$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Ikzb0YemuE8ud0gABRvifLGMbdM.roa File: Ikzb0YemuE8ud0gABRvifLGMbdM.roa (raw, json) Hash identifier: 3JywvX8Zg4Sj4qLPS//aEcRH3hySyyJLLu1mQx0aYXg= Subject key identifier: 22:4C:DB:D1:87:A6:B8:4F:2E:77:48:00:05:1B:E2:7C:B1:8C:6D:D3 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 84 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Ikzb0YemuE8ud0gABRvifLGMbdM.roa Signing time: Tue 31 Mar 2026 08:37:37 +0000 ROA not before: Tue 31 Mar 2026 08:37:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 116.58.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=224CDBD187A6B84F2E774800051BE27CB18C6DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:6d:82:31:ee:c4:26:e0:c6:19:51:e0:a3: e1:8c:7d:c1:c6:e4:b0:61:23:66:a2:36:82:b3:b0: 36:a4:1f:2d:3d:67:27:5f:3a:1d:eb:86:3e:15:05: f8:2c:06:6e:99:48:42:8d:d9:c4:c7:52:9d:ee:61: c0:dc:a2:12:4c:5d:f9:f3:10:98:4d:a4:86:09:71: 63:12:77:42:3d:af:e4:37:16:d9:d5:71:e5:16:21: c8:4d:d8:fd:84:2c:cc:83:f6:75:89:10:45:36:75: 02:24:14:91:a8:f3:6a:9b:64:24:cb:24:7b:a0:a1: 34:59:76:76:59:29:70:de:4f:e3:8b:13:bf:9c:8f: 17:41:82:1b:23:7e:4c:ed:85:06:98:23:26:17:f3: 84:86:e9:6c:61:86:61:07:9a:c2:9e:40:f2:ca:5e: f7:8b:0b:d2:7b:84:2e:57:42:a0:be:19:bc:ac:9b: e4:a4:ed:db:8f:7d:df:68:3e:c1:01:8b:d3:75:a8: a5:62:da:35:34:9f:e1:2a:a2:e9:e8:ca:22:ad:ae: 21:aa:9d:34:15:e1:69:3f:51:24:48:c3:d3:ea:1e: 6a:82:27:5e:47:38:96:d2:b5:3e:2c:6f:85:21:0d: 53:4f:1e:64:39:2f:a0:3b:cf:f1:c3:4c:4e:37:8e: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:DB:D1:87:A6:B8:4F:2E:77:48:00:05:1B:E2:7C:B1:8C:6D:D3 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Ikzb0YemuE8ud0gABRvifLGMbdM.roa sbgp-ipAddrBlock: critical IPv4: 116.58.144.0/20 Signature Algorithm: sha256WithRSAEncryption 84:fc:b8:6a:f9:2b:5a:56:39:40:d4:b8:dd:ed:f5:c3:24:74: 00:8a:d4:09:c0:cd:15:47:bc:c5:df:61:8d:62:e2:72:47:c7: 2a:09:ad:65:d5:a6:de:0f:88:2b:bf:b2:b8:8a:aa:26:d3:4e: b8:ab:3b:bd:f8:24:12:13:82:e9:61:b3:3a:60:8b:54:e1:e0: d1:51:6d:a5:9e:51:e8:e1:bd:28:f9:f1:8c:3d:6e:0f:9a:a2: 29:14:2d:5f:d7:e1:60:8f:14:1d:1b:0f:f1:bf:64:8a:60:2c: bb:77:6d:21:88:4d:6d:65:98:78:4c:0b:97:e3:17:a6:e7:b4: 70:a3:9d:e1:81:ba:dc:f5:78:e6:f2:41:9a:c5:73:16:84:e6: b6:9c:a5:97:35:73:d1:84:8c:d7:93:d3:64:aa:d7:ed:9a:b7: 3a:38:a0:b3:0e:8c:f8:5f:07:d6:54:05:17:20:81:5b:99:6d: f3:2c:99:cf:c0:0c:4b:c7:1b:13:18:49:51:57:46:50:f3:67: 8b:73:1f:4d:d0:e4:f0:c5:c7:0e:25:ae:b0:43:08:33:08:6c: ac:41:42:f9:27:61:6d:ec:63:bb:53:92:a9:f7:96:ad:9b:25: 5f:f7:f9:ff:b3:68:0c:4f:f6:d1:2a:3b:78:88:f2:34:4e:26: 7b:c6:94:a4 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyNENEQkQxODdBNkI4 NEYyRTc3NDgwMDA1MUJFMjdDQjE4QzZERDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN1G2CMe7EJuDGGVHgo+GMfcHG5LBhI2aiNoKzsDakHy09Zydf Oh3rhj4VBfgsBm6ZSEKN2cTHUp3uYcDcohJMXfnzEJhNpIYJcWMSd0I9r+Q3FtnV ceUWIchN2P2ELMyD9nWJEEU2dQIkFJGo82qbZCTLJHugoTRZdnZZKXDeT+OLE7+c jxdBghsjfkzthQaYIyYX84SG6WxhhmEHmsKeQPLKXveLC9J7hC5XQqC+Gbysm+Sk 7duPfd9oPsEBi9N1qKVi2jU0n+EqounoyiKtriGqnTQV4Wk/USRIw9PqHmqCJ15H OJbStT4sb4UhDVNPHmQ5L6A7z/HDTE43jnHLAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUIkzb0YemuE8ud0gABRvifLGMbdMwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9Ja3piMFllbXVFOHVkMGdBQlJ2aWZMR01iZE0ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEdDqQMA0GCSqGSIb3DQEBCwUA A4IBAQCE/Lhq+StaVjlA1Ljd7fXDJHQAitQJwM0VR7zF32GNYuJyR8cqCa1l1abe D4grv7K4iqom0064qzu9+CQSE4LpYbM6YItU4eDRUW2lnlHo4b0o+fGMPW4PmqIp FC1f1+FgjxQdGw/xv2SKYCy7d20hiE1tZZh4TAuX4xem57Rwo53hgbrc9Xjm8kGa xXMWhOa2nKWXNXPRhIzXk9Nkqtftmrc6OKCzDoz4XwfWVAUXIIFbmW3zLJnPwAxL xxsTGElRV0ZQ82eLcx9N0OTwxccOJa6wQwgzCGysQUL5J2Ft7GO7U5Kp95atmyVf 9/n/s2gMT/bRKjt4iPI0TiZ7xpSk -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:08 2026 by rpki-client