$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/atOHlCNASI9c1qyH-5weADYU1NM.roa File: atOHlCNASI9c1qyH-5weADYU1NM.roa (raw, json) Hash identifier: qUzmziYgTOYnplkkDlCvD33mTgNUrw88P+CcQxxnkO8= Subject key identifier: 6A:D3:87:94:23:40:48:8F:5C:D6:AC:87:FB:9C:1E:00:36:14:D4:D3 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 2C Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/atOHlCNASI9c1qyH-5weADYU1NM.roa Signing time: Tue 31 Mar 2026 08:49:17 +0000 ROA not before: Tue 31 Mar 2026 08:49:17 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 60.56.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:17 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=6AD387942340488F5CD6AC87FB9C1E003614D4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:95:e4:b8:2c:b6:5e:43:b2:75:6d:92:45: 66:96:d5:53:4e:c6:d8:67:88:16:64:3b:6b:ff:31: 4a:1a:d3:56:f8:dc:21:e4:df:95:71:c8:56:e6:22: a0:da:fb:11:44:f8:28:af:5f:05:55:0b:88:11:f0: 0a:c2:f8:4d:b9:38:1d:5f:21:b0:91:1a:2a:f5:ed: b9:b9:a1:57:85:8a:e4:3f:04:5c:c6:1d:9b:c4:26: e9:ae:38:4e:81:0d:fd:42:0f:d7:56:41:e3:ed:88: 83:07:53:c5:16:9d:4f:55:c4:69:ce:62:3f:24:fb: c1:5c:84:df:f3:b4:36:94:3d:89:38:e4:c8:cf:ed: 5d:37:dc:1b:6c:9d:f9:17:4e:cb:9f:87:23:73:19: 01:4e:14:35:8d:7a:0d:35:17:3e:ba:13:40:ce:a5: 00:d0:af:0b:b4:20:c8:b5:4a:e6:20:b2:89:bb:50: 97:90:d7:bf:06:a9:2d:1c:e1:7d:9a:18:d3:46:40: fe:3a:1e:e0:5b:9c:9e:e9:73:fe:ca:e7:86:d8:27: a2:49:b1:3b:1b:ed:fc:b1:23:bb:f4:62:1e:04:09: 96:50:41:8f:fc:bc:74:59:74:d2:de:1c:77:af:3e: c8:67:29:03:4e:9f:47:7e:58:ba:41:64:8d:2d:64: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:87:94:23:40:48:8F:5C:D6:AC:87:FB:9C:1E:00:36:14:D4:D3 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/atOHlCNASI9c1qyH-5weADYU1NM.roa sbgp-ipAddrBlock: critical IPv4: 60.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:0b:b3:13:65:4f:41:36:8e:a0:47:cb:63:0d:a1:73:79:69: 11:2b:7b:e7:26:ba:99:12:c0:9c:df:52:6a:e8:d1:e0:c8:23: 95:14:cc:06:2f:91:a1:9d:9d:01:9f:3e:ca:d1:ab:81:04:8f: fc:47:4e:ac:47:d4:21:16:4e:6b:45:b8:9b:f6:d9:a9:55:dc: 61:30:7c:4e:03:23:63:e4:b9:16:9e:e0:19:2c:96:01:1c:5a: e9:d7:94:dc:0a:b7:cb:85:b4:11:85:26:68:aa:d9:e9:e4:be: 87:29:f3:a2:86:dd:2b:45:3f:78:0d:3d:09:af:a3:4e:bb:d6: a8:eb:ce:3e:52:21:e6:84:7a:a5:4b:33:e7:67:e7:8d:6a:46: 85:fe:15:89:b4:15:c9:ba:b8:dc:5c:89:fa:f8:43:1c:c6:ad: 99:83:a5:ca:23:79:dd:f9:31:a5:2a:e0:01:3c:94:e3:a9:cb: 9e:04:3d:66:29:de:d0:b2:77:e0:5e:72:c0:3d:f6:07:21:7b: 99:c5:2d:07:92:f7:ca:6b:41:1e:ef:54:45:c4:bc:1f:0b:7c: 08:cb:84:8f:e3:17:a8:00:0c:e8:20:ac:e8:6f:b7:47:26:01: c5:38:c8:3b:b3:d8:b9:02:60:59:f2:94:e4:e5:96:8d:b5:28: 03:54:a1:f9 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkxN1oXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoNkFEMzg3OTQyMzQwNDg4 RjVDRDZBQzg3RkI5QzFFMDAzNjE0RDREMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALJNleS4LLZeQ7J1bZJFZpbVU07G2GeIFmQ7a/8xShrTVvjcIeTf lXHIVuYioNr7EUT4KK9fBVULiBHwCsL4Tbk4HV8hsJEaKvXtubmhV4WK5D8EXMYd m8Qm6a44ToEN/UIP11ZB4+2IgwdTxRadT1XEac5iPyT7wVyE3/O0NpQ9iTjkyM/t XTfcG2yd+RdOy5+HI3MZAU4UNY16DTUXProTQM6lANCvC7QgyLVK5iCyibtQl5DX vwapLRzhfZoY00ZA/joe4Fucnulz/srnhtgnokmxOxvt/LEju/RiHgQJllBBj/y8 dFl00t4cd68+yGcpA06fR35YukFkjS1kyIsCAwEAAaOCAdgwggHUMB0GA1UdDgQW BBRq04eUI0BIj1zWrIf7nB4ANhTU0zAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvYXRPSGxDTkFTSTljMXF5SC01d2VBRFlVMU5NLnJvYTAeBggr BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADw4MA0GCSqGSIb3DQEBCwUAA4IBAQAx C7MTZU9BNo6gR8tjDaFzeWkRK3vnJrqZEsCc31Jq6NHgyCOVFMwGL5GhnZ0Bnz7K 0auBBI/8R06sR9QhFk5rRbib9tmpVdxhMHxOAyNj5LkWnuAZLJYBHFrp15TcCrfL hbQRhSZoqtnp5L6HKfOiht0rRT94DT0Jr6NOu9ao684+UiHmhHqlSzPnZ+eNakaF /hWJtBXJurjcXIn6+EMcxq2Zg6XKI3nd+TGlKuABPJTjqcueBD1mKd7QsnfgXnLA PfYHIXuZxS0HkvfKa0Ee71RFxLwfC3wIy4SP4xeoAAzoIKzob7dHJgHFOMg7s9i5 AmBZ8pTk5ZaNtSgDVKH5 -----END CERTIFICATE-----Generated at Tue Apr 7 19:34:00 2026 by rpki-client