$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30434/L_ZzmQRJAP1PbH5H0lQX1FLI0yM.roa File: L_ZzmQRJAP1PbH5H0lQX1FLI0yM.roa (raw, json) Hash identifier: Iy7zaRiforZJ8p6P4Wv+ila28+XFNvjgmZnsTWOR/38= Subject key identifier: 2F:F6:73:99:04:49:00:FD:4F:6C:7E:47:D2:54:17:D4:52:C8:D3:23 Certificate issuer: /CN=B7FF61AA3678BFBF17F0E78C099284E710BDB1E7 Certificate serial: 23 Authority key identifier: B7:FF:61:AA:36:78:BF:BF:17:F0:E7:8C:09:92:84:E7:10:BD:B1:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/L_ZzmQRJAP1PbH5H0lQX1FLI0yM.roa Signing time: Tue 31 Mar 2026 08:40:26 +0000 ROA not before: Tue 31 Mar 2026 08:40:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131931 IP address blocks: 2401:9220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7FF61AA3678BFBF17F0E78C099284E710BDB1E7 Validity Not Before: Mar 31 08:40:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2FF67399044900FD4F6C7E47D25417D452C8D323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:1c:63:e0:2d:e0:cd:e9:1f:b6:d7:33:bd: 9c:c6:0e:43:98:f9:5d:c9:22:a9:26:30:ff:c0:bf: ec:26:d4:24:0f:a5:be:48:d6:78:d4:ed:24:8c:c3: 35:c1:cc:bf:d1:cc:9c:a7:a9:3e:a9:35:b8:fb:2d: b8:dc:91:49:ed:98:f8:4d:49:b7:c8:f6:2f:c4:0c: 2a:e8:f7:3b:a9:33:f9:96:87:65:da:28:e6:a0:2f: f8:da:b2:08:48:c3:fb:d3:3b:83:d9:9a:d8:10:5b: 7a:d7:27:e9:6c:03:6f:ba:63:15:8c:ca:e0:b7:7d: 8c:6c:07:1b:e2:c8:e1:d5:d9:75:55:94:3d:65:b9: 20:35:73:d7:da:db:12:13:f1:5c:61:fe:af:2a:90: 2b:ea:06:34:ca:81:a6:ac:0a:05:a4:a2:e4:d3:d1: 75:ae:ea:9c:06:92:be:44:79:f5:4d:db:86:f6:87: ad:b1:db:67:1b:61:36:57:10:7e:d1:55:94:3b:25: 82:58:b7:31:9d:63:2a:bb:96:b8:c7:d5:d5:75:db: eb:39:71:69:5d:02:cd:77:c6:81:8e:b8:8c:2a:79: d7:20:3f:dd:74:02:b6:9f:27:dd:aa:0a:3d:eb:4f: 3a:34:8c:15:08:46:e7:67:b8:8f:56:ef:18:34:48: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:73:99:04:49:00:FD:4F:6C:7E:47:D2:54:17:D4:52:C8:D3:23 X509v3 Authority Key Identifier: keyid:B7:FF:61:AA:36:78:BF:BF:17:F0:E7:8C:09:92:84:E7:10:BD:B1:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/L_ZzmQRJAP1PbH5H0lQX1FLI0yM.roa sbgp-ipAddrBlock: critical IPv6: 2401:9220::/32 Signature Algorithm: sha256WithRSAEncryption 1b:25:ae:58:ff:58:1b:91:8e:73:79:f4:51:19:00:f4:5a:72: 7b:84:ac:df:8b:a2:49:d4:4a:49:18:ab:1b:17:2d:2d:2a:d6: 8e:bb:dd:f0:b0:50:95:84:db:17:84:c5:99:6b:c3:5e:08:27: 1c:5d:2f:d8:9f:28:ac:79:da:f0:a5:ce:0f:41:13:8b:48:bf: 6c:c5:b5:ba:7b:74:6c:7e:80:c4:05:c2:88:70:7d:83:c0:d3: 50:5c:ff:bd:74:c2:eb:f6:3b:00:5d:b1:39:db:ce:7f:21:94: a6:82:e1:01:8b:67:36:cd:33:87:85:e1:a5:e7:5b:4c:52:6e: 1d:3e:61:23:2c:09:9f:8d:fe:74:c1:b3:e1:65:ea:ac:d5:4a: 1e:c0:83:8b:ea:17:50:ae:0b:45:6b:23:a6:cc:eb:5a:9b:c8: 71:19:b5:78:f4:c6:7c:9d:73:1f:72:67:a3:82:8e:1d:d4:27: 26:1f:7b:b8:30:35:13:87:cc:ca:26:b5:95:65:26:39:2b:99: 25:ec:90:29:39:fb:5e:d0:55:b1:39:b9:ad:13:0e:74:90:52: 0b:55:7f:13:73:f5:97:85:74:79:ef:e2:ac:bc:e6:30:49:8b: 1f:10:81:c0:b7:95:bf:87:7f:13:42:48:ba:4b:db:d8:75:48: f6:24:8f:a0 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCN0ZG NjFBQTM2NzhCRkJGMTdGMEU3OEMwOTkyODRFNzEwQkRCMUU3MB4XDTI2MDMzMTA4 NDAyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkZGNjczOTkwNDQ5MDBG RDRGNkM3RTQ3RDI1NDE3RDQ1MkM4RDMyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK6cHGPgLeDN6R+21zO9nMYOQ5j5XckiqSYw/8C/7CbUJA+lvkjW eNTtJIzDNcHMv9HMnKepPqk1uPstuNyRSe2Y+E1Jt8j2L8QMKuj3O6kz+ZaHZdoo 5qAv+NqyCEjD+9M7g9ma2BBbetcn6WwDb7pjFYzK4Ld9jGwHG+LI4dXZdVWUPWW5 IDVz19rbEhPxXGH+ryqQK+oGNMqBpqwKBaSi5NPRda7qnAaSvkR59U3bhvaHrbHb ZxthNlcQftFVlDslgli3MZ1jKruWuMfV1XXb6zlxaV0CzXfGgY64jCp51yA/3XQC tp8n3aoKPetPOjSMFQhG52e4j1bvGDRIv5sCAwEAAaOCAd4wggHaMB0GA1UdDgQW BBQv9nOZBEkA/U9sfkfSVBfUUsjTIzAfBgNVHSMEGDAWgBS3/2GqNni/vxfw54wJ koTnEL2x5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzQvdF85aHFqWjR2NzhYOE9lTUNaS0U1eEM5c2VjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdF85aHFqWjR2NzhYOE9lTUNaS0U1 eEM5c2VjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMwNDM0L0xfWnptUVJKQVAxUGJINUgwbFFYMUZMSTB5TS5yb2Ew IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAZIgMA0GCSqGSIb3DQEBCwUA A4IBAQAbJa5Y/1gbkY5zefRRGQD0WnJ7hKzfi6JJ1EpJGKsbFy0tKtaOu93wsFCV hNsXhMWZa8NeCCccXS/Ynyisedrwpc4PQROLSL9sxbW6e3RsfoDEBcKIcH2DwNNQ XP+9dMLr9jsAXbE5285/IZSmguEBi2c2zTOHheGl51tMUm4dPmEjLAmfjf50wbPh Zeqs1UoewIOL6hdQrgtFayOmzOtam8hxGbV49MZ8nXMfcmejgo4d1CcmH3u4MDUT h8zKJrWVZSY5K5kl7JApOfte0FWxObmtEw50kFILVX8Tc/WXhXR57+KsvOYwSYsf EIHAt5W/h38TQki6S9vYdUj2JI+g -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:17 2026 by rpki-client