$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/3NCXj76yzS56t0ZVlcqjyIwi15A.roa File: 3NCXj76yzS56t0ZVlcqjyIwi15A.roa (raw, json) Hash identifier: Yrknuod8WFyGF7f5oaUj3mVLnpdJZwdFL131hVx1lQA= Subject key identifier: DC:D0:97:8F:BE:B2:CD:2E:7A:B7:46:55:95:CA:A3:C8:8C:22:D7:90 Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 53 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/3NCXj76yzS56t0ZVlcqjyIwi15A.roa Signing time: Tue 31 Mar 2026 08:31:51 +0000 ROA not before: Tue 31 Mar 2026 08:31:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37901 IP address blocks: 240b:12::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Mar 31 08:31:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DCD0978FBEB2CD2E7AB7465595CAA3C88C22D790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:7f:59:ba:c5:73:2c:4d:c2:3c:c1:2a:c2: 26:d7:e0:cf:90:90:23:f5:85:6d:4e:79:1e:c0:35: 95:be:86:db:af:1a:74:3e:45:6f:cb:8a:f0:9b:34: a8:58:48:01:13:9c:10:94:c6:e7:b5:8e:cd:0c:40: 6b:09:17:27:4f:bb:8f:10:c7:e1:21:b6:d6:2e:16: aa:da:db:bc:8a:69:51:dd:23:d0:02:5d:4d:ed:7e: 47:b2:dc:0a:e8:5d:cb:98:7b:72:d5:0d:52:2c:b0: 1e:64:14:94:99:e3:c8:70:ba:6c:55:66:5a:08:dd: b8:5b:69:e7:d8:84:87:c8:e6:12:38:29:df:7b:e2: 51:a9:f2:10:e8:88:e2:26:54:09:ef:70:b5:86:16: e7:84:13:66:e6:4a:45:5d:03:8c:93:e5:15:ba:f9: 5e:ce:20:7b:39:43:12:75:02:9c:5b:21:b2:36:a9: ab:76:3d:c2:7b:f8:91:7c:ee:99:b3:c5:20:a4:6f: ec:bd:e0:84:44:05:d4:a2:fa:d7:00:fb:8b:29:92: 25:0b:42:8c:50:e7:95:04:d4:67:4c:e1:ad:56:ac: 8f:b9:f8:1c:a7:f6:46:b0:bf:1c:1c:d9:bc:31:d6: 8e:0c:9c:3d:c5:e4:a6:a1:4f:81:59:c1:45:86:2e: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:97:8F:BE:B2:CD:2E:7A:B7:46:55:95:CA:A3:C8:8C:22:D7:90 X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/3NCXj76yzS56t0ZVlcqjyIwi15A.roa sbgp-ipAddrBlock: critical IPv6: 240b:12::/32 Signature Algorithm: sha256WithRSAEncryption 86:db:5c:7c:31:82:0c:b6:bd:39:b1:bb:4c:f0:7a:70:ca:79: 90:a1:85:02:54:1e:64:4d:2b:f0:61:2e:4a:91:8a:e6:86:04: 6a:de:2b:76:5b:c3:b4:b7:dc:f6:59:20:cf:aa:27:00:5c:d0: 1c:3e:ad:5b:89:f6:33:79:79:f5:db:bc:9f:a2:10:d0:2e:69: 76:eb:1c:e1:d8:fe:ff:ec:c0:1e:74:17:47:cf:c6:58:9a:20: 28:af:72:b6:e8:7f:72:64:93:28:e6:7b:7a:77:81:1a:6b:71: 10:0a:6f:6a:66:d5:6f:57:8d:d9:f9:70:22:c2:53:a6:e3:13: d8:29:af:40:1c:af:e1:d4:c5:b7:d0:da:e4:76:52:4d:f5:07: fc:91:0b:a4:0a:26:1c:67:db:b6:8e:80:0f:0b:be:f6:9d:40: 83:a8:04:c0:a1:c5:93:36:c9:d0:1d:2e:4b:b2:51:b8:a5:a4: 1e:34:8f:ba:ac:39:8f:68:60:48:88:32:1b:3c:06:3b:3d:c5: ec:7a:a0:fb:f8:d3:a4:8a:c2:33:6e:7e:94:20:2f:b0:36:2a: 6f:af:89:e7:b3:c9:3c:9b:d4:88:f5:39:63:61:0b:d7:43:ea: 02:59:78:70:cb:4c:21:92:1d:da:13:a3:2b:cf:e2:3b:a6:34: a8:de:5e:4b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI2MDMzMTA4 MzE1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRENEMDk3OEZCRUIyQ0Qy RTdBQjc0NjU1OTVDQUEzQzg4QzIyRDc5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYkf1m6xXMsTcI8wSrCJtfgz5CQI/WFbU55HsA1lb6G268adD5F b8uK8Js0qFhIAROcEJTG57WOzQxAawkXJ0+7jxDH4SG21i4WqtrbvIppUd0j0AJd Te1+R7LcCuhdy5h7ctUNUiywHmQUlJnjyHC6bFVmWgjduFtp59iEh8jmEjgp33vi UanyEOiI4iZUCe9wtYYW54QTZuZKRV0DjJPlFbr5Xs4gezlDEnUCnFshsjapq3Y9 wnv4kXzumbPFIKRv7L3ghEQF1KL61wD7iymSJQtCjFDnlQTUZ0zhrVasj7n4HKf2 RrC/HBzZvDHWjgycPcXkpqFPgVnBRYYu1ccCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBTc0JePvrLNLnq3RlWVyqPIjCLXkDAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMTc1LzNOQ1hqNzZ5elM1NnQwWlZsY3FqeUl3aTE1QS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkCwASMA0GCSqGSIb3DQEBCwUA A4IBAQCG21x8MYIMtr05sbtM8HpwynmQoYUCVB5kTSvwYS5KkYrmhgRq3it2W8O0 t9z2WSDPqicAXNAcPq1bifYzeXn127yfohDQLml26xzh2P7/7MAedBdHz8ZYmiAo r3K26H9yZJMo5nt6d4Eaa3EQCm9qZtVvV43Z+XAiwlOm4xPYKa9AHK/h1MW30Nrk dlJN9Qf8kQukCiYcZ9u2joAPC772nUCDqATAocWTNsnQHS5LslG4paQeNI+6rDmP aGBIiDIbPAY7PcXseqD7+NOkisIzbn6UIC+wNipvr4nns8k8m9SI9TljYQvXQ+oC WXhwy0whkh3aE6Mrz+I7pjSo3l5L -----END CERTIFICATE-----Generated at Sun Apr 19 12:55:30 2026 by rpki-client