$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/VtQ_A-M7aRqFVMNAP7ay81gMHmA.roa File: VtQ_A-M7aRqFVMNAP7ay81gMHmA.roa (raw, json) Hash identifier: Z0TYvVeLoSSafcF7gRMejLOsAGDuhmvTZY+vf6GWYOw= Subject key identifier: 56:D4:3F:03:E3:3B:69:1A:85:54:C3:40:3F:B6:B2:F3:58:0C:1E:60 Certificate issuer: /CN=671784C2CB3B8487CA74726A65F4B447BE012C56 Certificate serial: 22 Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/VtQ_A-M7aRqFVMNAP7ay81gMHmA.roa Signing time: Tue 31 Mar 2026 08:41:35 +0000 ROA not before: Tue 31 Mar 2026 08:41:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 146969 IP address blocks: 2407:e540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56 Validity Not Before: Mar 31 08:41:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=56D43F03E33B691A8554C3403FB6B2F3580C1E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:02:87:7d:84:29:13:80:d9:6b:28:db:63: 2c:56:80:38:30:5d:09:d0:ed:2d:84:db:84:d8:34: 2f:aa:bf:8b:7f:5c:53:02:d5:4f:d4:d1:0a:4a:11: 77:1d:41:36:9c:3c:f5:6c:ca:16:52:85:6b:18:ce: ee:b6:97:2f:71:92:ad:e0:34:09:fd:19:ac:e4:f5: a8:a3:09:dc:8d:df:05:68:b0:4a:95:0b:d9:6c:f7: 0f:2b:f0:b3:71:52:3a:f6:0a:e7:c5:05:e6:c5:5f: d8:7f:9e:d0:73:b8:a0:c6:25:2c:8f:fa:94:ce:e1: 17:01:71:5e:7a:67:b5:12:eb:e8:63:7c:32:9d:94: a8:9b:59:e6:0e:0c:9a:ce:ed:9b:42:f8:e3:67:6e: ac:d8:3e:3e:0d:aa:60:b8:f7:14:39:1a:0c:40:82: 08:fd:72:2a:00:33:bf:34:d4:c3:fb:f3:cc:c2:01: ef:49:40:d5:22:31:06:23:d5:69:6f:fa:34:ae:c0: 4f:98:22:46:14:b0:0c:ac:3f:0a:8e:d7:f0:3e:1b: 80:4f:36:89:f5:fb:a1:5f:82:ed:d2:cb:e0:be:21: b2:94:b0:3d:00:61:5d:b4:06:fa:e9:d3:5e:94:0f: 70:84:64:e6:13:cf:c7:42:ca:fe:48:79:f1:7d:89: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:3F:03:E3:3B:69:1A:85:54:C3:40:3F:B6:B2:F3:58:0C:1E:60 X509v3 Authority Key Identifier: keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/VtQ_A-M7aRqFVMNAP7ay81gMHmA.roa sbgp-ipAddrBlock: critical IPv6: 2407:e540::/32 Signature Algorithm: sha256WithRSAEncryption 9b:90:2f:1d:fa:49:ad:d1:82:bc:49:0f:53:37:f3:6d:ef:3e: a8:57:05:d6:96:6d:8d:1e:56:88:b5:25:98:0b:c8:29:de:25: dd:0f:17:86:e4:20:4b:bd:7f:a8:e6:e2:14:43:e0:5b:1c:98: 7a:5b:23:92:f2:9a:35:39:7f:8a:fb:37:71:43:fa:46:16:8a: 58:39:66:1e:e8:ed:0b:f9:e4:f2:c7:94:58:aa:f2:2b:39:1b: ad:ce:88:63:06:03:65:ff:95:cc:72:74:08:0c:a6:38:51:95: a6:ed:f1:b5:5a:59:c3:bd:a9:ca:b5:10:37:9d:88:70:34:91: af:95:f9:f3:0d:a4:4c:a7:8a:11:ca:ce:99:4b:21:d1:18:54: 1e:6e:19:14:3e:78:88:4a:35:58:43:0e:7c:92:5f:fc:a7:08: 15:2f:1a:f1:5e:87:ff:a9:4f:33:44:0a:c6:6f:57:8b:6f:cf: b7:f0:5f:25:4e:fb:4d:85:d8:3b:7f:5d:b9:a4:68:30:53:3f: 1c:81:19:1e:3a:56:e7:23:ae:3b:ea:e3:64:78:29:18:53:0e: 5e:63:1c:a5:e1:73:f8:d2:d3:42:5f:b5:b9:32:f5:95:1f:23: 84:b7:dc:0b:80:f3:93:0d:12:d4:a6:00:b8:48:51:d0:00:d3: 00:00:03:91 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzE3 ODRDMkNCM0I4NDg3Q0E3NDcyNkE2NUY0QjQ0N0JFMDEyQzU2MB4XDTI2MDMzMTA4 NDEzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTZENDNGMDNFMzNCNjkx QTg1NTRDMzQwM0ZCNkIyRjM1ODBDMUU2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMz8Aod9hCkTgNlrKNtjLFaAODBdCdDtLYTbhNg0L6q/i39cUwLV T9TRCkoRdx1BNpw89WzKFlKFaxjO7raXL3GSreA0Cf0ZrOT1qKMJ3I3fBWiwSpUL 2Wz3Dyvws3FSOvYK58UF5sVf2H+e0HO4oMYlLI/6lM7hFwFxXnpntRLr6GN8Mp2U qJtZ5g4Mms7tm0L442durNg+Pg2qYLj3FDkaDECCCP1yKgAzvzTUw/vzzMIB70lA 1SIxBiPVaW/6NK7AT5giRhSwDKw/Co7X8D4bgE82ifX7oV+C7dLL4L4hspSwPQBh XbQG+unTXpQPcIRk5hPPx0LK/kh58X2J8JsCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBRW1D8D4ztpGoVUw0A/trLzWAweYDAfBgNVHSMEGDAWgBRnF4TCyzuEh8p0cmpl 9LRHvgEsVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzODcvWnhlRXdzczdoSWZLZEhKcVpmUzBSNzRCTEZZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnhlRXdzczdoSWZLZEhKcVpmUzBS NzRCTEZZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwMzg3L1Z0UV9BLU03YVJxRlZNTkFQN2F5ODFnTUhtQS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB+VAMA0GCSqGSIb3DQEBCwUA A4IBAQCbkC8d+kmt0YK8SQ9TN/Nt7z6oVwXWlm2NHlaItSWYC8gp3iXdDxeG5CBL vX+o5uIUQ+BbHJh6WyOS8po1OX+K+zdxQ/pGFopYOWYe6O0L+eTyx5RYqvIrORut zohjBgNl/5XMcnQIDKY4UZWm7fG1WlnDvanKtRA3nYhwNJGvlfnzDaRMp4oRys6Z SyHRGFQebhkUPniISjVYQw58kl/8pwgVLxrxXof/qU8zRArGb1eLb8+38F8lTvtN hdg7f125pGgwUz8cgRkeOlbnI6476uNkeCkYUw5eYxyl4XP40tNCX7W5MvWVHyOE t9wLgPOTDRLUpgC4SFHQANMAAAOR -----END CERTIFICATE-----Generated at Sun Apr 19 09:43:05 2026 by rpki-client