$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30213/2_DUs_bOOZDcC1IwpZkO39ygXWs.roa File: 2_DUs_bOOZDcC1IwpZkO39ygXWs.roa (raw, json) Hash identifier: quLXPuftXdiVHGaqIJvVmcC92PKWUs/qtDrEjOKtvBA= Subject key identifier: DB:F0:D4:B3:F6:CE:39:90:DC:0B:52:30:A5:99:0E:DF:DC:A0:5D:6B Certificate issuer: /CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1 Certificate serial: 23 Authority key identifier: 95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/2_DUs_bOOZDcC1IwpZkO39ygXWs.roa Signing time: Sun 01 Mar 2026 01:36:00 +0000 ROA not before: Sun 01 Mar 2026 01:36:00 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 17931 IP address blocks: 2402:4700::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1 Validity Not Before: Mar 1 01:36:00 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=DBF0D4B3F6CE3990DC0B5230A5990EDFDCA05D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:10:da:39:60:a1:3d:b7:1a:c3:23:b1:e0: b9:c2:80:60:ab:42:4e:e8:87:ab:a6:4a:39:32:a4: f2:9f:f3:31:d1:33:7f:6b:6a:39:12:38:df:8d:86: 58:e5:98:b3:08:f4:0f:f8:fe:d1:53:b8:cf:59:69: 09:31:3f:3b:4e:7b:36:5d:44:27:6a:db:18:95:c6: e9:b8:b2:18:b1:0b:f4:32:2b:38:c4:48:56:0e:e3: 06:46:df:e8:99:ba:9c:0e:b1:d3:f2:8a:fd:b5:47: f7:4a:fe:6d:44:6c:3a:6c:a9:7b:d9:08:35:34:b7: f5:cc:5c:42:35:9e:88:cb:79:30:ff:80:d4:86:17: 97:60:88:13:5b:06:65:ce:47:8b:a0:d6:b4:ab:51: 5f:20:57:80:2e:32:26:14:a8:63:a0:65:0f:cf:34: be:21:1f:99:da:f4:a2:dc:72:ce:d5:16:f4:68:49: cd:0e:d6:3c:d5:a2:f3:88:49:2b:e9:a4:69:42:2c: a1:ae:ce:f8:87:4d:bd:95:3a:a9:f7:0e:51:d9:13: 62:55:7a:a1:13:2f:8f:ea:38:e1:f6:08:61:c4:b0: 1d:db:f5:a6:13:ce:33:62:ed:82:52:0c:4b:36:d7: 20:67:9e:fc:59:05:8c:78:42:27:ad:f6:e7:d2:db: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:D4:B3:F6:CE:39:90:DC:0B:52:30:A5:99:0E:DF:DC:A0:5D:6B X509v3 Authority Key Identifier: keyid:95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/2_DUs_bOOZDcC1IwpZkO39ygXWs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4700::/32 Signature Algorithm: sha256WithRSAEncryption 03:51:df:be:98:3b:c3:84:9e:28:4d:e2:db:34:9e:aa:35:ff: a3:01:1b:4f:cb:b8:07:4d:c1:aa:ca:18:f0:08:6a:8f:ca:77: 1e:4c:0f:e5:9b:bc:7b:ab:d3:15:05:58:fc:ae:9f:c5:64:89: de:1d:87:0f:16:74:b7:11:f1:5b:28:1e:49:09:e1:13:e9:22: 92:5a:0a:6a:46:e0:f3:1d:73:46:59:bb:b1:bc:76:b2:5e:23: 31:1b:24:52:74:1e:24:48:ad:14:ab:d7:72:8f:66:d5:f6:dd: d8:72:d6:91:70:13:5f:44:2d:65:4d:4b:83:64:ed:b5:4e:23: cf:8d:5e:d9:4f:ae:f2:9c:84:98:36:48:0d:83:90:6e:9e:6c: 6c:b9:d9:13:6c:b5:01:21:3c:98:3c:f3:88:38:e2:35:78:ca: a0:a2:c0:bd:9c:a2:8f:4e:fd:97:82:66:a0:b1:2d:62:fa:d0: 44:a5:54:7d:ad:1d:27:bf:7a:ba:ee:58:33:a8:6c:38:7c:3c: 70:ac:3b:c2:df:30:c2:71:c2:a7:4f:01:15:56:08:4b:a6:c5: ad:fc:c8:49:3d:5c:fe:b3:8f:f8:6f:e6:01:ed:b6:b1:24:07: 8d:7a:6e:ac:b8:8b:d2:76:c4:c3:e0:4a:21:da:82:22:4b:e7: aa:90:e0:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NUNG QTMzRUY0RjM2MTUwRUQ4NjZCODU5ODk1RTFBMURBMkZBMUExMB4XDTI2MDMwMTAx MzYwMFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoREJGMEQ0QjNGNkNFMzk5 MERDMEI1MjMwQTU5OTBFREZEQ0EwNUQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCGENo5YKE9txrDI7HgucKAYKtCTuiHq6ZKOTKk8p/zMdEzf2tq ORI4342GWOWYswj0D/j+0VO4z1lpCTE/O057Nl1EJ2rbGJXG6biyGLEL9DIrOMRI Vg7jBkbf6Jm6nA6x0/KK/bVH90r+bURsOmype9kINTS39cxcQjWeiMt5MP+A1IYX l2CIE1sGZc5Hi6DWtKtRXyBXgC4yJhSoY6BlD880viEfmdr0otxyztUW9GhJzQ7W PNWi84hJK+mkaUIsoa7O+IdNvZU6qfcOUdkTYlV6oRMvj+o44fYIYcSwHdv1phPO M2LtglIMSzbXIGee/FkFjHhCJ63259Lb3usCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTb8NSz9s45kNwLUjClmQ7f3KBdazAfBgNVHSMEGDAWgBSVz6M+9PNhUO2Ga4WY leGh2i+hoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMTMvbGMtalB2VHpZVkR0aG11Rm1KWGhvZG92b2FFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGMtalB2VHpZVkR0aG11Rm1KWGhv ZG92b2FFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjEzLzJfRFVzX2JPT1pEY0MxSXdwWmtPMzl5Z1hXcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAkcAMA0GCSqGSIb3DQEBCwUAA4IBAQADUd++mDvDhJ4oTeLbNJ6q Nf+jARtPy7gHTcGqyhjwCGqPynceTA/lm7x7q9MVBVj8rp/FZIneHYcPFnS3EfFb KB5JCeET6SKSWgpqRuDzHXNGWbuxvHayXiMxGyRSdB4kSK0Uq9dyj2bV9t3YctaR cBNfRC1lTUuDZO21TiPPjV7ZT67ynISYNkgNg5BunmxsudkTbLUBITyYPPOIOOI1 eMqgosC9nKKPTv2XgmagsS1i+tBEpVR9rR0nv3q67lgzqGw4fDxwrDvC3zDCccKn TwEVVghLpsWt/MhJPVz+s4/4b+YB7baxJAeNem6suIvSdsTD4Eoh2oIiS+eqkODK -----END CERTIFICATE-----Generated at Mon Mar 2 21:04:50 2026 by rpki-client