$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39067/dF0fMm2E3PzN-jVlihxrkk0XHBk.roa File: dF0fMm2E3PzN-jVlihxrkk0XHBk.roa (raw, json) Hash identifier: HXqkY0nCc2+Ux71vTUl7HEhtmb044cU52w2NIuQTKcc= Subject key identifier: 74:5D:1F:32:6D:84:DC:FC:CD:FA:35:65:8A:1C:6B:92:4D:17:1C:19 Certificate issuer: /CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218 Certificate serial: 2A Authority key identifier: 88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/dF0fMm2E3PzN-jVlihxrkk0XHBk.roa Signing time: Tue 31 Mar 2026 08:36:05 +0000 ROA not before: Tue 31 Mar 2026 08:36:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63806 IP address blocks: 2001:df3:14c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218 Validity Not Before: Mar 31 08:36:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=745D1F326D84DCFCCDFA35658A1C6B924D171C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:40:bb:f6:b1:04:95:d2:d7:e1:cd:68:cc: ae:59:2e:68:0b:38:f6:32:85:16:8c:e4:4c:a0:7c: e2:25:9b:28:33:eb:50:28:9a:77:04:a5:6d:72:b9: 11:d8:2b:e8:e2:df:f6:60:28:c4:9b:b5:f0:e8:43: cf:fd:9b:e3:d8:ff:c7:f9:73:ec:cd:9b:7f:08:c9: bf:ef:3c:c7:57:04:61:14:92:c1:28:85:90:45:eb: ca:03:8e:bb:a7:8d:1c:ac:ad:17:9b:2e:70:26:f9: c2:0d:9c:96:46:2e:2c:20:0c:6c:86:4c:8a:6a:b1: 16:4e:84:9c:e0:a6:43:4e:c4:20:57:71:c2:cc:87: 48:7e:9e:b5:ee:19:bf:f5:d0:8d:fd:d9:7d:c4:4a: 6a:81:a9:e7:3a:3e:b4:ff:b5:94:6b:a4:c4:ef:a7: 79:79:b8:46:88:e4:0e:73:f4:db:18:35:e5:51:1b: 6c:31:72:fe:7a:c0:67:f4:95:1b:07:7a:8d:6a:a1: 68:9e:69:de:ea:bd:0c:e4:66:44:c9:da:b6:59:57: 9e:72:72:bb:33:22:aa:0a:46:8e:cf:c7:f6:1d:4e: d3:4c:88:4d:70:87:62:15:9f:28:23:8e:2d:62:94: e6:d5:50:ff:13:d5:f0:5f:95:a4:f8:78:64:84:96: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:1F:32:6D:84:DC:FC:CD:FA:35:65:8A:1C:6B:92:4D:17:1C:19 X509v3 Authority Key Identifier: keyid:88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/dF0fMm2E3PzN-jVlihxrkk0XHBk.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:14c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:5f:dd:ca:59:44:a5:f0:2a:35:96:f3:c7:48:90:d2:2d:05: a4:85:4e:2d:40:7f:d4:f8:e8:8c:d7:42:92:93:19:16:0b:bd: 7f:b3:63:2a:36:72:7e:31:a0:3e:02:de:a6:d2:0e:8d:bd:c1: 11:ca:8e:b8:23:eb:5f:fa:f3:6d:b1:42:e7:4f:aa:08:dd:dd: ec:53:ae:b5:cf:7e:9d:95:f9:f2:71:09:33:ac:b7:a8:ec:a3: f6:c5:38:f7:c3:9e:c5:d7:d1:3c:25:ce:ba:5c:68:d4:8d:77: 3c:88:04:0a:1a:46:03:29:89:09:8a:c6:25:ca:59:b3:3f:4d: d5:b0:18:95:0f:7e:53:05:c4:58:21:e3:cf:0c:66:92:44:f0: f5:fb:de:1f:9e:d6:94:ac:be:77:5b:b8:bc:ee:6a:71:9a:5d: d8:83:68:0e:54:89:d4:43:72:6d:f8:55:54:ad:c2:cc:e7:47: ac:d8:d8:c9:c1:64:87:a3:68:d8:d8:8e:40:6a:d8:cb:88:08: 0e:07:09:e9:06:3d:a7:7d:92:9d:73:30:21:d6:ae:6a:22:53: b8:49:da:79:97:bb:da:ad:a4:4f:ac:76:84:d2:9f:5a:97:7b: 4a:0d:27:4b:e2:08:6f:fb:f2:c6:b1:3f:08:f0:26:b4:9c:d5: 9e:2a:5f:cc -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OEVE QkQ4ODczNEI4REJCMzU4NkE2RDA1OUI4QTY1N0JGQjNBMjE4MB4XDTI2MDMzMTA4 MzYwNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzQ1RDFGMzI2RDg0RENG Q0NERkEzNTY1OEExQzZCOTI0RDE3MUMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8lQLv2sQSV0tfhzWjMrlkuaAs49jKFFozkTKB84iWbKDPrUCia dwSlbXK5Edgr6OLf9mAoxJu18OhDz/2b49j/x/lz7M2bfwjJv+88x1cEYRSSwSiF kEXrygOOu6eNHKytF5sucCb5wg2clkYuLCAMbIZMimqxFk6EnOCmQ07EIFdxwsyH SH6ete4Zv/XQjf3ZfcRKaoGp5zo+tP+1lGukxO+neXm4RojkDnP02xg15VEbbDFy /nrAZ/SVGwd6jWqhaJ5p3uq9DORmRMnatllXnnJyuzMiqgpGjs/H9h1O00yITXCH YhWfKCOOLWKU5tVQ/xPV8F+VpPh4ZISW5+UCAwEAAaOCAeAwggHcMB0GA1UdDgQW BBR0XR8ybYTc/M36NWWKHGuSTRccGTAfBgNVHSMEGDAWgBSI7b2Ic0uNuzWGptBZ uKZXv7OiGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwNjcvaU8yOWlITkxqYnMxaHFiUVdiaW1WNy16b2hnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaU8yOWlITkxqYnMxaHFiUVdiaW1W Ny16b2hnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzM5MDY3L2RGMGZNbTJFM1B6Ti1qVmxpaHhya2swWEhCay5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3zFMAwDQYJKoZIhvcNAQEL BQADggEBAAlf3cpZRKXwKjWW88dIkNItBaSFTi1Af9T46IzXQpKTGRYLvX+zYyo2 cn4xoD4C3qbSDo29wRHKjrgj61/6822xQudPqgjd3exTrrXPfp2V+fJxCTOst6js o/bFOPfDnsXX0TwlzrpcaNSNdzyIBAoaRgMpiQmKxiXKWbM/TdWwGJUPflMFxFgh 488MZpJE8PX73h+e1pSsvndbuLzuanGaXdiDaA5UidRDcm34VVStwsznR6zY2MnB ZIejaNjYjkBq2MuICA4HCekGPad9kp1zMCHWrmoiU7hJ2nmXu9qtpE+sdoTSn1qX e0oNJ0viCG/78saxPwjwJrSc1Z4qX8w= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:07 2026 by rpki-client