$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/X4R-I6pyoGaxAXAO7e4xdm6gUiI.roa File: X4R-I6pyoGaxAXAO7e4xdm6gUiI.roa (raw, json) Hash identifier: ijEpOynAeUY9km3HzWFv7+sHVQqQw+yIf73cvF4bHlM= Subject key identifier: 5F:84:7E:23:AA:72:A0:66:B1:01:70:0E:ED:EE:31:76:6E:A0:52:22 Certificate issuer: /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Certificate serial: 57 Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/X4R-I6pyoGaxAXAO7e4xdm6gUiI.roa Signing time: Tue 31 Mar 2026 08:14:25 +0000 ROA not before: Tue 31 Mar 2026 08:14:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4721 IP address blocks: 2001:c30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Validity Not Before: Mar 31 08:14:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5F847E23AA72A066B101700EEDEE31766EA05222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9d:b0:83:bc:33:df:df:c8:4b:bd:e1:96:72: 09:7c:e8:2e:29:8f:c7:7e:1f:b6:76:81:2b:f1:a1: 79:9c:4c:9a:6e:6e:70:98:54:2d:b8:90:9a:ae:d9: 63:a0:ad:32:04:b9:65:88:a3:87:48:c5:fb:43:ea: 5a:67:fa:03:e0:d7:4d:10:83:1a:90:a0:f2:b0:eb: 23:9b:c0:4a:fb:0a:f3:99:78:bc:30:62:7d:ca:ed: 2f:82:65:18:d4:e6:ca:0e:74:7d:da:68:56:5b:01: 2c:1e:d2:65:5a:2f:4c:c6:43:23:2f:3f:cb:03:3a: 13:f4:35:cd:de:6c:1c:f1:20:bd:4a:1a:3f:8b:42: d7:35:54:a5:66:dc:f7:1a:ad:48:f0:e1:f4:2f:26: 67:73:15:88:22:c7:6f:e9:60:00:97:81:60:80:17: f7:36:0d:56:bd:f7:c7:be:57:8d:9b:70:6d:6e:77: 7a:2a:b8:66:ee:fc:8f:8e:8c:de:93:6c:e2:0d:b9: 3d:db:a1:fd:89:1a:ec:09:f0:f1:68:3c:95:02:b5: 96:5c:7a:6d:4d:02:c3:1c:1d:95:57:eb:57:26:cf: 5d:ae:6f:f6:1b:6c:4c:fa:ad:3f:8f:b5:ef:ab:14: fd:e4:8b:1e:6d:c5:91:89:37:1b:ed:10:a2:51:1c: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:7E:23:AA:72:A0:66:B1:01:70:0E:ED:EE:31:76:6E:A0:52:22 X509v3 Authority Key Identifier: keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/X4R-I6pyoGaxAXAO7e4xdm6gUiI.roa sbgp-ipAddrBlock: critical IPv6: 2001:c30::/32 Signature Algorithm: sha256WithRSAEncryption 1c:eb:84:c8:f3:32:62:42:c2:ae:b9:ce:5b:cb:a3:73:9a:f2: b9:9a:f3:1c:41:92:49:47:b2:53:8b:1a:7a:3d:36:91:99:ae: 9f:4f:c4:ba:6b:84:ff:a3:12:dc:49:76:90:26:4b:ac:dc:ac: 8f:67:07:5e:9c:54:d4:ea:61:b1:1d:d3:10:4c:98:72:af:50: 65:8f:6e:78:09:69:6d:84:2c:de:45:88:49:5f:26:f2:ad:2f: f7:33:34:e2:72:67:74:a1:20:b2:66:a9:53:d5:06:46:0a:db: 48:02:b0:52:e1:5f:b5:8c:02:1b:bf:e5:e8:86:e4:cd:c4:20: 15:bd:f2:26:96:a1:07:a8:0c:63:eb:14:32:17:c0:aa:fe:64: 88:1f:33:95:1b:22:d5:04:75:29:eb:10:e3:40:48:2e:53:e1: d4:8c:1a:dd:87:8c:39:ea:c3:a4:41:6e:21:3e:34:2e:a6:07: 2e:5d:2d:43:15:3f:30:39:d2:c0:08:22:a9:78:1f:bc:0c:2c: 16:5d:e2:37:d2:fb:71:a4:c0:eb:0f:a5:b7:fe:da:83:82:21: e3:07:d9:36:88:31:6f:eb:f4:3f:f1:d3:dd:4b:1b:81:96:56: fb:9e:f7:48:9c:e8:71:29:2c:c0:6a:eb:ba:a4:e4:c7:68:e5: 3e:21:55:7c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTI2MDMzMTA4 MTQyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUY4NDdFMjNBQTcyQTA2 NkIxMDE3MDBFRURFRTMxNzY2RUEwNTIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPKdsIO8M9/fyEu94ZZyCXzoLimPx34ftnaBK/GheZxMmm5ucJhU LbiQmq7ZY6CtMgS5ZYijh0jF+0PqWmf6A+DXTRCDGpCg8rDrI5vASvsK85l4vDBi fcrtL4JlGNTmyg50fdpoVlsBLB7SZVovTMZDIy8/ywM6E/Q1zd5sHPEgvUoaP4tC 1zVUpWbc9xqtSPDh9C8mZ3MViCLHb+lgAJeBYIAX9zYNVr33x75XjZtwbW53eiq4 Zu78j46M3pNs4g25Pduh/Yka7Anw8Wg8lQK1llx6bU0CwxwdlVfrVybPXa5v9hts TPqtP4+176sU/eSLHm3FkYk3G+0QolEcJIECAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRfhH4jqnKgZrEBcA7t7jF2bqBSIjAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK 0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMDcyL1g0Ui1JNnB5b0dheEFYQU83ZTR4ZG02Z1VpSS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQwwMA0GCSqGSIb3DQEBCwUA A4IBAQAc64TI8zJiQsKuuc5by6NzmvK5mvMcQZJJR7JTixp6PTaRma6fT8S6a4T/ oxLcSXaQJkus3KyPZwdenFTU6mGxHdMQTJhyr1Blj254CWlthCzeRYhJXybyrS/3 MzTicmd0oSCyZqlT1QZGCttIArBS4V+1jAIbv+XohuTNxCAVvfImlqEHqAxj6xQy F8Cq/mSIHzOVGyLVBHUp6xDjQEguU+HUjBrdh4w56sOkQW4hPjQupgcuXS1DFT8w OdLACCKpeB+8DCwWXeI30vtxpMDrD6W3/tqDgiHjB9k2iDFv6/Q/8dPdSxuBllb7 nvdInOhxKSzAauu6pOTHaOU+IVV8 -----END CERTIFICATE-----Generated at Mon Apr 6 15:25:30 2026 by rpki-client