$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/D3rcFk_osrydwb-4Yb_HgdfQQwA.roa File: D3rcFk_osrydwb-4Yb_HgdfQQwA.roa (raw, json) Hash identifier: WfdobyFlNVYmibr0HgUgPcqDCR7rtTPm88zDWxBa3zM= Subject key identifier: 0F:7A:DC:16:4F:E8:B2:BC:9D:C1:BF:B8:61:BF:C7:81:D7:D0:43:00 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 021C Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/D3rcFk_osrydwb-4Yb_HgdfQQwA.roa Signing time: Tue 31 Mar 2026 07:35:44 +0000 ROA not before: Tue 31 Mar 2026 07:35:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 125.30.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Mar 31 07:35:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0F7ADC164FE8B2BC9DC1BFB861BFC781D7D04300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d0:0c:20:d6:67:54:55:b0:1f:26:32:6a:28: 0d:3e:40:c2:f0:c4:a9:e8:8c:07:f3:71:ef:26:b9: 57:72:20:5e:b0:9f:c5:0a:56:d7:5e:0d:9f:c5:f1: 09:71:0c:c6:5d:4b:4b:a0:fc:cf:38:92:54:63:64: 2f:e9:93:91:3a:47:c3:2b:79:4e:ef:06:a0:8e:cf: 3d:d5:f6:cd:bc:69:de:35:32:58:90:cb:50:b7:cb: bf:5b:b7:ef:28:c6:2c:ed:58:73:03:34:e1:da:56: 02:5c:28:be:b7:11:5e:75:67:7b:34:2f:8c:47:8d: 13:b0:f7:28:dc:2a:39:72:d0:f3:1d:ba:e2:0f:76: 8a:d1:c3:96:f9:5e:6f:36:f1:ca:14:f5:86:55:f5: c4:35:74:4a:8a:ba:fd:1f:65:6c:a5:b9:9f:0a:10: c7:18:97:ab:4a:78:ea:33:16:43:80:b1:3d:d4:fc: 01:7a:f5:2d:60:9b:e3:82:85:65:3b:67:50:5a:47: cf:e9:10:f1:04:b3:ce:47:0f:8e:6b:a0:d7:0f:07: 63:82:55:14:60:46:fe:3e:2d:c7:bb:98:81:3e:eb: 8f:b4:c6:b6:f1:e3:be:ab:d2:89:8e:43:f5:c6:18: 70:b6:06:cd:f8:bf:bc:53:5e:13:4c:31:ab:ec:c5: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:DC:16:4F:E8:B2:BC:9D:C1:BF:B8:61:BF:C7:81:D7:D0:43:00 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/D3rcFk_osrydwb-4Yb_HgdfQQwA.roa sbgp-ipAddrBlock: critical IPv4: 125.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:bf:40:6c:39:59:0f:8a:16:7d:2c:cb:36:93:c9:cb:ce:10: b6:7a:7e:3b:1c:ae:8e:47:ab:56:d6:36:12:b1:02:13:a0:25: f0:10:ed:26:d5:41:06:92:05:2b:98:9e:a2:c3:4b:f6:ab:27: 4b:23:b8:7c:84:f2:bc:fe:8d:3f:c3:29:fb:15:51:98:f8:b5: 9b:15:77:54:6c:d0:44:a7:86:d6:97:ae:d3:82:05:26:7f:6d: 45:7d:a2:c8:c9:63:a1:55:80:3b:47:6f:67:c3:43:5d:0f:40: 3e:41:ea:9a:d9:eb:a6:8f:9e:99:30:58:9a:bc:20:52:1b:ba: f6:02:b5:bc:b2:2b:f8:27:ab:9d:0a:09:e2:18:e5:e8:3d:b1: 95:8a:4c:8f:1b:0f:8c:bd:50:c2:d9:48:a8:86:15:10:25:5b: e6:19:29:cf:cc:17:d2:75:71:0f:58:03:8b:2d:26:79:11:7d: 00:2b:a1:0b:af:bd:60:62:30:08:33:0b:24:91:59:d6:d5:2d: 18:b8:00:f9:be:28:0b:1e:61:79:ea:eb:44:05:cb:e9:83:52: 44:8c:d1:cc:80:ca:51:e5:f5:6b:00:d3:eb:bf:58:5a:4e:68: 6b:ee:d4:08:83:e2:ce:08:9f:0e:6e:f1:71:63:98:6c:b7:28: 09:47:ae:11 -----BEGIN CERTIFICATE----- MIIEuDCCA6CgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw NzM1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGN0FEQzE2NEZFOEIy QkM5REMxQkZCODYxQkZDNzgxRDdEMDQzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo0Awg1mdUVbAfJjJqKA0+QMLwxKnojAfzce8muVdyIF6wn8UK VtdeDZ/F8QlxDMZdS0ug/M84klRjZC/pk5E6R8MreU7vBqCOzz3V9s28ad41MliQ y1C3y79bt+8oxiztWHMDNOHaVgJcKL63EV51Z3s0L4xHjROw9yjcKjly0PMduuIP dorRw5b5Xm828coU9YZV9cQ1dEqKuv0fZWyluZ8KEMcYl6tKeOozFkOAsT3U/AF6 9S1gm+OChWU7Z1BaR8/pEPEEs85HD45roNcPB2OCVRRgRv4+Lce7mIE+64+0xrbx 476r0omOQ/XGGHC2Bs34v7xTXhNMMavsxTSHAgMBAAGjggHUMIIB0DAdBgNVHQ4E FgQUD3rcFk/osrydwb+4Yb/HgdfQQwAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvRDNyY0ZrX29zcnlkd2ItNFliX0hnZGZRUXdBLnJvYTAeBggrBgEF BQcBBwEB/wQPMA0wCwQCAAEwBQMDAH0eMA0GCSqGSIb3DQEBCwUAA4IBAQBxv0Bs OVkPihZ9LMs2k8nLzhC2en47HK6OR6tW1jYSsQIToCXwEO0m1UEGkgUrmJ6iw0v2 qydLI7h8hPK8/o0/wyn7FVGY+LWbFXdUbNBEp4bWl67TggUmf21FfaLIyWOhVYA7 R29nw0NdD0A+Qeqa2eumj56ZMFiavCBSG7r2ArW8siv4J6udCgniGOXoPbGVikyP Gw+MvVDC2UiohhUQJVvmGSnPzBfSdXEPWAOLLSZ5EX0AK6ELr71gYjAIMwskkVnW 1S0YuAD5vigLHmF56utEBcvpg1JEjNHMgMpR5fVrANPrv1haTmhr7tQIg+LOCJ8O bvFxY5hstygJR64R -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:02 2026 by rpki-client