$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/CGVECgE8yiihp6qYQ_rZkkuI8nk.roa File: CGVECgE8yiihp6qYQ_rZkkuI8nk.roa (raw, json) Hash identifier: bvZ8R91DtJUAQ9hXhusHZhJ72NxZvWSckZ56pKw5g6E= Subject key identifier: 08:65:44:0A:01:3C:CA:28:A1:A7:AA:98:43:FA:D9:92:4B:88:F2:79 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 8F Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/CGVECgE8yiihp6qYQ_rZkkuI8nk.roa Signing time: Tue 31 Mar 2026 08:37:41 +0000 ROA not before: Tue 31 Mar 2026 08:37:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 202.170.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0865440A013CCA28A1A7AA9843FAD9924B88F279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:dd:a4:d0:e0:58:3f:8e:16:12:e7:f9:37: 11:16:2e:fe:63:3a:b2:62:a8:73:b9:5e:5d:cb:9e: de:d3:a5:85:94:77:84:5b:09:e6:70:6b:58:6c:6d: 85:e2:b1:56:f9:9b:6f:b9:8b:7c:63:03:1c:a0:84: 2b:c2:14:4e:03:af:c8:d1:36:f6:15:ea:84:32:41: 49:50:24:05:23:ba:cd:e5:14:f1:4d:ac:4f:73:ad: c5:1b:07:a7:a7:7e:8e:16:1a:2e:14:f6:32:92:7c: d6:fe:7f:58:4e:3e:45:b8:bd:34:22:cf:ea:f5:6f: d4:41:e6:3f:cd:91:0d:78:6e:8a:1c:d7:b4:14:c0: 86:a6:e5:68:6a:c6:6e:ca:86:80:26:fb:be:af:8f: cc:99:d4:fe:38:bd:dc:42:f0:fd:73:3b:3f:ef:c7: 44:ee:86:48:6e:6a:e9:3d:77:d3:d5:e5:36:d9:ef: 6f:7a:81:91:6a:2a:48:8c:b1:da:c1:df:5b:28:66: b3:05:99:d4:a8:34:07:31:4a:6f:8e:21:10:e9:48: d4:c9:cb:93:75:e6:0c:65:d9:d1:27:3c:95:f8:b5: 9c:b9:6e:e9:78:4d:88:9d:34:6a:37:c2:77:30:ee: a5:38:27:e4:85:9f:43:e3:59:22:4f:cc:54:54:2a: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:65:44:0A:01:3C:CA:28:A1:A7:AA:98:43:FA:D9:92:4B:88:F2:79 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/CGVECgE8yiihp6qYQ_rZkkuI8nk.roa sbgp-ipAddrBlock: critical IPv4: 202.170.176.0/20 Signature Algorithm: sha256WithRSAEncryption 25:85:ac:09:aa:80:84:d4:cc:0e:2f:17:02:a7:34:45:fd:18: 61:4e:2d:f7:d3:bf:e3:97:48:7b:1c:b7:e1:24:13:ec:e0:41: 73:fc:06:1a:cc:66:14:70:d1:dd:83:06:9f:7a:e8:13:32:ec: 8d:58:ec:72:a9:d1:27:a8:87:82:67:61:24:9e:0c:7f:b6:93: 25:14:ed:72:7c:48:7b:b9:0d:bd:13:7a:d4:38:82:75:0f:92: a5:d5:f5:14:4c:d0:48:de:d2:5e:29:6d:3c:88:fd:ee:fd:18: 4d:18:0c:76:bd:86:1a:44:20:bc:26:66:0c:92:16:2d:81:8b: e3:9f:2d:24:98:19:0c:a0:88:4b:18:90:35:1c:b7:a5:be:4f: b0:7d:32:8a:a7:5b:f0:5a:6b:c0:25:1b:8b:75:5e:70:00:6a: 71:47:a0:95:79:f3:a9:9b:07:49:49:dd:ec:93:7e:b4:1e:a1: 67:5e:7a:f8:cf:da:af:75:ef:a7:28:de:11:be:67:80:43:cb: 06:a0:4d:f1:6f:38:c1:a1:82:db:77:9a:58:77:18:2e:9b:a7: 88:29:a3:19:31:7d:85:0e:ab:09:43:db:f4:d1:6c:8e:90:b3: 91:88:62:bf:d3:9a:b2:19:97:d5:40:cc:a5:b9:c2:ef:21:76: 57:63:e5:e8 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4NjU0NDBBMDEzQ0NB MjhBMUE3QUE5ODQzRkFEOTkyNEI4OEYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZe92k0OBYP44WEuf5NxEWLv5jOrJiqHO5Xl3Lnt7TpYWUd4Rb CeZwa1hsbYXisVb5m2+5i3xjAxyghCvCFE4Dr8jRNvYV6oQyQUlQJAUjus3lFPFN rE9zrcUbB6enfo4WGi4U9jKSfNb+f1hOPkW4vTQiz+r1b9RB5j/NkQ14booc17QU wIam5Whqxm7KhoAm+76vj8yZ1P44vdxC8P1zOz/vx0Tuhkhuauk9d9PV5TbZ7296 gZFqKkiMsdrB31soZrMFmdSoNAcxSm+OIRDpSNTJy5N15gxl2dEnPJX4tZy5bul4 TYidNGo3wncw7qU4J+SFn0PjWSJPzFRUKiQ1AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUCGVECgE8yiihp6qYQ/rZkkuI8nkwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9DR1ZFQ2dFOHlpaWhwNnFZUV9yWmtrdUk4bmsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyqqwMA0GCSqGSIb3DQEBCwUA A4IBAQAlhawJqoCE1MwOLxcCpzRF/RhhTi3307/jl0h7HLfhJBPs4EFz/AYazGYU cNHdgwafeugTMuyNWOxyqdEnqIeCZ2Ekngx/tpMlFO1yfEh7uQ29E3rUOIJ1D5Kl 1fUUTNBI3tJeKW08iP3u/RhNGAx2vYYaRCC8JmYMkhYtgYvjny0kmBkMoIhLGJA1 HLelvk+wfTKKp1vwWmvAJRuLdV5wAGpxR6CVefOpmwdJSd3sk360HqFnXnr4z9qv de+nKN4RvmeAQ8sGoE3xbzjBoYLbd5pYdxgum6eIKaMZMX2FDqsJQ9v00WyOkLOR iGK/05qyGZfVQMylucLvIXZXY+Xo -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:08 2026 by rpki-client