$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/BC_9E0BYCRCFfZQJHoj4toaRnV0.roa File: BC_9E0BYCRCFfZQJHoj4toaRnV0.roa (raw, json) Hash identifier: 2Kt1MBrD+4k/oQalNtF0aoiX/7Hrmpo8m+kqcWoZM2w= Subject key identifier: 04:2F:FD:13:40:58:09:10:85:7D:94:09:1E:88:F8:B6:86:91:9D:5D Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 54 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/BC_9E0BYCRCFfZQJHoj4toaRnV0.roa Signing time: Tue 31 Mar 2026 08:31:51 +0000 ROA not before: Tue 31 Mar 2026 08:31:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37901 IP address blocks: 240b:13::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Mar 31 08:31:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=042FFD1340580910857D94091E88F8B686919D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:6b:18:ed:19:1f:4b:0c:5b:f2:92:2e:9c: 10:f6:b9:dd:6e:33:a9:00:29:73:b5:34:f2:8b:1b: 5c:8d:e5:ff:9a:69:67:5f:ce:e2:12:95:35:7b:b4: 15:42:37:c0:95:fb:e8:01:be:8d:79:cf:cd:3e:d9: d4:05:1d:37:e7:96:f9:e5:af:e1:ef:62:c9:da:7b: b0:0d:21:76:6c:15:35:23:62:ac:6c:a2:32:9d:d1: e2:3a:ed:bf:18:58:e0:a1:ac:4f:eb:a7:84:58:81: 3a:39:d5:5e:a9:9f:8d:20:d2:85:99:32:0c:a2:f7: 37:11:48:2c:2d:aa:9d:17:6d:de:3a:db:69:bb:06: d2:2d:79:b6:f1:2b:06:4e:64:bb:b9:ec:de:f3:c8: 12:cd:45:32:e2:cc:f8:d2:ed:cb:07:99:4e:fc:dc: 73:fc:46:ac:50:a8:02:3f:f3:b4:8c:36:27:5d:1f: 62:59:02:bb:87:0f:84:95:dc:5b:60:e1:2f:d2:7b: 22:a4:2a:20:14:04:5e:b2:cd:23:ce:3d:16:a6:98: 51:10:72:df:77:f8:38:bf:ff:d1:1e:37:ef:90:24: 9b:85:d4:fb:30:3b:04:61:b4:1c:a5:e3:56:c7:4f: 2c:7b:67:18:2c:85:4c:98:10:ce:bd:08:b8:c7:b5: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:FD:13:40:58:09:10:85:7D:94:09:1E:88:F8:B6:86:91:9D:5D X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/BC_9E0BYCRCFfZQJHoj4toaRnV0.roa sbgp-ipAddrBlock: critical IPv6: 240b:13::/32 Signature Algorithm: sha256WithRSAEncryption 95:f6:33:eb:86:32:14:25:4a:8e:cf:8c:0f:3c:19:da:43:51: ff:7e:e7:62:a4:84:c1:30:78:53:08:3f:d2:58:af:09:4f:19: dc:51:bb:34:c0:6e:e8:2e:ce:e7:ec:c4:88:95:7b:76:48:f6: 24:37:f1:90:0b:20:6b:ff:03:ab:65:fb:64:dd:1e:df:22:63: 82:9d:b5:03:3a:27:2f:8c:45:25:40:2b:b7:4a:ad:61:c4:c2: 88:f4:49:dc:4a:71:3f:f0:cd:ab:dd:21:e6:d4:df:30:af:cf: 51:d7:6f:41:5b:81:36:a1:e1:e5:33:98:24:bb:49:9c:cd:62: 14:19:4c:74:7a:c9:ea:43:d9:9e:d4:f2:2b:71:07:2f:2d:d5: 55:4d:aa:f4:a5:93:56:ec:f8:de:24:0e:66:7c:d4:fc:71:13: 47:cd:00:a6:fc:95:2b:a1:3d:05:11:f1:66:e9:98:ca:aa:ff: 65:fd:7b:69:88:eb:0e:c5:87:ea:be:24:ec:71:0b:10:3a:c4: 7a:b1:75:97:6a:ac:2a:1a:14:aa:ac:26:e7:04:5a:21:78:12: e4:b9:ad:96:42:f9:36:c7:0e:9c:47:e6:0b:c8:e2:36:32:6e: ab:36:ff:78:7f:54:75:73:00:36:ae:a9:3b:fa:e4:49:c1:fa: e7:69:69:73 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI2MDMzMTA4 MzE1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDQyRkZEMTM0MDU4MDkx MDg1N0Q5NDA5MUU4OEY4QjY4NjkxOUQ1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOXdaxjtGR9LDFvyki6cEPa53W4zqQApc7U08osbXI3l/5ppZ1/O 4hKVNXu0FUI3wJX76AG+jXnPzT7Z1AUdN+eW+eWv4e9iydp7sA0hdmwVNSNirGyi Mp3R4jrtvxhY4KGsT+unhFiBOjnVXqmfjSDShZkyDKL3NxFILC2qnRdt3jrbabsG 0i15tvErBk5ku7ns3vPIEs1FMuLM+NLtyweZTvzcc/xGrFCoAj/ztIw2J10fYlkC u4cPhJXcW2DhL9J7IqQqIBQEXrLNI849FqaYURBy33f4OL//0R4375Akm4XU+zA7 BGG0HKXjVsdPLHtnGCyFTJgQzr0IuMe1mU8CAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQEL/0TQFgJEIV9lAkeiPi2hpGdXTAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMTc1L0JDXzlFMEJZQ1JDRmZaUUpIb2o0dG9hUm5WMC5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkCwATMA0GCSqGSIb3DQEBCwUA A4IBAQCV9jPrhjIUJUqOz4wPPBnaQ1H/fudipITBMHhTCD/SWK8JTxncUbs0wG7o Ls7n7MSIlXt2SPYkN/GQCyBr/wOrZftk3R7fImOCnbUDOicvjEUlQCu3Sq1hxMKI 9EncSnE/8M2r3SHm1N8wr89R129BW4E2oeHlM5gku0mczWIUGUx0esnqQ9me1PIr cQcvLdVVTar0pZNW7PjeJA5mfNT8cRNHzQCm/JUroT0FEfFm6ZjKqv9l/XtpiOsO xYfqviTscQsQOsR6sXWXaqwqGhSqrCbnBFoheBLkua2WQvk2xw6cR+YLyOI2Mm6r Nv94f1R1cwA2rqk7+uRJwfrnaWlz -----END CERTIFICATE-----Generated at Sun Apr 19 12:54:51 2026 by rpki-client