAFFA66FDE60079 Validity Not Before: Mar 31 08:46:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FBE98043D68AEB76A15E835A55A10989720840BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:b3:ee:d3:31:ab:67:57:fe:a5:30:6a:08: fc:bd:6d:2b:73:67:63:e3:e2:09:d2:c1:36:ff:0c: 62:5c:4e:42:8a:ea:1e:96:3b:23:68:56:88:44:95: 87:64:d2:3b:ba:dd:4f:3c:81:b3:5f:99:f2:e9:60: 56:d2:78:96:8d:e2:64:00:53:cf:5f:3b:23:62:1d: 9c:82:3f:98:25:64:1a:e5:5a:9c:73:7c:ad:4a:7c: d2:b2:45:15:3d:aa:06:59:b8:5c:a4:a7:01:89:ad: 44:6d:8c:e3:d2:34:70:91:b2:41:d1:27:62:8a:8e: 63:26:9b:f3:8f:82:b9:8d:c8:8a:00:5d:3c:ae:9e: 6f:a0:51:ab:e7:40:4d:40:0d:7f:59:2f:b2:c1:ab: 43:c1:f6:39:e3:c2:ed:d6:45:16:6d:38:91:a2:31: 2b:bc:a0:f3:70:f1:e5:fd:b4:4c:67:ac:54:af:89: 80:ed:bc:d8:b4:7d:00:21:0a:69:da:06:e7:f5:e2: 55:fc:6a:af:08:80:5b:c4:e1:d4:7c:b1:4f:fb:ae: 2b:0c:d1:90:e7:c9:93:bb:4f:10:6e:9f:8c:a2:00: 10:b3:1e:81:81:24:32:a4:9c:31:13:56:eb:07:48: 0b:68:41:ac:f2:94:2f:f4:f8:e3:3c:5f:a3:96:33: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E9:80:43:D6:8A:EB:76:A1:5E:83:5A:55:A1:09:89:72:08:40:BD X509v3 Authority Key Identifier: keyid:CD:A5:D4:22:60:45:97:16:CE:5A:B2:43:AD:AF:FA:66:FD:E6:00:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39006/zaXUImBFlxbOWrJDra_6Zv3mAHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zaXUImBFlxbOWrJDra_6Zv3mAHk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39006/--mAQ9aK63ahXoNaVaEJiXIIQL0.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:68::/48 Signature Algorithm: sha256WithRSAEncryption a7:26:ff:3b:15:a1:09:24:b9:22:a4:67:eb:2b:1a:97:8a:b1: 4f:05:09:d0:cd:9e:65:6b:37:37:ce:f6:6b:94:d8:46:8f:97: 3f:83:6f:3f:42:50:66:ab:a4:d2:7e:dc:f8:1e:7a:29:57:5d: 50:12:dd:cd:60:47:b6:10:ba:bc:5b:1f:6f:32:c4:0a:e0:5f: a7:21:8b:c1:d3:1a:38:42:3f:99:51:85:66:2d:40:1d:57:82: 62:fb:21:f0:e4:e5:f0:a5:c4:2f:f1:a5:ef:43:6b:8e:c9:1b: 15:72:95:19:f0:d5:17:07:d3:0b:3e:68:91:18:8c:fc:49:81: fa:54:56:80:10:26:74:97:fa:98:92:37:b6:e7:a8:62:5f:db: 9d:64:64:73:17:4b:d7:79:f3:a7:dc:46:42:ca:51:be:3a:bf: 76:1f:32:a6:5b:6c:28:9e:40:3e:e1:5f:7d:68:95:b5:97:26: c4:6d:18:4d:b8:84:a3:38:1d:82:83:bf:f2:70:7f:45:fa:1a: 10:57:10:97:19:05:43:27:88:be:fe:cf:35:07:49:b6:31:61: fd:76:68:c8:cb:43:d5:83:ca:46:64:a8:6a:ea:00:5b:d0:b0: c8:98:4c:b0:67:a9:5f:e2:a3:24:f4:d0:3e:23:c9:0d:c4:25: c3:1c:8e:ec -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDREE1 RDQyMjYwNDU5NzE2Q0U1QUIyNDNBREFGRkE2NkZERTYwMDc5MB4XDTI2MDMzMTA4 NDY1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRkJFOTgwNDNENjhBRUI3 NkExNUU4MzVBNTVBMTA5ODk3MjA4NDBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO+Bs+7TMatnV/6lMGoI/L1tK3NnY+PiCdLBNv8MYlxOQorqHpY7 I2hWiESVh2TSO7rdTzyBs1+Z8ulgVtJ4lo3iZABTz187I2IdnII/mCVkGuVanHN8 rUp80rJFFT2qBlm4XKSnAYmtRG2M49I0cJGyQdEnYoqOYyab84+CuY3IigBdPK6e b6BRq+dATUANf1kvssGrQ8H2OePC7dZFFm04kaIxK7yg83Dx5f20TGesVK+JgO28 2LR9ACEKadoG5/XiVfxqrwiAW8Th1HyxT/uuKwzRkOfJk7tPEG6fjKIAELMegYEk MqScMRNW6wdIC2hBrPKUL/T44zxfo5YzENMCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBT76YBD1orrdqFeg1pVoQmJcghAvTAfBgNVHSMEGDAWgBTNpdQiYEWXFs5askOt r/pm/eYAeTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwMDYvemFYVUltQkZseGJPV3JKRHJhXzZadjNtQUhrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemFYVUltQkZseGJPV3JKRHJhXzZa djNtQUhrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzM5MDA2Ly0tbUFROWFLNjNhaFhvTmFWYUVKaVhJSVFMMC5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAGgwDQYJKoZIhvcNAQEL BQADggEBAKcm/zsVoQkkuSKkZ+srGpeKsU8FCdDNnmVrNzfO9muU2EaPlz+Dbz9C UGarpNJ+3PgeeilXXVAS3c1gR7YQurxbH28yxArgX6chi8HTGjhCP5lRhWYtQB1X gmL7IfDk5fClxC/xpe9Da47JGxVylRnw1RcH0ws+aJEYjPxJgfpUVoAQJnSX+piS N7bnqGJf251kZHMXS9d586fcRkLKUb46v3YfMqZbbCieQD7hX31olbWXJsRtGE24 hKM4HYKDv/Jwf0X6GhBXEJcZBUMniL7+zzUHSbYxYf12aMjLQ9WDykZkqGrqAFvQ sMiYTLBnqV/ioyT00D4jyQ3EJcMcjuw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:02 2026 by rpki-client