$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/sGXVjv7AHhsLgDK7yWhcnz7LrN0.roa File: sGXVjv7AHhsLgDK7yWhcnz7LrN0.roa (raw, json) Hash identifier: O+f2A84neLM5abo0xnSVGJBzUVcJaEOZW013K4hBjT0= Subject key identifier: B0:65:D5:8E:FE:C0:1E:1B:0B:80:32:BB:C9:68:5C:9F:3E:CB:AC:DD Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Certificate serial: 85 Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/sGXVjv7AHhsLgDK7yWhcnz7LrN0.roa Signing time: Tue 31 Mar 2026 07:29:42 +0000 ROA not before: Tue 31 Mar 2026 07:29:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 38644 IP address blocks: 2001:3a0:f006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Validity Not Before: Mar 31 07:29:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B065D58EFEC01E1B0B8032BBC9685C9F3ECBACDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:92:23:52:af:6b:90:39:ce:02:83:af:76: 23:5b:f8:7a:19:68:66:48:4c:23:1d:07:79:22:36: 55:7c:38:6b:3e:c5:1e:04:97:54:ef:98:b4:f7:31: 20:8f:ac:f0:b8:91:5a:20:f7:2c:75:b5:68:01:ac: 8a:31:2e:69:3e:63:a9:3c:2b:7a:39:81:88:63:f3: bf:ad:74:92:d2:16:37:69:99:34:35:dd:7a:76:1c: 8f:19:02:4e:a3:ca:bc:c8:fd:78:6b:d4:98:a3:75: 41:28:4c:81:27:89:23:09:9c:ca:d4:74:d7:1b:47: fc:01:16:ac:bf:17:c5:6b:8d:e0:84:e7:63:de:1a: a9:52:ab:b2:92:d9:14:7f:47:0b:bd:d7:cf:aa:b5: 6b:47:82:1f:8e:30:ec:83:d1:be:54:87:58:b0:72: b4:44:1b:7e:b7:9e:6f:87:b3:7c:50:7d:73:00:ab: 80:99:cc:69:4b:fb:43:01:1e:eb:8d:f8:81:bf:b0: 03:22:33:9a:17:9e:c2:7f:8f:43:76:c0:21:d4:8d: 38:f3:80:00:4b:97:82:8e:f2:e9:f8:d0:80:3b:a8: 8a:43:ca:2e:c7:0e:ec:06:38:96:3c:c6:04:ad:b6: b0:ae:0e:cb:39:fe:2f:c1:2c:ac:cf:ff:8e:d6:f7: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:65:D5:8E:FE:C0:1E:1B:0B:80:32:BB:C9:68:5C:9F:3E:CB:AC:DD X509v3 Authority Key Identifier: keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/sGXVjv7AHhsLgDK7yWhcnz7LrN0.roa sbgp-ipAddrBlock: critical IPv6: 2001:3a0:f006::/48 Signature Algorithm: sha256WithRSAEncryption d5:c1:d9:33:ac:b2:8c:83:35:66:94:58:dc:39:97:81:bc:29: bb:24:73:4e:71:f9:05:81:c5:db:a5:78:e1:b2:98:1f:b4:86: 2c:44:2d:68:35:4a:cf:02:3f:9c:02:6b:ef:6f:ac:78:c7:dd: 11:62:76:45:8d:50:5d:67:1f:45:2d:81:49:58:ee:1c:f2:de: 33:a1:55:68:62:14:76:a5:7f:a7:fe:63:ac:74:d1:f3:2f:e5: b0:c3:83:c3:eb:9d:f1:6e:3d:fa:f9:b7:f0:c1:65:9a:7e:e4: 4e:36:d6:8e:d9:93:75:3d:eb:36:71:ac:3e:ac:3e:ac:0f:f5: 2d:21:e4:28:5b:2c:fe:5a:34:d0:93:98:1f:34:d2:b0:d1:21: a8:bf:1d:11:b8:95:6c:bc:e3:d0:80:b8:8f:a9:86:a6:45:97: f9:c5:c2:4b:76:f6:0b:a6:a3:21:41:e5:69:51:d0:c7:db:af: af:fc:11:35:88:bd:cd:d0:d4:2f:d5:2c:22:3a:72:7b:d1:73: a7:6f:0c:69:53:cc:14:9e:6e:ac:67:22:73:d9:22:00:e4:0e: 99:71:6c:2d:ca:d2:74:a8:bc:d8:4a:d5:92:dc:52:66:27:8c: 73:62:a3:db:1b:15:d3:9d:b9:80:49:d3:d5:26:19:96:3a:dc: 02:bf:33:c4 -----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTA2 QjFGM0Q2NDlFNUEyNUFBMTM0MEMxOEJENkE3QzI0Q0YzNkFGNjAeFw0yNjAzMzEw NzI5NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwNjVENThFRkVDMDFF MUIwQjgwMzJCQkM5Njg1QzlGM0VDQkFDREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP9pIjUq9rkDnOAoOvdiNb+HoZaGZITCMdB3kiNlV8OGs+xR4E l1TvmLT3MSCPrPC4kVog9yx1tWgBrIoxLmk+Y6k8K3o5gYhj87+tdJLSFjdpmTQ1 3Xp2HI8ZAk6jyrzI/Xhr1JijdUEoTIEniSMJnMrUdNcbR/wBFqy/F8VrjeCE52Pe GqlSq7KS2RR/Rwu918+qtWtHgh+OMOyD0b5Uh1iwcrREG363nm+Hs3xQfXMAq4CZ zGlL+0MBHuuN+IG/sAMiM5oXnsJ/j0N2wCHUjTjzgABLl4KO8un40IA7qIpDyi7H DuwGOJY8xgSttrCuDss5/i/BLKzP/47W9/MTAgMBAAGjggHgMIIB3DAdBgNVHQ4E FgQUsGXVjv7AHhsLgDK7yWhcnz7LrN0wHwYDVR0jBBgwFoAUEGsfPWSeWiWqE0DB i9anwkzzavYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMDAzL0VHc2ZQV1NlV2lXcUUwREJpOWFud2t6emF2WS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VHc2ZQV1NlV2lXcUUwREJpOWFu d2t6emF2WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDAwMy9zR1hWanY3QUhoc0xnREs3eVdoY256N0xyTjAucm9h MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEDoPAGMA0GCSqGSIb3DQEB CwUAA4IBAQDVwdkzrLKMgzVmlFjcOZeBvCm7JHNOcfkFgcXbpXjhspgftIYsRC1o NUrPAj+cAmvvb6x4x90RYnZFjVBdZx9FLYFJWO4c8t4zoVVoYhR2pX+n/mOsdNHz L+Www4PD653xbj36+bfwwWWafuRONtaO2ZN1Pes2caw+rD6sD/UtIeQoWyz+WjTQ k5gfNNKw0SGovx0RuJVsvOPQgLiPqYamRZf5xcJLdvYLpqMhQeVpUdDH26+v/BE1 iL3N0NQv1SwiOnJ70XOnbwxpU8wUnm6sZyJz2SIA5A6ZcWwtytJ0qLzYStWS3FJm J4xzYqPbGxXTnbmASdPVJhmWOtwCvzPE -----END CERTIFICATE-----Generated at Fri Apr 17 09:40:09 2026 by rpki-client