$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30454/-9MM0cMKBi47QuzAEh-im6uRpD0.roa File: -9MM0cMKBi47QuzAEh-im6uRpD0.roa (raw, json) Hash identifier: bJZgyKnPrzk7wZ4G0ICtjxHowOpFFvuupwChGwV5XDw= Subject key identifier: FB:D3:0C:D1:C3:0A:06:2E:3B:42:EC:C0:12:1F:A2:9B:AB:91:A4:3D Certificate issuer: /CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500 Certificate serial: 02 Authority key identifier: 61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/-9MM0cMKBi47QuzAEh-im6uRpD0.roa Signing time: Thu 12 Mar 2026 09:24:46 +0000 ROA not before: Thu 12 Mar 2026 09:24:46 +0000 ROA not after: Fri 12 Mar 2027 01:38:55 +0000 asID: 152877 IP address blocks: 2402:4ee0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500 Validity Not Before: Mar 12 09:24:46 2026 GMT Not After : Mar 12 01:38:55 2027 GMT Subject: CN=FBD30CD1C30A062E3B42ECC0121FA29BAB91A43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:22:17:a5:c7:70:2a:d9:26:c6:2c:a6:cc: 85:3f:1a:95:d5:53:de:53:f3:2d:3d:81:39:9f:b6: c3:89:60:66:82:2b:9d:0c:75:31:fc:97:77:d1:c8: 72:db:cd:b3:e4:15:86:33:fb:2a:72:dd:90:62:cf: bc:56:b0:49:88:a5:6e:7b:62:10:04:f1:d3:68:fc: d7:fe:47:8b:71:e5:34:98:7b:81:88:ca:b2:1e:ed: 20:e7:86:6c:b6:d9:75:5e:00:71:1f:71:4d:ba:fe: 81:6f:aa:b2:40:e5:98:81:77:6f:aa:89:70:9b:cb: cf:04:28:e6:81:3f:c8:ae:35:77:3c:41:f9:4d:4b: ce:f2:57:0d:95:68:d3:33:3a:c9:a4:73:1a:31:15: 23:7c:c6:e1:31:91:c1:e6:b9:09:e6:ea:43:88:32: 9f:bf:01:14:17:e5:21:a2:e4:71:82:17:42:64:34: 5d:e2:f8:db:51:8d:c6:ec:f6:e0:e2:29:e2:23:5a: af:d0:82:a2:9f:a2:9e:b9:ad:2a:91:d5:27:9c:81: 78:8f:94:28:15:c9:55:8b:ce:60:be:6d:f5:6e:b3: 7c:e9:10:24:6f:92:f5:29:4f:08:8b:66:6f:16:50: 64:a1:62:8c:86:bb:33:f7:4a:4e:9a:15:01:d9:db: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:0C:D1:C3:0A:06:2E:3B:42:EC:C0:12:1F:A2:9B:AB:91:A4:3D X509v3 Authority Key Identifier: keyid:61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/-9MM0cMKBi47QuzAEh-im6uRpD0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4ee0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:5e:ce:38:43:e3:b1:34:77:e2:89:b4:3b:2f:ab:f4:a3:58: 3a:34:93:8f:43:37:63:76:0f:a2:e6:58:94:63:49:a5:5e:fd: 14:4c:c5:b2:43:d8:22:ef:36:10:7b:16:c5:6b:79:a2:6c:4f: a9:cb:7d:74:ca:d4:70:87:de:18:85:c0:97:db:35:7a:d5:c6: c1:fa:3a:0f:34:e4:c5:74:13:07:99:6e:6e:96:8b:29:76:f3: 33:92:b9:ba:cf:79:d6:bd:0b:5d:95:f1:52:3f:ae:08:fe:f9: 07:32:47:13:d4:87:ad:65:55:50:67:ef:5e:71:95:a3:14:a5: 18:fe:6f:fb:f8:a2:93:e8:71:55:2a:76:c2:7e:fd:8a:3f:e1: da:07:e9:40:13:77:74:2a:fb:b4:7c:76:bc:ce:e9:45:a9:95: c0:6b:59:09:3f:b8:ec:dd:80:83:4a:73:67:ed:6b:2e:e5:a5: 4b:91:96:63:f1:cf:84:48:2f:06:0a:ad:5c:5b:82:47:ea:0f: 7e:8f:7d:59:3b:a3:59:e6:69:d7:ed:ab:37:e5:53:61:1b:d3: e1:11:e1:e3:bb:dd:24:30:55:b4:80:e4:ba:14:89:eb:1b:92: e8:1c:34:91:d3:cd:ca:10:8d:ff:6c:87:a2:c7:f1:a5:d3:fa: 1f:95:c4:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MUYz RDFBQTE5RjQ5RTZDOEI4QkRFMkIzN0I1OEVGQjU0OTA0NTAwMB4XDTI2MDMxMjA5 MjQ0NloXDTI3MDMxMjAxMzg1NVowMzExMC8GA1UEAxMoRkJEMzBDRDFDMzBBMDYy RTNCNDJFQ0MwMTIxRkEyOUJBQjkxQTQzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL9zIhelx3Aq2SbGLKbMhT8aldVT3lPzLT2BOZ+2w4lgZoIrnQx1 MfyXd9HIctvNs+QVhjP7KnLdkGLPvFawSYilbntiEATx02j81/5Hi3HlNJh7gYjK sh7tIOeGbLbZdV4AcR9xTbr+gW+qskDlmIF3b6qJcJvLzwQo5oE/yK41dzxB+U1L zvJXDZVo0zM6yaRzGjEVI3zG4TGRwea5CebqQ4gyn78BFBflIaLkcYIXQmQ0XeL4 21GNxuz24OIp4iNar9CCop+inrmtKpHVJ5yBeI+UKBXJVYvOYL5t9W6zfOkQJG+S 9SlPCItmbxZQZKFijIa7M/dKTpoVAdnb42cCAwEAAaOCAikwggIlMB0GA1UdDgQW BBT70wzRwwoGLjtC7MASH6Kbq5GkPTAfBgNVHSMEGDAWgBRh89GqGfSebIuL3is3 tY77VJBFADAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NTQvWWZQUnFobjBubXlMaTk0ck43V08tMVNRUlFBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWWZQUnFobjBubXlMaTk0ck43V08t MVNRUlFBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDU0Ly05TU0wY01LQmk0N1F1ekFFaC1pbTZ1UnBEMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAk7gMA0GCSqGSIb3DQEBCwUAA4IBAQAPXs44Q+OxNHfiibQ7L6v0 o1g6NJOPQzdjdg+i5liUY0mlXv0UTMWyQ9gi7zYQexbFa3mibE+py310ytRwh94Y hcCX2zV61cbB+joPNOTFdBMHmW5ulospdvMzkrm6z3nWvQtdlfFSP64I/vkHMkcT 1IetZVVQZ+9ecZWjFKUY/m/7+KKT6HFVKnbCfv2KP+HaB+lAE3d0Kvu0fHa8zulF qZXAa1kJP7js3YCDSnNn7Wsu5aVLkZZj8c+ESC8GCq1cW4JH6g9+j31ZO6NZ5mnX 7as35VNhG9PhEeHju90kMFW0gOS6FInrG5LoHDSR083KEI3/bIeix/Gl0/oflcRq -----END CERTIFICATE-----Generated at Thu Mar 26 23:13:26 2026 by rpki-client