$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/DBT3asU9vvGvcuq0j8KCgZkhq-8.roa File: DBT3asU9vvGvcuq0j8KCgZkhq-8.roa (raw, json) Hash identifier: kf5XcLPtYAWapoeFoh423yiccye/BeySwUm7PtgM86g= Subject key identifier: 0C:14:F7:6A:C5:3D:BE:F1:AF:72:EA:B4:8F:C2:82:81:99:21:AB:EF Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 8E Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/DBT3asU9vvGvcuq0j8KCgZkhq-8.roa Signing time: Tue 31 Mar 2026 08:37:41 +0000 ROA not before: Tue 31 Mar 2026 08:37:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 202.137.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0C14F76AC53DBEF1AF72EAB48FC282819921ABEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:91:b3:ee:e4:70:79:2c:4d:22:1b:69:a5: 5d:9e:50:29:fe:8f:91:97:a3:50:7e:18:91:7a:c8: ce:6c:3c:6c:bb:27:be:e4:25:b8:3e:98:48:cf:17: f9:2d:51:fe:49:43:a6:36:94:ef:75:56:e1:c4:3b: 47:7c:2c:91:9c:9c:7a:1c:ed:0f:68:24:12:f6:69: ad:29:c8:91:24:93:37:3b:4a:46:c7:5e:fd:61:2d: 9e:4d:66:1b:5d:2a:5c:d2:d0:79:f3:59:1a:d1:25: e2:69:4d:34:55:04:70:44:db:f2:59:c0:a3:97:37: f7:1f:ca:0e:54:c4:54:43:64:3c:84:85:9b:82:86: 10:35:da:be:54:f6:ee:0a:e2:b4:91:90:ef:61:82: 5f:4a:06:96:f1:97:25:10:5a:78:f7:b4:1a:13:73: 10:9d:31:a8:4e:94:e1:b5:ba:e7:27:a5:31:67:34: c0:d5:73:9a:9f:f0:5d:49:a4:21:38:95:53:c6:0e: 60:17:89:1b:66:5a:b3:f7:c7:13:57:0c:50:b8:40: b1:5f:ab:49:b1:0f:e4:b0:d7:37:a8:c8:46:ce:68: 54:7a:71:3b:c9:6b:86:5a:2f:e8:56:79:c1:c7:25: ec:e6:8a:38:6b:ca:be:28:bd:8f:40:5b:a7:d9:aa: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:14:F7:6A:C5:3D:BE:F1:AF:72:EA:B4:8F:C2:82:81:99:21:AB:EF X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/DBT3asU9vvGvcuq0j8KCgZkhq-8.roa sbgp-ipAddrBlock: critical IPv4: 202.137.184.0/21 Signature Algorithm: sha256WithRSAEncryption b6:0f:46:0c:8f:0d:33:88:2d:0c:65:1d:09:53:75:28:c0:6d: 87:61:a7:50:7f:9b:69:8b:c0:f7:b7:0e:59:70:8b:94:6f:4a: dc:1f:3e:af:f6:45:3c:2a:b5:ff:82:cc:ce:0e:66:8d:d8:40: cb:dc:ef:c8:c0:dc:00:57:8e:83:7c:8f:aa:50:bd:15:a0:f1: df:4d:ab:ee:e7:c9:a8:09:da:a9:cf:02:47:5f:c6:76:60:c6: ac:bc:f4:45:a1:be:0e:34:20:ba:6e:bd:39:aa:6c:87:03:85: 7b:36:34:63:04:b5:70:46:5a:89:52:b3:95:0e:c7:2b:23:5d: 3b:54:11:e4:f0:4e:ac:d6:ac:e2:ce:f9:a9:bc:04:47:04:02: f6:2c:e0:29:ff:72:c5:b8:20:d5:29:15:1c:50:e2:5d:30:d3: 41:93:df:57:91:b7:9c:87:4f:5b:01:36:e3:79:cd:2b:67:39: 2a:fc:48:f2:9c:9c:ce:42:61:c6:e5:7f:3c:00:c7:8c:a5:24: aa:d9:5b:98:e9:96:6b:2d:5b:7c:37:d9:f8:86:c6:6a:1d:16: 30:bd:fb:e0:fb:69:4f:f6:bd:5d:04:c7:f2:b7:6a:3a:28:be: 51:e6:8e:32:bc:fa:8d:80:24:4d:11:bf:d0:9c:08:01:71:35: 84:6d:97:c4 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMTRGNzZBQzUzREJF RjFBRjcyRUFCNDhGQzI4MjgxOTkyMUFCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXApGz7uRweSxNIhtppV2eUCn+j5GXo1B+GJF6yM5sPGy7J77k Jbg+mEjPF/ktUf5JQ6Y2lO91VuHEO0d8LJGcnHoc7Q9oJBL2aa0pyJEkkzc7SkbH Xv1hLZ5NZhtdKlzS0HnzWRrRJeJpTTRVBHBE2/JZwKOXN/cfyg5UxFRDZDyEhZuC hhA12r5U9u4K4rSRkO9hgl9KBpbxlyUQWnj3tBoTcxCdMahOlOG1uucnpTFnNMDV c5qf8F1JpCE4lVPGDmAXiRtmWrP3xxNXDFC4QLFfq0mxD+Sw1zeoyEbOaFR6cTvJ a4ZaL+hWecHHJezmijhryr4ovY9AW6fZqqOpAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUDBT3asU9vvGvcuq0j8KCgZkhq+8wHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9EQlQzYXNVOXZ2R3ZjdXEwajhLQ2daa2hxLTgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyom4MA0GCSqGSIb3DQEBCwUA A4IBAQC2D0YMjw0ziC0MZR0JU3UowG2HYadQf5tpi8D3tw5ZcIuUb0rcHz6v9kU8 KrX/gszODmaN2EDL3O/IwNwAV46DfI+qUL0VoPHfTavu58moCdqpzwJHX8Z2YMas vPRFob4ONCC6br05qmyHA4V7NjRjBLVwRlqJUrOVDscrI107VBHk8E6s1qzizvmp vARHBAL2LOAp/3LFuCDVKRUcUOJdMNNBk99Xkbech09bATbjec0rZzkq/EjynJzO QmHG5X88AMeMpSSq2VuY6ZZrLVt8N9n4hsZqHRYwvfvg+2lP9r1dBMfyt2o6KL5R 5o4yvPqNgCRNEb/QnAgBcTWEbZfE -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:22 2026 by rpki-client