$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/scys3Zmodv69qgqawWERQrgFGN8.roa File: scys3Zmodv69qgqawWERQrgFGN8.roa (raw, json) Hash identifier: T/bL/o73XE/jRCA6SqrrPY0cMTm1ZBwdovXpSkzBlYI= Subject key identifier: B1:CC:AC:DD:99:A8:76:FE:BD:AA:0A:9A:C1:61:11:42:B8:05:18:DF Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 8B Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/scys3Zmodv69qgqawWERQrgFGN8.roa Signing time: Tue 31 Mar 2026 08:37:40 +0000 ROA not before: Tue 31 Mar 2026 08:37:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 202.45.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B1CCACDD99A876FEBDAA0A9AC1611142B80518DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:9d:2b:c7:16:d7:57:12:5c:4b:9a:97:d1: 48:bc:e4:7d:73:71:ff:2a:78:f3:d4:23:da:74:57: c3:85:24:9f:da:55:c0:3b:c5:bf:c3:b8:bb:07:6f: ca:e1:23:fe:db:6d:eb:95:a2:3c:9a:5d:12:0f:b3: 18:6c:ae:6f:cf:9f:00:01:9b:d6:ee:52:01:b0:09: 3e:11:9f:09:8a:b6:2e:36:9d:5c:b1:bf:f3:d0:0b: 50:20:76:ad:b6:07:3e:4a:38:3f:f0:bd:4f:d3:fd: 0d:09:ab:51:cb:b8:3e:da:c2:d0:cf:3c:33:ce:f2: fd:b6:92:74:fc:e6:a6:9d:c3:cb:60:14:12:ff:8d: 11:3a:54:5b:93:d9:7b:db:f0:b0:cc:b2:4e:fd:7a: 51:ce:77:eb:76:cc:af:43:79:57:1c:64:15:69:27: c1:d7:6e:6a:27:29:59:a4:ae:6b:3d:fa:ad:29:fc: 61:a1:9f:dc:b1:f5:2d:4c:26:22:ae:24:93:4c:69: c4:6f:58:8a:47:0e:07:d3:af:43:bb:3f:0c:fa:bd: 1d:89:53:4d:ce:70:fb:06:d4:46:29:62:d3:a2:5e: 90:6f:7e:00:c1:25:4d:cb:0c:e6:7c:a1:76:00:f7: 80:eb:6f:13:a7:58:8f:01:db:af:55:58:bd:57:d4: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:AC:DD:99:A8:76:FE:BD:AA:0A:9A:C1:61:11:42:B8:05:18:DF X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/scys3Zmodv69qgqawWERQrgFGN8.roa sbgp-ipAddrBlock: critical IPv4: 202.45.168.0/21 Signature Algorithm: sha256WithRSAEncryption ca:a8:cc:4e:33:4e:3a:3a:fe:03:fb:04:b4:a3:99:47:8b:aa: 35:a2:7a:33:52:79:b4:6e:f9:27:be:68:d7:98:93:b5:dc:d6: e7:e6:fc:c5:c4:0c:b0:60:96:42:ce:5a:66:09:77:00:02:c7: 69:db:f6:36:d8:37:db:6b:01:08:17:9f:35:11:81:d5:2a:8b: 7f:a1:c6:91:ff:43:70:8c:16:76:52:57:6a:25:7d:d0:18:18: db:7f:c6:22:6e:d2:6b:95:58:7a:2f:ce:24:e8:45:44:7e:1a: cc:6e:61:99:a0:bc:ad:95:e6:f2:28:05:b5:79:19:d4:07:32: 20:a6:96:5b:52:1a:5c:86:50:0b:e1:83:28:bf:94:c9:55:65: 40:80:bd:90:58:d2:48:23:87:1b:49:6b:6b:c1:9b:ab:2c:84: a9:bf:55:4a:01:a7:76:72:4f:c8:b8:e7:e1:d8:96:36:44:5d: 02:5f:77:0c:62:5e:f0:da:81:dd:fc:0c:d7:47:27:29:bf:e1: 85:5d:d2:88:e2:8f:9f:ef:d3:11:cc:ff:0c:b1:85:2d:55:51: 08:1a:dd:7e:99:fb:aa:49:e0:42:07:47:0a:7d:6d:05:19:78: 85:4c:c1:58:7d:2c:6f:2c:d3:0b:81:4b:2c:c7:64:68:96:1b: 23:be:07:07 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxQ0NBQ0REOTlBODc2 RkVCREFBMEE5QUMxNjExMTQyQjgwNTE4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdJZ0rxxbXVxJcS5qX0Ui85H1zcf8qePPUI9p0V8OFJJ/aVcA7 xb/DuLsHb8rhI/7bbeuVojyaXRIPsxhsrm/PnwABm9buUgGwCT4RnwmKti42nVyx v/PQC1Agdq22Bz5KOD/wvU/T/Q0Jq1HLuD7awtDPPDPO8v22knT85qadw8tgFBL/ jRE6VFuT2Xvb8LDMsk79elHOd+t2zK9DeVccZBVpJ8HXbmonKVmkrms9+q0p/GGh n9yx9S1MJiKuJJNMacRvWIpHDgfTr0O7Pwz6vR2JU03OcPsG1EYpYtOiXpBvfgDB JU3LDOZ8oXYA94DrbxOnWI8B269VWL1X1Ol9AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUscys3Zmodv69qgqawWERQrgFGN8wHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9zY3lzM1ptb2R2NjlxZ3Fhd1dFUlFyZ0ZHTjgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyi2oMA0GCSqGSIb3DQEBCwUA A4IBAQDKqMxOM046Ov4D+wS0o5lHi6o1onozUnm0bvknvmjXmJO13Nbn5vzFxAyw YJZCzlpmCXcAAsdp2/Y22DfbawEIF581EYHVKot/ocaR/0NwjBZ2UldqJX3QGBjb f8YibtJrlVh6L84k6EVEfhrMbmGZoLytlebyKAW1eRnUBzIgppZbUhpchlAL4YMo v5TJVWVAgL2QWNJII4cbSWtrwZurLISpv1VKAad2ck/IuOfh2JY2RF0CX3cMYl7w 2oHd/AzXRycpv+GFXdKI4o+f79MRzP8MsYUtVVEIGt1+mfuqSeBCB0cKfW0FGXiF TMFYfSxvLNMLgUssx2RolhsjvgcH -----END CERTIFICATE-----Generated at Tue Apr 7 21:07:04 2026 by rpki-client