$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39057/xImnwJHdHO_C221KB-1Bs7g9dfs.roa File: xImnwJHdHO_C221KB-1Bs7g9dfs.roa (raw, json) Hash identifier: UEszwA9t4A6Zz+0RLu7jbQ3yGJ941Jjqlz9IAqZVD1Q= Subject key identifier: C4:89:A7:C0:91:DD:1C:EF:C2:DB:6D:4A:07:ED:41:B3:B8:3D:75:FB Certificate issuer: /CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627 Certificate serial: 25 Authority key identifier: 38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/xImnwJHdHO_C221KB-1Bs7g9dfs.roa Signing time: Tue 31 Mar 2026 08:39:19 +0000 ROA not before: Tue 31 Mar 2026 08:39:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131984 IP address blocks: 2001:df6:580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627 Validity Not Before: Mar 31 08:39:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C489A7C091DD1CEFC2DB6D4A07ED41B3B83D75FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b9:58:a7:07:93:28:57:cb:6d:0f:c1:f0:ef: ef:47:6b:aa:f2:a0:75:86:ca:10:68:82:e8:97:12: e2:80:18:09:20:9a:3d:ec:32:56:03:e5:fa:23:b5: 0b:f7:a3:35:df:b3:46:76:53:a9:40:36:94:4c:56: 5a:66:cf:b8:13:03:a0:0b:0a:ed:90:3e:ba:bf:79: 96:70:56:4f:e4:4b:0a:74:b3:7a:56:55:9e:01:7a: 43:b5:3c:bd:a5:59:6a:df:39:c2:53:d6:9e:0a:51: d6:fb:c9:93:e5:f1:e8:ab:d6:f2:e0:90:90:f6:23: 19:fb:ab:c4:5d:31:3c:b2:df:89:24:8d:93:c9:af: c9:7d:c8:ff:43:a9:6b:d3:db:09:6d:70:9a:6b:23: 13:a0:3a:29:da:33:b4:99:0d:1b:2e:42:b3:4d:6a: b0:e9:b3:24:86:96:35:86:6c:40:e4:83:25:77:15: 60:aa:7a:ac:29:8d:49:90:b5:5c:c9:60:20:85:09: 2a:ce:6e:ef:d8:82:1f:f5:25:1a:d3:91:79:e8:0d: c8:45:ef:b6:51:da:25:50:ba:ff:f2:c5:4b:d7:96: ff:90:cf:dd:55:d0:a6:08:9b:af:9a:50:43:0c:43: 06:3e:74:c7:ea:01:5e:ef:8c:b2:7b:60:29:a6:68: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:89:A7:C0:91:DD:1C:EF:C2:DB:6D:4A:07:ED:41:B3:B8:3D:75:FB X509v3 Authority Key Identifier: keyid:38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/xImnwJHdHO_C221KB-1Bs7g9dfs.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:580::/48 Signature Algorithm: sha256WithRSAEncryption 71:43:34:bf:19:d3:7b:e6:50:86:f4:ab:17:19:29:8c:5c:64: ad:aa:da:59:2b:86:91:c4:80:1b:3b:45:73:84:a4:f4:a0:8a: c7:6a:fa:8a:26:c8:74:cf:00:6d:fc:51:15:20:b3:81:16:b7: 9e:27:0b:ce:57:eb:91:e9:ae:65:67:57:37:a9:4e:d8:f8:7a: b6:fa:47:f7:6d:77:4e:15:a7:a3:c8:89:1c:e2:42:46:84:36: 0f:e9:dc:fa:01:9c:37:35:fa:d3:b2:c7:d2:d3:b2:b8:80:80: cc:95:66:a5:4e:3c:b6:96:cb:3a:a4:d6:2a:f1:b8:69:7a:36: cb:89:26:be:8b:cd:22:02:dd:18:62:c8:8c:53:23:c1:b0:db: b0:22:58:86:06:dd:20:4d:c0:b0:f7:38:77:fa:ac:93:fb:23: 13:1c:7c:1d:a7:b2:65:82:7d:8d:84:be:04:35:10:be:b6:35: 5c:fc:f6:9a:e0:d6:fb:0f:27:a6:ce:d0:5a:3a:47:cb:f8:ef: 29:57:e6:c2:ad:88:d9:a2:ea:9c:ed:93:b0:fc:45:c8:73:a3: bf:2e:4f:02:19:06:77:3d:ac:e3:2b:fc:c6:30:3e:26:53:7d: 44:ea:28:13:ae:7a:ee:ca:f1:73:b0:f0:45:00:55:b1:2c:fd: 09:84:4e:a1 -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOEUw M0IxOEUzMEE1RkI0N0VFQjFGM0UwNDk1NUE5MEEzQjRBNjI3MB4XDTI2MDMzMTA4 MzkxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzQ4OUE3QzA5MUREMUNF RkMyREI2RDRBMDdFRDQxQjNCODNENzVGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPO5WKcHkyhXy20PwfDv70drqvKgdYbKEGiC6JcS4oAYCSCaPewy VgPl+iO1C/ejNd+zRnZTqUA2lExWWmbPuBMDoAsK7ZA+ur95lnBWT+RLCnSzelZV ngF6Q7U8vaVZat85wlPWngpR1vvJk+Xx6KvW8uCQkPYjGfurxF0xPLLfiSSNk8mv yX3I/0Opa9PbCW1wmmsjE6A6KdoztJkNGy5Cs01qsOmzJIaWNYZsQOSDJXcVYKp6 rCmNSZC1XMlgIIUJKs5u79iCH/UlGtOReegNyEXvtlHaJVC6//LFS9eW/5DP3VXQ pgibr5pQQwxDBj50x+oBXu+MsntgKaZopGkCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBTEiafAkd0c78LbbUoH7UGzuD11+zAfBgNVHSMEGDAWgBQ44DsY4wpftH7rHz4E lVqQo7SmJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwNTcvT09BN0dPTUtYN1ItNng4LUJKVmFrS08wcGljLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT09BN0dPTUtYN1ItNng4LUJKVmFr S08wcGljLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzM5MDU3L3hJbW53SkhkSE9fQzIyMUtCLTFCczdnOWRmcy5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ32BYAwDQYJKoZIhvcNAQEL BQADggEBAHFDNL8Z03vmUIb0qxcZKYxcZK2q2lkrhpHEgBs7RXOEpPSgisdq+oom yHTPAG38URUgs4EWt54nC85X65HprmVnVzepTtj4erb6R/dtd04Vp6PIiRziQkaE Ng/p3PoBnDc1+tOyx9LTsriAgMyVZqVOPLaWyzqk1irxuGl6NsuJJr6LzSIC3Rhi yIxTI8Gw27AiWIYG3SBNwLD3OHf6rJP7IxMcfB2nsmWCfY2EvgQ1EL62NVz89prg 1vsPJ6bO0Fo6R8v47ylX5sKtiNmi6pztk7D8Rchzo78uTwIZBnc9rOMr/MYwPiZT fUTqKBOueu7K8XOw8EUAVbEs/QmETqE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:17 2026 by rpki-client