$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/AIkt-_44zcozIlDjcG63tDF64zs.roa File: AIkt-_44zcozIlDjcG63tDF64zs.roa (raw, json) Hash identifier: ArSXKb9yZ4oEEZXVBU9Lyj7aLJJqHvdjpOkvA5u50d0= Subject key identifier: 00:89:2D:FB:FE:38:CD:CA:33:22:50:E3:70:6E:B7:B4:31:7A:E3:3B Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 58 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/AIkt-_44zcozIlDjcG63tDF64zs.roa Signing time: Tue 31 Mar 2026 08:31:52 +0000 ROA not before: Tue 31 Mar 2026 08:31:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37899 IP address blocks: 240b:252::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Mar 31 08:31:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=00892DFBFE38CDCA332250E3706EB7B4317AE33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:77:ae:61:4b:e3:6e:5c:7c:41:b1:4b:c8: 37:38:a6:37:03:c8:ff:a4:cf:57:8f:b2:22:e8:e3: 21:6d:15:1f:8c:6b:0f:24:3c:7c:af:9d:08:06:f8: 47:1b:70:47:71:ee:a8:d5:aa:97:ff:e0:36:04:aa: b9:f2:10:7f:60:38:21:98:07:3f:44:85:3e:ee:b8: 1b:56:f7:f4:a2:f2:4c:a0:e3:d6:6d:72:16:8e:33: 8d:f4:7e:17:eb:c2:2d:01:2d:12:06:dc:95:17:33: 82:4f:17:47:44:c8:c3:a3:30:f5:84:0a:c0:71:16: 3d:36:c6:ca:0f:74:05:45:84:85:b9:1c:86:d2:65: ec:e1:28:4f:16:dd:c9:83:94:fa:dc:f5:6f:7a:9a: 42:17:6a:b1:90:a2:97:fc:14:84:7a:bd:5b:c5:58: e0:38:0e:c7:23:b7:e1:b9:f0:8f:4f:46:49:6c:11: 8e:14:a8:4a:34:e4:1c:09:24:3e:8b:10:4c:5b:29: 93:77:d8:4e:09:04:79:4c:41:02:a3:e6:75:3a:a4: 06:53:d3:83:cb:84:fd:ee:3d:e4:37:cf:1e:b4:76: 8a:2d:96:7b:63:f8:3e:13:30:8e:17:ed:7a:38:0d: 5a:5f:f2:86:0b:ed:2e:e2:21:03:9d:c6:b4:2c:8d: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:89:2D:FB:FE:38:CD:CA:33:22:50:E3:70:6E:B7:B4:31:7A:E3:3B X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/AIkt-_44zcozIlDjcG63tDF64zs.roa sbgp-ipAddrBlock: critical IPv6: 240b:252::/32 Signature Algorithm: sha256WithRSAEncryption a4:19:19:6a:ed:91:5c:92:d1:84:6e:47:97:fe:23:68:18:82: 20:86:91:fd:09:ad:35:f6:ae:d4:e4:63:c5:73:55:e0:72:1b: aa:92:ff:3c:e4:23:90:c6:07:b5:7b:29:68:d6:cb:1d:e9:54: b3:d1:e1:75:ac:d7:21:64:7a:b3:1b:72:ec:fb:9c:ab:21:ba: dc:77:35:b9:e6:37:3f:e6:b7:ac:19:10:18:a6:85:8b:a0:d7: 39:98:f8:d6:89:a2:dc:cc:2e:b1:5e:38:e7:0b:b6:76:18:85: 2d:ed:00:18:f2:4d:ee:94:34:88:cf:da:cb:ce:5b:d2:82:cc: f4:f3:8e:1c:96:21:31:cf:29:80:2d:11:67:70:9a:b0:f1:74: d5:f3:35:d2:fe:42:ea:eb:f2:59:0f:e8:cd:89:01:68:87:fd: 38:e3:76:1b:41:91:d6:49:35:ce:d5:e8:a0:1d:be:af:8b:a0: 94:33:bf:73:8c:ea:39:d5:87:e3:3a:d6:ea:ba:e5:fb:a4:35: 21:cd:c5:1b:49:56:df:61:b5:57:77:b7:1e:84:5d:16:9e:31: e6:d6:ab:83:da:15:be:34:a1:69:43:8f:d5:27:dd:80:c6:65: 07:ae:5b:d5:ee:f7:26:fd:bd:3a:e3:c7:de:25:b9:8b:62:44: 5c:8b:37:fb -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI2MDMzMTA4 MzE1MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDA4OTJERkJGRTM4Q0RD QTMzMjI1MEUzNzA2RUI3QjQzMTdBRTMzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANfLd65hS+NuXHxBsUvINzimNwPI/6TPV4+yIujjIW0VH4xrDyQ8 fK+dCAb4RxtwR3HuqNWql//gNgSqufIQf2A4IZgHP0SFPu64G1b39KLyTKDj1m1y Fo4zjfR+F+vCLQEtEgbclRczgk8XR0TIw6Mw9YQKwHEWPTbGyg90BUWEhbkchtJl 7OEoTxbdyYOU+tz1b3qaQhdqsZCil/wUhHq9W8VY4DgOxyO34bnwj09GSWwRjhSo SjTkHAkkPosQTFspk3fYTgkEeUxBAqPmdTqkBlPTg8uE/e495DfPHrR2ii2We2P4 PhMwjhftejgNWl/yhgvtLuIhA53GtCyNkj0CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQAiS37/jjNyjMiUONwbre0MXrjOzAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMTc1L0FJa3QtXzQ0emNveklsRGpjRzYzdERGNjR6cy5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkCwJSMA0GCSqGSIb3DQEBCwUA A4IBAQCkGRlq7ZFcktGEbkeX/iNoGIIghpH9Ca019q7U5GPFc1Xgchuqkv885COQ xge1eylo1ssd6VSz0eF1rNchZHqzG3Ls+5yrIbrcdzW55jc/5resGRAYpoWLoNc5 mPjWiaLczC6xXjjnC7Z2GIUt7QAY8k3ulDSIz9rLzlvSgsz0844cliExzymALRFn cJqw8XTV8zXS/kLq6/JZD+jNiQFoh/0443YbQZHWSTXO1eigHb6vi6CUM79zjOo5 1YfjOtbquuX7pDUhzcUbSVbfYbVXd7cehF0WnjHm1quD2hW+NKFpQ4/VJ92AxmUH rlvV7vcm/b0648feJbmLYkRcizf7 -----END CERTIFICATE-----Generated at Sun Apr 19 12:54:38 2026 by rpki-client