$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30328/N2SRcGlk5xa7nyxyyAK0_BZkS6E.roa File: N2SRcGlk5xa7nyxyyAK0_BZkS6E.roa (raw, json) Hash identifier: Ux700J/eMYRlBOtZJLSEJtCYMZVyh2iMUdXULKxvRX4= Subject key identifier: 37:64:91:70:69:64:E7:16:BB:9F:2C:72:C8:02:B4:FC:16:64:4B:A1 Certificate issuer: /CN=EC8FAEFF6265C5305CE92E2683671B3066E1004B Certificate serial: 17 Authority key identifier: EC:8F:AE:FF:62:65:C5:30:5C:E9:2E:26:83:67:1B:30:66:E1:00:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/N2SRcGlk5xa7nyxyyAK0_BZkS6E.roa Signing time: Tue 31 Mar 2026 08:45:00 +0000 ROA not before: Tue 31 Mar 2026 08:45:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17529 IP address blocks: 2001:3b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC8FAEFF6265C5305CE92E2683671B3066E1004B Validity Not Before: Mar 31 08:45:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=376491706964E716BB9F2C72C802B4FC16644BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:62:14:49:10:5c:f3:34:4d:54:f4:08:4c:5a: 33:9f:67:d1:cb:f6:2e:ff:bd:d3:9f:0a:71:4d:c3: 0e:79:d2:51:88:b5:d9:1d:ec:7e:40:a0:f5:ba:d4: 19:fa:5f:22:b1:c4:34:0e:46:07:06:8c:41:d8:8b: ec:55:6c:c3:24:6d:9c:8b:53:ba:e5:d9:f2:1f:ed: c6:3a:f4:cf:da:f3:45:42:ae:39:7b:a3:11:e1:c9: fe:82:9c:5c:5b:0d:43:42:6b:73:4a:e3:52:98:a0: 54:d4:2c:bf:fe:6b:52:5d:fd:92:61:c4:2b:ff:2f: 16:97:d7:83:89:e5:06:c1:2e:0b:36:1e:de:d5:8a: bc:3e:c1:e8:26:d0:da:07:6b:24:8e:47:f0:bc:5c: 2c:14:6e:a1:f1:a4:d2:35:c2:33:ba:57:da:0e:ea: 17:9a:fb:1f:c3:80:b2:63:ff:df:bc:8f:04:be:df: 33:67:0f:1c:cf:7c:62:62:04:5c:12:ff:27:25:e3: fb:f8:66:25:0e:4d:76:76:7e:a3:91:16:5b:7f:7b: 0e:bc:00:7c:d7:81:d8:c7:69:d9:56:9b:3b:0d:82: b3:af:13:b3:4a:92:a1:45:75:7e:86:4f:f5:d7:8e: 6d:3c:60:e3:da:2e:51:11:ee:79:80:3c:d3:51:74: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:91:70:69:64:E7:16:BB:9F:2C:72:C8:02:B4:FC:16:64:4B:A1 X509v3 Authority Key Identifier: keyid:EC:8F:AE:FF:62:65:C5:30:5C:E9:2E:26:83:67:1B:30:66:E1:00:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/7I-u_2JlxTBc6S4mg2cbMGbhAEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7I-u_2JlxTBc6S4mg2cbMGbhAEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30328/N2SRcGlk5xa7nyxyyAK0_BZkS6E.roa sbgp-ipAddrBlock: critical IPv6: 2001:3b0::/32 Signature Algorithm: sha256WithRSAEncryption 28:ea:dc:c0:07:13:e8:41:a8:2b:f5:dd:e9:9e:bd:7f:e0:8b: a4:67:59:74:5d:c6:bd:04:61:42:cf:21:8c:6a:66:c1:73:11: 72:de:f8:ad:80:4b:1a:72:b2:da:91:9f:6f:a4:ff:be:1d:07: e6:f7:84:aa:d7:c4:42:09:f6:24:66:73:d4:b5:18:13:1f:11: 42:b7:95:d9:d3:87:20:7c:dc:0b:04:75:60:1a:c1:90:f2:78: e6:33:56:04:d6:f4:cf:e4:22:e3:45:30:bd:2c:8d:57:f8:c3: f9:83:6e:d8:79:28:34:9f:11:90:b7:a9:22:3b:c0:9f:8d:06: a9:d3:ac:38:2e:81:56:ee:d2:03:79:73:49:54:9b:50:04:3c: 3f:a6:b6:78:25:eb:0b:92:e2:b4:02:cb:ea:64:a5:46:c1:ff: 66:51:32:fe:75:3c:41:da:de:a4:68:2d:51:a8:58:6a:f3:09: fb:b8:d5:ea:4f:6b:a8:d9:5c:3a:f8:92:53:39:f7:01:11:ad: c5:5f:3e:9f:8e:90:c6:c0:4d:3e:2e:59:b3:67:83:c4:bf:e0: 85:de:ea:e1:54:49:95:51:dd:e6:38:b2:cf:8c:58:97:ea:c7: 1b:dc:74:97:8e:89:0e:82:6e:34:0f:e6:ed:e1:4d:93:f2:d1: ec:fc:ea:0f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzhG QUVGRjYyNjVDNTMwNUNFOTJFMjY4MzY3MUIzMDY2RTEwMDRCMB4XDTI2MDMzMTA4 NDUwMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzc2NDkxNzA2OTY0RTcx NkJCOUYyQzcyQzgwMkI0RkMxNjY0NEJBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANxiFEkQXPM0TVT0CExaM59n0cv2Lv+9058KcU3DDnnSUYi12R3s fkCg9brUGfpfIrHENA5GBwaMQdiL7FVswyRtnItTuuXZ8h/txjr0z9rzRUKuOXuj EeHJ/oKcXFsNQ0Jrc0rjUpigVNQsv/5rUl39kmHEK/8vFpfXg4nlBsEuCzYe3tWK vD7B6CbQ2gdrJI5H8LxcLBRuofGk0jXCM7pX2g7qF5r7H8OAsmP/37yPBL7fM2cP HM98YmIEXBL/JyXj+/hmJQ5NdnZ+o5EWW397DrwAfNeB2Mdp2VabOw2Cs68Ts0qS oUV1foZP9deObTxg49ouURHueYA801F0hmcCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQ3ZJFwaWTnFrufLHLIArT8FmRLoTAfBgNVHSMEGDAWgBTsj67/YmXFMFzpLiaD ZxswZuEASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjgvN0ktdV8ySmx4VEJjNlM0bWcyY2JNR2JoQUVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN0ktdV8ySmx4VEJjNlM0bWcyY2JN R2JoQUVzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMzI4L04yU1JjR2xrNXhhN255eHl5QUswX0Jaa1M2RS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQOwMA0GCSqGSIb3DQEBCwUA A4IBAQAo6tzABxPoQagr9d3pnr1/4IukZ1l0Xca9BGFCzyGMambBcxFy3vitgEsa crLakZ9vpP++HQfm94Sq18RCCfYkZnPUtRgTHxFCt5XZ04cgfNwLBHVgGsGQ8njm M1YE1vTP5CLjRTC9LI1X+MP5g27YeSg0nxGQt6kiO8CfjQap06w4LoFW7tIDeXNJ VJtQBDw/prZ4JesLkuK0AsvqZKVGwf9mUTL+dTxB2t6kaC1RqFhq8wn7uNXqT2uo 2Vw6+JJTOfcBEa3FXz6fjpDGwE0+LlmzZ4PEv+CF3urhVEmVUd3mOLLPjFiX6scb 3HSXjokOgm40D+bt4U2T8tHs/OoP -----END CERTIFICATE-----Generated at Fri Apr 17 17:19:37 2026 by rpki-client