$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa File: N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa (raw, json) Hash identifier: b2tzebuWqTLCHFVAa6gmLYgzAqg1ARvcky6hudpgToM= Subject key identifier: 37:CF:E1:1B:D2:E3:FD:0B:5C:FA:BB:2A:3E:65:8A:E6:40:AE:C6:E5 Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376 Certificate serial: 98 Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa Signing time: Tue 31 Mar 2026 07:40:58 +0000 ROA not before: Tue 31 Mar 2026 07:40:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7514 IP address blocks: 218.216.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28393FAE129B501824696BAE24B64734A203C376 Validity Not Before: Mar 31 07:40:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=37CFE11BD2E3FD0B5CFABB2A3E658AE640AEC6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:4f:ba:98:14:22:25:60:51:00:5e:83:44: 0e:f5:d1:1f:02:41:fc:c8:7d:8c:4a:27:71:3f:6d: fe:4e:8d:2a:c1:aa:4c:8f:60:4a:44:5c:42:82:f6: ac:99:39:3a:a5:ea:0f:f3:3d:20:0a:fc:e5:23:3f: 9d:37:db:b5:c6:d8:8e:83:75:cf:b7:99:20:9d:23: 00:d9:19:95:77:1d:a4:7c:ef:43:54:63:94:75:30: 41:5c:94:24:d2:2b:40:85:24:35:07:27:03:30:64: bc:18:4b:f1:2c:f3:7a:3b:2c:d2:de:41:d8:c6:0d: dd:bc:5d:0f:fe:d8:96:2a:fa:0b:cf:c3:fc:08:f5: 73:44:d5:d3:69:67:34:53:5a:77:2d:69:b2:d7:05: 68:57:6a:96:b1:7f:6a:f0:0e:2d:d4:b6:02:a3:44: cf:3a:bd:a9:be:42:25:16:7c:38:1d:19:e4:67:0c: d1:89:fd:5f:d7:7a:7e:b8:50:2a:da:9f:c4:d1:86: 90:95:73:5f:7e:3e:2d:5c:cd:07:1d:03:df:2c:0b: 5b:46:17:b8:60:d4:22:30:06:ef:82:64:4f:7b:a1: 44:b5:9e:36:f2:36:39:eb:44:36:93:5b:65:fa:9f: 80:ac:29:ca:15:cc:24:a8:5f:e6:87:c6:58:c6:69: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CF:E1:1B:D2:E3:FD:0B:5C:FA:BB:2A:3E:65:8A:E6:40:AE:C6:E5 X509v3 Authority Key Identifier: keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/N8_hG9Lj_Qtc-rsqPmWK5kCuxuU.roa sbgp-ipAddrBlock: critical IPv4: 218.216.128.0/20 Signature Algorithm: sha256WithRSAEncryption 7f:b2:52:7f:46:6b:bc:2d:a4:b5:a2:13:f8:d9:f2:2a:1a:5b: 76:21:91:aa:ef:fa:5f:8a:f8:ea:54:2b:47:0b:f6:5b:fb:e7: 43:2a:41:ef:34:35:de:57:42:65:6d:48:a9:61:ed:cf:b0:8b: c4:8a:13:46:1a:4f:52:2f:1e:6e:50:47:54:c6:4d:24:2e:c1: 9a:2d:da:41:44:23:98:3d:1e:ff:ae:7a:e6:e3:64:4f:c2:ea: 5b:5d:2b:ec:ee:72:ae:60:ae:e1:ff:25:2b:d6:52:f3:c3:3b: 80:cc:9b:67:12:78:a4:37:ec:86:70:00:c0:d7:60:42:a7:56: fc:b5:c2:01:a8:1c:fd:5d:d9:34:4f:41:1f:4b:f5:0b:aa:d2: af:63:17:76:98:0a:ac:a7:29:63:93:57:42:d5:c5:97:31:e7: d6:d5:87:dd:c7:d8:e5:e4:8a:75:f4:05:0c:06:08:e6:7d:21: 5f:21:f8:bf:66:91:fe:76:bc:41:35:df:ad:c5:3a:85:f8:65: b4:c4:b5:46:ba:1f:66:27:f7:02:d9:c1:ea:bb:e0:da:1e:d0: 90:c6:c5:70:9a:dd:ed:da:73:f1:c9:63:ba:0e:81:50:8e:11: e1:7a:56:88:da:61:28:66:23:a6:83:5e:9e:0f:60:b5:73:06: 23:5d:32:60 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNjAzMzEw NzQwNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3Q0ZFMTFCRDJFM0ZE MEI1Q0ZBQkIyQTNFNjU4QUU2NDBBRUM2RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKEU+6mBQiJWBRAF6DRA710R8CQfzIfYxKJ3E/bf5OjSrBqkyP YEpEXEKC9qyZOTql6g/zPSAK/OUjP50327XG2I6Ddc+3mSCdIwDZGZV3HaR870NU Y5R1MEFclCTSK0CFJDUHJwMwZLwYS/Es83o7LNLeQdjGDd28XQ/+2JYq+gvPw/wI 9XNE1dNpZzRTWnctabLXBWhXapaxf2rwDi3UtgKjRM86vam+QiUWfDgdGeRnDNGJ /V/Xen64UCran8TRhpCVc19+Pi1czQcdA98sC1tGF7hg1CIwBu+CZE97oUS1njby NjnrRDaTW2X6n4CsKcoVzCSoX+aHxljGaYcpAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUN8/hG9Lj/Qtc+rsqPmWK5kCuxuUwHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDc2Mi9OOF9oRzlMal9RdGMtcnNxUG1XSzVrQ3V4dVUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2tiAMA0GCSqGSIb3DQEBCwUA A4IBAQB/slJ/Rmu8LaS1ohP42fIqGlt2IZGq7/pfivjqVCtHC/Zb++dDKkHvNDXe V0JlbUipYe3PsIvEihNGGk9SLx5uUEdUxk0kLsGaLdpBRCOYPR7/rnrm42RPwupb XSvs7nKuYK7h/yUr1lLzwzuAzJtnEnikN+yGcADA12BCp1b8tcIBqBz9Xdk0T0Ef S/ULqtKvYxd2mAqspyljk1dC1cWXMefW1Yfdx9jl5Ip19AUMBgjmfSFfIfi/ZpH+ drxBNd+txTqF+GW0xLVGuh9mJ/cC2cHqu+DaHtCQxsVwmt3t2nPxyWO6DoFQjhHh elaI2mEoZiOmg16eD2C1cwYjXTJg -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:38 2026 by rpki-client