$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30332/XUdWdZxs70JsAcJ8cCXN_ksDtk0.roa File: XUdWdZxs70JsAcJ8cCXN_ksDtk0.roa (raw, json) Hash identifier: PL4qWsJFNwzLUVizpFqxMlnl0nN5oMF1rTjuCKbE1ec= Subject key identifier: 5D:47:56:75:9C:6C:EF:42:6C:01:C2:7C:70:25:CD:FE:4B:03:B6:4D Certificate issuer: /CN=77C23EE57D1EE6331FF7C490BAA55BBCABDD4D6B Certificate serial: 12 Authority key identifier: 77:C2:3E:E5:7D:1E:E6:33:1F:F7:C4:90:BA:A5:5B:BC:AB:DD:4D:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/d8I-5X0e5jMf98SQuqVbvKvdTWs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30332/XUdWdZxs70JsAcJ8cCXN_ksDtk0.roa Signing time: Tue 31 Mar 2026 08:46:00 +0000 ROA not before: Tue 31 Mar 2026 08:46:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 2406:a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30332/d8I-5X0e5jMf98SQuqVbvKvdTWs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30332/d8I-5X0e5jMf98SQuqVbvKvdTWs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/d8I-5X0e5jMf98SQuqVbvKvdTWs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77C23EE57D1EE6331FF7C490BAA55BBCABDD4D6B Validity Not Before: Mar 31 08:46:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5D4756759C6CEF426C01C27C7025CDFE4B03B64D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:e3:1f:c0:ab:1f:c7:83:9e:67:2c:90:94: f2:fb:46:fc:6a:1e:55:85:b4:aa:b9:e2:ac:36:20: 99:7f:ba:fe:dc:b3:5f:5b:e5:5c:50:ad:c5:9a:5c: e6:22:8f:49:7e:96:04:30:51:cc:e6:7a:83:43:f9: ee:ef:1a:11:39:a8:7d:7c:a0:c7:bb:63:24:41:28: 76:b1:b0:2b:14:4a:f3:40:77:1d:11:52:8d:df:a0: 99:20:06:49:0a:66:2b:bf:cb:25:be:32:de:87:fd: 14:9f:55:7c:d1:78:89:34:02:a6:07:1c:c0:7f:32: e3:46:11:4d:63:25:04:16:df:e4:a5:12:3d:1a:08: f4:a6:1a:06:9e:38:67:3f:12:ba:29:16:4e:74:30: 2c:e8:67:12:cd:51:58:0c:26:99:07:a8:08:da:e2: 12:dc:4d:f0:83:7f:f2:14:bc:fa:1c:6a:2e:ad:2e: a8:39:d7:42:95:58:58:e5:28:15:e6:de:6e:48:45: 9a:3c:cd:c3:60:d4:86:24:42:32:47:ea:91:4c:e9: 89:ae:24:d9:b1:3d:a8:c0:49:7c:66:f9:ab:2a:57: 2b:a5:23:98:de:31:32:90:47:6b:85:f9:99:c2:45: 16:85:4d:d1:52:51:49:7a:39:26:c5:74:f0:04:3f: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:56:75:9C:6C:EF:42:6C:01:C2:7C:70:25:CD:FE:4B:03:B6:4D X509v3 Authority Key Identifier: keyid:77:C2:3E:E5:7D:1E:E6:33:1F:F7:C4:90:BA:A5:5B:BC:AB:DD:4D:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30332/d8I-5X0e5jMf98SQuqVbvKvdTWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/d8I-5X0e5jMf98SQuqVbvKvdTWs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30332/XUdWdZxs70JsAcJ8cCXN_ksDtk0.roa sbgp-ipAddrBlock: critical IPv6: 2406:a00::/32 Signature Algorithm: sha256WithRSAEncryption 01:33:da:be:72:8a:20:a6:48:26:7a:dd:67:62:f0:b7:c6:26: f8:27:ea:d0:74:dd:13:5a:9d:da:9b:d8:84:13:9a:5d:d2:a2: 70:b4:e7:9a:82:20:c1:3c:72:66:cb:a6:a9:e8:3e:36:b5:58: e0:de:ee:dc:b9:c7:e9:ca:10:75:8a:25:66:7e:78:99:6d:6d: fa:2c:8b:31:1a:ea:4d:e2:ac:83:1d:13:22:0f:ea:e8:61:6a: c2:b5:83:c0:4c:38:e2:47:57:35:84:55:c7:29:cd:fb:c0:ed: 17:37:a6:f5:59:39:89:e8:94:0a:38:74:0c:5c:3e:c8:5e:bd: 0c:ff:ad:b6:42:2e:82:49:93:fd:a3:68:e0:ab:6d:05:0c:91: bf:d3:76:26:85:3d:9b:91:49:df:98:d8:3f:e4:15:a3:94:d3: 68:50:b8:d0:dc:14:bb:99:d7:d9:bd:a0:f4:de:eb:bc:f4:14: 0b:e2:a0:ad:68:b5:dc:2f:57:5e:96:2a:63:95:88:92:1b:5d: 03:7a:28:1a:a8:6f:c2:06:e8:a0:c8:a5:df:9e:1c:ee:ac:5d: 41:52:94:1d:8f:d4:b2:ba:58:40:41:2c:14:3b:66:4f:4d:a4: 69:fa:5f:6f:88:59:f3:c4:ad:61:00:d1:c9:6a:0d:2b:38:d1: 5e:5c:b4:5a -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3N0My M0VFNTdEMUVFNjMzMUZGN0M0OTBCQUE1NUJCQ0FCREQ0RDZCMB4XDTI2MDMzMTA4 NDYwMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUQ0NzU2NzU5QzZDRUY0 MjZDMDFDMjdDNzAyNUNERkU0QjAzQjY0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+C4x/Aqx/Hg55nLJCU8vtG/GoeVYW0qrnirDYgmX+6/tyzX1vl XFCtxZpc5iKPSX6WBDBRzOZ6g0P57u8aETmofXygx7tjJEEodrGwKxRK80B3HRFS jd+gmSAGSQpmK7/LJb4y3of9FJ9VfNF4iTQCpgccwH8y40YRTWMlBBbf5KUSPRoI 9KYaBp44Zz8SuikWTnQwLOhnEs1RWAwmmQeoCNriEtxN8IN/8hS8+hxqLq0uqDnX QpVYWOUoFebebkhFmjzNw2DUhiRCMkfqkUzpia4k2bE9qMBJfGb5qypXK6UjmN4x MpBHa4X5mcJFFoVN0VJRSXo5JsV08AQ/Sv8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRdR1Z1nGzvQmwBwnxwJc3+SwO2TTAfBgNVHSMEGDAWgBR3wj7lfR7mMx/3xJC6 pVu8q91NazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMzIvZDhJLTVYMGU1ak1mOThTUXVxVmJ2S3ZkVFdzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZDhJLTVYMGU1ak1mOThTUXVxVmJ2 S3ZkVFdzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMzMyL1hVZFdkWnhzNzBKc0FjSjhjQ1hOX2tzRHRrMC5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBgoAMA0GCSqGSIb3DQEBCwUA A4IBAQABM9q+coogpkgmet1nYvC3xib4J+rQdN0TWp3am9iEE5pd0qJwtOeagiDB PHJmy6ap6D42tVjg3u7cucfpyhB1iiVmfniZbW36LIsxGupN4qyDHRMiD+roYWrC tYPATDjiR1c1hFXHKc37wO0XN6b1WTmJ6JQKOHQMXD7IXr0M/622Qi6CSZP9o2jg q20FDJG/03YmhT2bkUnfmNg/5BWjlNNoULjQ3BS7mdfZvaD03uu89BQL4qCtaLXc L1delipjlYiSG10DeigaqG/CBuigyKXfnhzurF1BUpQdj9SyulhAQSwUO2ZPTaRp +l9viFnzxK1hANHJag0rONFeXLRa -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:00 2026 by rpki-client