$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/2LoNK3oDGu-tryXlzyx-YV9ZCA0.roa File: 2LoNK3oDGu-tryXlzyx-YV9ZCA0.roa (raw, json) Hash identifier: 0Uf5igxjm4TTcjM2hnc8qC4Qdpn5CVBVDpB2Rxuz0vM= Subject key identifier: D8:BA:0D:2B:7A:03:1A:EF:AD:AF:25:E5:CF:2C:7E:61:5F:59:08:0D Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 46 Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/2LoNK3oDGu-tryXlzyx-YV9ZCA0.roa Signing time: Tue 31 Mar 2026 08:49:29 +0000 ROA not before: Tue 31 Mar 2026 08:49:29 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 218.42.192.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:29 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=D8BA0D2B7A031AEFADAF25E5CF2C7E615F59080D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:0e:59:61:a2:f2:2a:1b:d0:8b:69:25:ea: c5:f2:63:57:67:ee:91:7f:2a:03:e9:cb:58:e5:dd: 3a:54:2c:08:75:08:2c:c0:4e:04:44:39:98:bb:f2: 2a:34:d4:f9:c3:e0:aa:7d:68:e9:37:82:be:21:38: 5d:5d:01:7f:c3:8c:05:6f:c8:1d:cd:dd:53:26:2d: 0a:88:ad:cc:b9:eb:6a:79:7c:b0:90:0d:b1:f1:1d: 62:5f:62:9c:87:f0:ee:be:af:f5:1c:e3:91:3b:90: 06:93:2b:43:b1:21:fc:d3:81:15:48:32:cf:06:9d: 64:31:ac:55:3f:fe:ae:c8:37:91:79:49:d2:51:7a: 8a:c0:6b:09:d0:d2:ad:f9:93:18:71:52:06:b6:12: 67:0d:f0:db:5b:47:aa:1d:f2:12:5c:51:98:70:77: e2:fa:e7:c1:6f:5f:ec:a6:44:01:fd:c6:0d:21:2f: fd:f9:89:3c:44:83:82:28:04:e0:a4:eb:bc:83:f1: 5e:38:49:8a:8d:bf:ec:ed:e3:bd:72:ad:b4:ee:89: 47:73:b0:cd:36:92:7c:03:59:d7:60:28:9d:b3:f9: aa:5e:0f:2a:7b:73:65:fc:e6:20:8d:a5:0d:41:1e: 7f:d2:c2:99:57:97:d0:73:cb:ed:34:47:52:83:70: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:0D:2B:7A:03:1A:EF:AD:AF:25:E5:CF:2C:7E:61:5F:59:08:0D X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/2LoNK3oDGu-tryXlzyx-YV9ZCA0.roa sbgp-ipAddrBlock: critical IPv4: 218.42.192.0/18 Signature Algorithm: sha256WithRSAEncryption 25:6a:86:12:60:77:7d:7f:4f:37:f4:ff:b0:cd:6e:d0:ca:20: 96:dc:ef:4e:0f:92:9f:9b:26:8b:d0:c0:37:8f:c1:cb:6f:3e: cd:9b:a7:28:ec:69:53:1c:eb:86:0d:af:7e:67:c0:a7:f8:eb: 85:7e:6b:7f:63:4d:e5:d2:f4:71:ba:0a:bb:c0:c9:e7:d6:c7: 80:fd:1c:32:cd:03:c5:83:2c:7c:e3:1c:16:9c:ca:58:aa:b8: 08:f5:00:96:0a:e2:a7:f2:b6:c5:04:ef:13:53:0e:ec:5f:2d: 4d:a8:6e:16:4b:42:bd:81:05:95:ae:42:cf:17:aa:f1:10:a5: 19:ec:3b:4c:d5:c4:d1:c3:03:d8:b4:ff:a6:80:8c:81:b0:a3: dd:24:d1:be:ef:58:25:24:1c:25:e6:c7:0d:23:f0:17:c7:94: 6e:0d:a5:1f:89:6d:0a:c6:6a:70:a7:1c:cf:0a:f8:99:01:f5: 9b:da:0b:d4:0b:77:00:cb:01:67:a6:46:48:20:12:d9:b4:6a: 18:d9:8f:ef:f4:e4:67:2a:56:47:93:c3:37:7e:5d:a3:5f:60: 65:f8:54:f3:42:d0:22:b5:29:5a:d1:b9:54:1c:3c:76:bf:a7: 2f:81:da:77:57:8c:ef:92:ef:a2:e5:0a:d8:38:10:12:d3:f3: 6c:4a:59:36 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkyOVoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoRDhCQTBEMkI3QTAzMUFF RkFEQUYyNUU1Q0YyQzdFNjE1RjU5MDgwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALWQDllhovIqG9CLaSXqxfJjV2fukX8qA+nLWOXdOlQsCHUILMBO BEQ5mLvyKjTU+cPgqn1o6TeCviE4XV0Bf8OMBW/IHc3dUyYtCoitzLnranl8sJAN sfEdYl9inIfw7r6v9RzjkTuQBpMrQ7Eh/NOBFUgyzwadZDGsVT/+rsg3kXlJ0lF6 isBrCdDSrfmTGHFSBrYSZw3w21tHqh3yElxRmHB34vrnwW9f7KZEAf3GDSEv/fmJ PESDgigE4KTrvIPxXjhJio2/7O3jvXKttO6JR3OwzTaSfANZ12AonbP5ql4PKntz ZfzmII2lDUEef9LCmVeX0HPL7TRHUoNwORkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTYug0regMa762vJeXPLH5hX1kIDTAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvMkxvTkszb0RHdS10cnlYbHp5eC1ZVjlaQ0EwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtoqwDANBgkqhkiG9w0BAQsFAAOCAQEA JWqGEmB3fX9PN/T/sM1u0MogltzvTg+Sn5smi9DAN4/By28+zZunKOxpUxzrhg2v fmfAp/jrhX5rf2NN5dL0cboKu8DJ59bHgP0cMs0DxYMsfOMcFpzKWKq4CPUAlgri p/K2xQTvE1MO7F8tTahuFktCvYEFla5Czxeq8RClGew7TNXE0cMD2LT/poCMgbCj 3STRvu9YJSQcJebHDSPwF8eUbg2lH4ltCsZqcKcczwr4mQH1m9oL1At3AMsBZ6ZG SCAS2bRqGNmP7/TkZypWR5PDN35do19gZfhU80LQIrUpWtG5VBw8dr+nL4Had1eM 75LvouUK2DgQEtPzbEpZNg== -----END CERTIFICATE-----Generated at Tue Apr 7 20:44:29 2026 by rpki-client