$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/sunbk-HYrFYBCq_xHK9x_AQimfE.roa File: sunbk-HYrFYBCq_xHK9x_AQimfE.roa (raw, json) Hash identifier: ylD8ySY+HrwK2+U5WBP7r+IvKUQb7fw4NKZKb5yqY/g= Subject key identifier: B2:E9:DB:93:E1:D8:AC:56:01:0A:AF:F1:1C:AF:71:FC:04:22:99:F1 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 2F Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/sunbk-HYrFYBCq_xHK9x_AQimfE.roa Signing time: Tue 31 Mar 2026 08:49:19 +0000 ROA not before: Tue 31 Mar 2026 08:49:19 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 61.122.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:19 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=B2E9DB93E1D8AC56010AAFF11CAF71FC042299F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:d3:66:df:47:c3:ba:ca:82:6c:0e:fa:86: 3b:63:92:fd:f5:c8:dc:1f:3a:60:20:f7:5e:4a:28: 8c:a7:cc:98:3c:7a:b2:79:11:9a:78:1c:7d:d5:77: 20:bd:b4:9b:5c:0e:e3:5a:85:6b:00:ac:d4:dc:0f: f4:0e:81:fe:1d:dc:84:1b:75:42:1c:2b:6a:a4:d7: 8d:09:c4:a5:02:05:50:3f:5e:22:73:26:db:e9:ba: 5e:68:2e:7e:d4:f9:ff:4d:b3:3e:d9:0e:04:39:18: f7:ab:c1:62:fd:73:df:1b:25:f1:47:6a:92:cf:3b: 67:50:eb:11:e7:83:b3:91:4b:27:b3:d8:77:89:95: 66:20:79:f9:fe:ec:9d:72:d2:b7:e7:df:5f:c8:c0: 4c:54:ff:3d:51:f0:30:1b:2b:e7:7d:d7:b4:3b:86: e2:dc:f4:04:3d:83:d2:bb:48:58:43:45:84:30:b7: 37:65:f9:73:51:69:d2:73:b2:55:4b:73:81:10:22: bf:96:ab:84:fd:5d:c2:c3:cf:78:fa:4d:5f:6e:aa: f0:59:73:1d:26:3f:33:ef:1e:a1:7a:d6:00:d4:87: 89:b6:16:a4:ff:f7:50:04:c3:c7:7b:b9:36:89:8f: 92:f4:4f:2c:eb:03:da:d7:fc:3d:20:39:ba:1a:2a: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:DB:93:E1:D8:AC:56:01:0A:AF:F1:1C:AF:71:FC:04:22:99:F1 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/sunbk-HYrFYBCq_xHK9x_AQimfE.roa sbgp-ipAddrBlock: critical IPv4: 61.122.240.0/20 Signature Algorithm: sha256WithRSAEncryption 08:a5:3e:a9:8c:4d:b7:62:c4:66:54:c1:be:f5:94:7a:8a:d1: e7:50:60:53:54:1b:dc:38:69:7a:4a:a8:01:7e:04:f5:be:21: e9:cf:82:39:08:f0:21:25:c2:31:06:b2:7e:11:49:4c:27:c1: d7:3a:e0:97:c3:9c:1c:cf:31:46:8a:da:f0:14:47:e3:5b:da: 63:4a:61:bd:b0:e0:0d:42:6d:d0:64:06:65:19:18:6a:f6:a9: e1:2a:49:ff:86:88:da:13:ae:2e:71:b4:f1:04:c1:de:7b:0d: 33:50:fd:be:09:0f:3e:91:7f:10:bc:a5:13:fb:1a:77:c4:9a: a5:b5:ed:ea:d4:07:03:32:dc:03:2c:84:42:cc:4f:d6:4d:f2: 3b:7e:9e:50:20:9a:f4:0b:a3:ad:13:69:30:04:ee:4d:16:cb: e7:35:9d:8c:2f:b1:0a:a8:db:0c:2b:51:a3:57:49:0c:c9:39: ea:f5:9f:87:49:a2:b5:a8:38:2f:2e:48:a4:1f:2c:41:c8:c5: f9:06:2c:47:02:ea:0f:b4:05:a9:13:c2:53:78:53:fa:b9:b9: e3:dc:b8:0b:b3:d3:5b:3c:d1:df:52:2f:d4:23:1c:9d:4c:22: 29:8c:7c:48:03:61:62:32:40:6b:7f:99:3b:7e:41:f7:fc:3e: 94:7f:32:35 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkxOVoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQjJFOURCOTNFMUQ4QUM1 NjAxMEFBRkYxMUNBRjcxRkMwNDIyOTlGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALaZ02bfR8O6yoJsDvqGO2OS/fXI3B86YCD3XkoojKfMmDx6snkR mngcfdV3IL20m1wO41qFawCs1NwP9A6B/h3chBt1QhwraqTXjQnEpQIFUD9eInMm 2+m6XmguftT5/02zPtkOBDkY96vBYv1z3xsl8Udqks87Z1DrEeeDs5FLJ7PYd4mV ZiB5+f7snXLSt+ffX8jATFT/PVHwMBsr533XtDuG4tz0BD2D0rtIWENFhDC3N2X5 c1Fp0nOyVUtzgRAiv5arhP1dwsPPePpNX26q8FlzHSY/M+8eoXrWANSHibYWpP/3 UATDx3u5NomPkvRPLOsD2tf8PSA5uhoqqckCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSy6duT4disVgEKr/Ecr3H8BCKZ8TAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvc3VuYmstSFlyRllCQ3FfeEhLOXhfQVFpbWZFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD168DANBgkqhkiG9w0BAQsFAAOCAQEA CKU+qYxNt2LEZlTBvvWUeorR51BgU1Qb3DhpekqoAX4E9b4h6c+COQjwISXCMQay fhFJTCfB1zrgl8OcHM8xRora8BRH41vaY0phvbDgDUJt0GQGZRkYavap4SpJ/4aI 2hOuLnG08QTB3nsNM1D9vgkPPpF/ELylE/sad8SapbXt6tQHAzLcAyyEQsxP1k3y O36eUCCa9AujrRNpMATuTRbL5zWdjC+xCqjbDCtRo1dJDMk56vWfh0mitag4Ly5I pB8sQcjF+QYsRwLqD7QFqRPCU3hT+rm549y4C7PTWzzR31Iv1CMcnUwiKYx8SANh YjJAa3+ZO35B9/w+lH8yNQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:36:52 2026 by rpki-client