$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/KHSHF1XCbpDSuIY3IC3rXA57TMA.roa File: KHSHF1XCbpDSuIY3IC3rXA57TMA.roa (raw, json) Hash identifier: +ByafciGKRJVi0x+5eKmpN60GUpOZi6atrvI6G0RUQM= Subject key identifier: 28:74:87:17:55:C2:6E:90:D2:B8:86:37:20:2D:EB:5C:0E:7B:4C:C0 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 5E Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/KHSHF1XCbpDSuIY3IC3rXA57TMA.roa Signing time: Sat 04 Apr 2026 21:27:17 +0000 ROA not before: Sat 04 Apr 2026 21:27:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 58790 IP address blocks: 2401:d20:1090::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Apr 4 21:27:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2874871755C26E90D2B88637202DEB5C0E7B4CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a7:ef:b7:b1:fb:51:14:7f:72:92:66:26:f7: 1c:ab:a6:26:28:0d:49:ad:e6:d5:99:fa:a2:ff:cc: 3a:81:8a:88:9d:c2:fa:43:40:5f:ff:78:ab:95:ca: 49:93:ed:93:bb:9d:da:17:fa:f6:c5:5a:01:d6:05: 3b:2e:2c:4b:54:37:48:6e:cc:a2:c9:f4:f5:c0:08: 45:84:e4:e6:f8:43:29:42:b1:fd:95:25:dc:c3:fc: 92:3a:57:84:40:d9:f8:95:24:09:23:7a:7c:6e:67: 77:0a:49:23:54:e2:57:b3:17:2d:76:e3:73:58:09: 7c:01:7c:aa:e9:71:fa:f0:ed:2c:b2:4d:98:08:c3: 74:70:81:72:41:54:d6:52:7d:fd:51:d0:21:41:8d: a8:75:08:6b:bb:31:e6:bb:06:b3:05:ee:48:95:29: 33:ac:ff:a5:ec:9c:04:8a:75:ea:3e:e6:63:94:90: e4:da:96:a3:06:eb:68:13:fc:ab:0a:37:38:b2:e4: 62:75:29:fd:69:1e:ff:a1:37:17:50:12:d1:55:fb: 77:5c:ec:3f:4f:95:f2:1d:42:84:bd:c0:ab:f4:9c: cb:97:c0:e1:c1:94:2d:64:3b:0b:ab:fb:c6:57:bc: a9:99:7f:8b:15:cc:de:46:ee:b5:f2:a8:48:b4:90: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:87:17:55:C2:6E:90:D2:B8:86:37:20:2D:EB:5C:0E:7B:4C:C0 X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/KHSHF1XCbpDSuIY3IC3rXA57TMA.roa sbgp-ipAddrBlock: critical IPv6: 2401:d20:1090::/44 Signature Algorithm: sha256WithRSAEncryption ac:08:fc:90:ef:54:96:a7:52:0a:3d:84:fb:c2:53:2b:36:8d: 6d:56:15:43:2a:a4:18:2d:0f:04:5f:86:3e:b0:a4:a1:d9:11: ba:b9:76:91:9d:a1:df:09:e3:5b:41:d1:31:17:ac:7e:ab:fd: 1d:0f:bf:66:67:e5:8e:59:2d:55:f2:d8:50:e4:27:27:ef:6c: ca:4a:65:a5:8c:2d:80:2e:a3:b6:00:cf:5f:4e:84:29:a7:a3: 08:df:19:b9:36:65:44:d0:7f:b3:25:0b:4a:93:18:a8:fb:64: ec:ea:31:09:94:48:a0:88:b2:0c:f4:65:2f:a3:90:79:bf:40: 05:06:67:5c:d5:38:2e:bd:68:d9:58:2f:be:2f:bb:b4:d6:3a: b3:f8:0e:c8:b6:29:53:16:4f:2b:1f:75:24:4a:85:02:87:90: 95:ca:07:68:07:99:89:34:20:57:39:28:ed:76:7e:cc:a2:01: 51:23:2c:5b:16:26:07:b4:fa:b0:94:1b:c1:50:31:e0:80:13: 5a:01:a5:79:f6:69:65:18:db:fc:5a:d0:3e:c8:f3:d9:9d:59: a9:84:1d:02:d7:94:40:b6:89:a0:6e:d4:65:24:8e:19:20:c2: 56:c5:ed:60:d2:d1:53:87:3a:ab:dc:ef:80:d3:2f:56:14:67: df:16:2a:fb -----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI2MDQwNDIx MjcxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjg3NDg3MTc1NUMyNkU5 MEQyQjg4NjM3MjAyREVCNUMwRTdCNENDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPun77ex+1EUf3KSZib3HKumJigNSa3m1Zn6ov/MOoGKiJ3C+kNA X/94q5XKSZPtk7ud2hf69sVaAdYFOy4sS1Q3SG7Mosn09cAIRYTk5vhDKUKx/ZUl 3MP8kjpXhEDZ+JUkCSN6fG5ndwpJI1TiV7MXLXbjc1gJfAF8qulx+vDtLLJNmAjD dHCBckFU1lJ9/VHQIUGNqHUIa7sx5rsGswXuSJUpM6z/peycBIp16j7mY5SQ5NqW owbraBP8qwo3OLLkYnUp/Wke/6E3F1AS0VX7d1zsP0+V8h1ChL3Aq/Scy5fA4cGU LWQ7C6v7xle8qZl/ixXM3kbutfKoSLSQx10CAwEAAaOCAeAwggHcMB0GA1UdDgQW BBQodIcXVcJukNK4hjcgLetcDntMwDAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDIzL0tIU0hGMVhDYnBEU3VJWTNJQzNyWEE1N1RNQS5yb2Ew IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAQ0gEJAwDQYJKoZIhvcNAQEL BQADggEBAKwI/JDvVJanUgo9hPvCUys2jW1WFUMqpBgtDwRfhj6wpKHZEbq5dpGd od8J41tB0TEXrH6r/R0Pv2Zn5Y5ZLVXy2FDkJyfvbMpKZaWMLYAuo7YAz19OhCmn owjfGbk2ZUTQf7MlC0qTGKj7ZOzqMQmUSKCIsgz0ZS+jkHm/QAUGZ1zVOC69aNlY L74vu7TWOrP4Dsi2KVMWTysfdSRKhQKHkJXKB2gHmYk0IFc5KO12fsyiAVEjLFsW Jge0+rCUG8FQMeCAE1oBpXn2aWUY2/xa0D7I89mdWamEHQLXlEC2iaBu1GUkjhkg wlbF7WDS0VOHOqvc74DTL1YUZ98WKvs= -----END CERTIFICATE-----Generated at Sun Apr 19 11:05:03 2026 by rpki-client