$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/IIhXM_HpzUooielt5-sfEe4ht80.roa File: IIhXM_HpzUooielt5-sfEe4ht80.roa (raw, json) Hash identifier: xRnKO/IYDm+ecz7rygyKeJpxGw+6VWHvGcvFc3qPucI= Subject key identifier: 20:88:57:33:F1:E9:CD:4A:28:89:E9:6D:E7:EB:1F:11:EE:21:B7:CD Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 7D Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/IIhXM_HpzUooielt5-sfEe4ht80.roa Signing time: Tue 31 Mar 2026 08:37:34 +0000 ROA not before: Tue 31 Mar 2026 08:37:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 202.168.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=20885733F1E9CD4A2889E96DE7EB1F11EE21B7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:1a:12:51:93:a4:6b:12:8c:88:7e:39:d8: ec:c0:8c:d2:b9:78:fa:d4:17:3f:e7:be:fe:b3:fd: 6d:87:2f:91:b2:c8:98:cc:02:cf:b0:83:5b:f1:6e: 4a:a7:07:65:fe:08:59:cf:55:ca:52:44:24:7f:eb: 52:62:f8:62:dc:74:2f:93:a4:ed:88:36:69:63:4a: 3c:4b:4d:0d:a2:f3:dd:05:92:8e:76:29:57:38:29: a9:33:11:aa:af:57:7d:e4:cb:f5:f7:da:42:ca:1b: c4:7b:73:50:aa:f4:49:0c:aa:d6:1f:14:19:59:d7: 6f:ca:49:ec:70:4e:2c:3a:7d:39:dd:6c:7a:8b:59: e1:50:2f:16:17:ab:4c:fe:9c:90:cf:a7:c4:e9:a8: 39:7a:3b:8a:19:d5:f0:c0:5b:60:2c:33:b3:d2:37: 96:11:4b:b1:73:46:35:f0:58:63:35:ca:f2:dc:65: 68:5b:82:48:86:b4:32:26:db:37:4b:9c:4a:d8:96: a9:5a:4e:e0:c3:cd:1a:d6:bf:74:a3:66:ff:dc:c6: d7:25:30:1b:11:da:7d:f6:a7:5e:d7:e0:1f:2e:d4: c8:a2:f9:a2:a2:bc:12:bd:8b:c1:0c:ea:98:26:78: a5:4b:7c:b3:80:ec:72:d8:82:93:6c:e0:3f:ee:bf: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:57:33:F1:E9:CD:4A:28:89:E9:6D:E7:EB:1F:11:EE:21:B7:CD X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/IIhXM_HpzUooielt5-sfEe4ht80.roa sbgp-ipAddrBlock: critical IPv4: 202.168.216.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:fe:ae:34:15:40:b6:63:41:44:c7:61:0c:90:50:37:89:87: 52:c0:bf:74:fd:49:e3:1e:c5:16:ad:89:48:4e:41:cf:23:b6: 7d:01:80:9a:ae:d8:bf:a1:10:35:36:4c:73:03:95:c1:47:10: 90:d2:4a:7d:e6:bc:d7:dd:53:cc:42:03:87:fd:b8:4d:27:6b: 09:cb:62:e5:4d:6c:b3:86:cc:91:46:bd:16:53:a4:67:36:83: 03:03:a0:ab:9e:3c:9d:70:a2:ed:a7:5b:8f:f3:4f:9b:fe:b3: 8f:83:0c:59:5b:ec:ba:8b:45:a9:6c:ae:33:65:1d:9d:eb:30: fb:46:ba:fe:31:0c:cc:f6:a6:5d:9c:0e:fb:7a:48:86:e2:29: 9e:46:95:31:77:a0:99:ff:56:e0:0e:02:f6:b0:dd:62:79:21: 6c:84:4c:bb:6b:81:69:45:09:6e:10:4a:a2:5f:c1:78:27:e9: 30:01:29:bb:bb:97:ea:c3:71:53:1f:5b:67:c7:3f:b9:3c:b2: 64:b9:cd:80:86:03:76:17:f5:57:e2:7f:73:ce:38:e5:3d:b8: bc:57:86:96:98:c3:a3:3b:ea:0a:31:8a:ae:ff:5e:58:53:1d: 6c:99:0c:88:c4:0e:50:fb:52:f3:a3:af:b2:9c:b3:aa:7f:3e: 22:fb:b1:4a -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDMzMTA4 MzczNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjA4ODU3MzNGMUU5Q0Q0 QTI4ODlFOTZERTdFQjFGMTFFRTIxQjdDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBdGhJRk6RrEoyIfjnY7MCM0rl4+tQXP+e+/rP9bYcvkbLImMwC z7CDW/FuSqcHZf4IWc9VylJEJH/rUmL4Ytx0L5Ok7Yg2aWNKPEtNDaLz3QWSjnYp VzgpqTMRqq9XfeTL9ffaQsobxHtzUKr0SQyq1h8UGVnXb8pJ7HBOLDp9Od1seotZ 4VAvFherTP6ckM+nxOmoOXo7ihnV8MBbYCwzs9I3lhFLsXNGNfBYYzXK8txlaFuC SIa0MibbN0ucStiWqVpO4MPNGta/dKNm/9zG1yUwGxHaffanXtfgHy7UyKL5oqK8 Er2LwQzqmCZ4pUt8s4DsctiCk2zgP+6/1fECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQgiFcz8enNSiiJ6W3n6x8R7iG3zTAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwODIyL0lJaFhNX0hwelVvb2llbHQ1LXNmRWU0aHQ4MC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKqNgwDQYJKoZIhvcNAQELBQAD ggEBABv+rjQVQLZjQUTHYQyQUDeJh1LAv3T9SeMexRatiUhOQc8jtn0BgJqu2L+h EDU2THMDlcFHEJDSSn3mvNfdU8xCA4f9uE0nawnLYuVNbLOGzJFGvRZTpGc2gwMD oKuePJ1wou2nW4/zT5v+s4+DDFlb7LqLRalsrjNlHZ3rMPtGuv4xDMz2pl2cDvt6 SIbiKZ5GlTF3oJn/VuAOAvaw3WJ5IWyETLtrgWlFCW4QSqJfwXgn6TABKbu7l+rD cVMfW2fHP7k8smS5zYCGA3YX9Vfif3POOOU9uLxXhpaYw6M76goxiq7/XlhTHWyZ DIjEDlD7UvOjr7Kcs6p/PiL7sUo= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:10 2026 by rpki-client