$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/_2drMcCoNj9SNl0mqahuHoGd9-Y.roa File: _2drMcCoNj9SNl0mqahuHoGd9-Y.roa (raw, json) Hash identifier: 37hRGHq3C7Uj8Mwp3HO7FtMf64hT/71NIeEBaeZtsbM= Subject key identifier: FF:67:6B:31:C0:A8:36:3F:52:36:5D:26:A9:A8:6E:1E:81:9D:F7:E6 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 66 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/_2drMcCoNj9SNl0mqahuHoGd9-Y.roa Signing time: Tue 31 Mar 2026 07:50:35 +0000 ROA not before: Tue 31 Mar 2026 07:50:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23805 IP address blocks: 103.42.168.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Mar 31 07:50:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FF676B31C0A8363F52365D26A9A86E1E819DF7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:a9:51:4a:58:52:94:5c:71:be:bc:b4:a3: 89:b8:a8:fb:e3:fd:5e:28:3f:44:08:2b:a4:2e:9a: ae:03:e5:f2:9d:88:01:76:73:17:35:4c:b3:60:58: 62:0c:b2:7b:1e:c5:e4:e9:cc:69:fd:e1:67:42:2d: 14:bc:aa:d3:96:ac:76:8d:a5:c4:69:48:1e:34:5c: 23:3f:ca:91:28:22:df:46:7c:0c:60:83:71:bc:c3: 85:d1:50:41:74:ad:81:ea:e4:da:99:c3:6b:89:e0: c2:f2:da:dd:44:02:05:8b:5c:c2:73:dc:61:aa:07: ca:a3:3d:6b:3a:8e:f8:f3:01:9c:8b:bb:31:88:32: 1d:02:2e:4d:fc:c8:b3:1b:7d:47:42:6a:99:17:bd: 5f:3f:0e:44:d7:15:4b:e2:da:98:e6:9a:04:9f:e0: b5:fb:ff:a5:03:b5:37:52:06:36:f5:c6:96:00:a0: f1:a5:bc:5d:ae:34:fd:0b:c7:61:8c:6b:fe:72:30: 94:31:95:17:30:fa:3e:dc:36:d3:f2:42:1a:2d:b3: 6f:e2:6d:ab:b1:d1:34:2c:f0:b8:e1:be:08:46:d7: d9:6b:6f:c4:0c:4b:aa:9f:0f:2b:ac:fc:d9:b4:21: 50:f2:08:e3:31:bb:b2:0e:5c:5a:09:9c:0a:21:b6: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:6B:31:C0:A8:36:3F:52:36:5D:26:A9:A8:6E:1E:81:9D:F7:E6 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/_2drMcCoNj9SNl0mqahuHoGd9-Y.roa sbgp-ipAddrBlock: critical IPv4: 103.42.168.0/22 Signature Algorithm: sha256WithRSAEncryption a5:c7:94:8d:d5:97:9d:4a:36:6e:0a:de:c7:c7:7f:e2:00:78: 50:3b:1c:72:4d:3b:eb:4e:28:09:81:c4:7a:1d:92:0a:61:79: e2:80:c2:ac:96:69:88:c1:8c:ea:4c:4f:ff:13:53:83:e0:67: 21:b5:7f:96:6c:74:7a:c0:50:db:6b:36:7c:02:a5:c4:52:aa: d7:8b:9e:64:45:5a:ac:65:99:43:13:a8:30:19:cf:d2:87:79: 66:1b:5e:ae:16:85:fd:43:2a:f7:93:8c:8a:49:0c:c7:ec:3a: 3c:a5:b2:fb:34:ac:a6:68:2c:8c:e3:f5:74:f4:3f:b0:4d:3e: 16:17:29:0e:6b:3c:92:a2:ec:60:55:3a:19:cd:f0:72:ed:86: cf:17:c3:2b:29:d5:b7:4f:b1:3a:8f:c1:5e:4c:11:62:b4:b4: a7:73:09:9d:9a:c9:3e:df:ac:b6:b0:96:fc:a7:a1:72:43:57: 35:b3:43:62:08:cd:ca:55:6b:7a:4d:0a:ec:bc:d9:43:11:67: 32:d8:a1:25:a0:d3:42:e8:2f:d2:d2:1d:d5:63:66:c5:f6:ec: 85:16:00:53:6b:f2:24:91:31:e6:f5:95:1b:03:06:1f:4e:da: 5e:f5:a0:6f:5a:85:9d:76:df:85:46:f7:d6:22:76:fc:cd:2e: ef:c7:70:2c -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI2MDMzMTA3 NTAzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRkY2NzZCMzFDMEE4MzYz RjUyMzY1RDI2QTlBODZFMUU4MTlERjdFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALjZqVFKWFKUXHG+vLSjibio++P9Xig/RAgrpC6argPl8p2IAXZz FzVMs2BYYgyyex7F5OnMaf3hZ0ItFLyq05asdo2lxGlIHjRcIz/KkSgi30Z8DGCD cbzDhdFQQXStgerk2pnDa4ngwvLa3UQCBYtcwnPcYaoHyqM9azqO+PMBnIu7MYgy HQIuTfzIsxt9R0JqmRe9Xz8ORNcVS+LamOaaBJ/gtfv/pQO1N1IGNvXGlgCg8aW8 Xa40/QvHYYxr/nIwlDGVFzD6Ptw20/JCGi2zb+Jtq7HRNCzwuOG+CEbX2WtvxAxL qp8PK6z82bQhUPII4zG7sg5cWgmcCiG2C9cCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBT/Z2sxwKg2P1I2XSapqG4egZ335jAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84ODEvXzJkck1jQ29OajlTTmwwbXFhaHVIb0dkOS1ZLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcqqDANBgkqhkiG9w0BAQsFAAOCAQEA pceUjdWXnUo2bgrex8d/4gB4UDscck07604oCYHEeh2SCmF54oDCrJZpiMGM6kxP /xNTg+BnIbV/lmx0esBQ22s2fAKlxFKq14ueZEVarGWZQxOoMBnP0od5ZhterhaF /UMq95OMikkMx+w6PKWy+zSspmgsjOP1dPQ/sE0+FhcpDms8kqLsYFU6Gc3wcu2G zxfDKynVt0+xOo/BXkwRYrS0p3MJnZrJPt+strCW/KehckNXNbNDYgjNylVrek0K 7LzZQxFnMtihJaDTQugv0tId1WNmxfbshRYAU2vyJJEx5vWVGwMGH07aXvWgb1qF nXbfhUb31iJ2/M0u78dwLA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:11 2026 by rpki-client