$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q_Z8Ud3uareFLRGRXoWqq9bfO5A.roa File: Q_Z8Ud3uareFLRGRXoWqq9bfO5A.roa (raw, json) Hash identifier: RNtX+ZPaGv0MQj44jr21/tJUErCJEPOaWzTusMpq6eg= Subject key identifier: 43:F6:7C:51:DD:EE:6A:B7:85:2D:11:91:5E:85:AA:AB:D6:DF:3B:90 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 5F Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q_Z8Ud3uareFLRGRXoWqq9bfO5A.roa Signing time: Tue 31 Mar 2026 08:31:08 +0000 ROA not before: Tue 31 Mar 2026 08:31:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131923 IP address blocks: 133.88.94.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Mar 31 08:31:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=43F67C51DDEE6AB7852D11915E85AAABD6DF3B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:73:bc:0b:7c:03:19:d6:19:54:a2:60:c4: f4:e9:fb:16:20:c7:6c:dd:55:fc:f9:10:fa:d2:f1: b5:9a:19:d2:0b:75:f7:41:26:c8:73:1e:3b:00:0a: c8:cc:2a:dd:62:35:da:ec:1f:0e:d3:49:39:15:f5: 89:9b:f0:9b:1b:c7:5d:00:be:d4:36:15:b1:61:70: 31:43:60:c0:8c:52:76:c7:b1:c1:66:2d:61:b5:2f: ac:bb:ac:05:33:79:e6:d7:75:41:8f:56:2a:6c:57: 6c:ba:0e:df:55:35:ec:19:92:c9:e3:9b:2e:6a:06: 50:b7:59:e4:87:da:e9:26:9c:de:55:9f:71:03:81: 46:d9:e0:f7:62:ed:a2:1c:04:9b:32:5b:55:5d:62: 48:8b:ed:a9:29:bc:13:3e:d1:65:b6:05:0d:e6:1f: 24:9e:3e:90:84:af:be:fc:ac:c8:5d:8e:9d:dd:c3: d9:66:ec:da:cb:7f:42:d0:ee:3b:30:db:2f:61:2f: a7:15:b7:56:a2:1e:84:b1:93:87:8c:56:9f:62:24: 49:a9:d1:0e:fc:68:79:fe:22:e2:90:d4:1d:b8:59: 2a:8e:37:f2:60:cb:0d:33:7b:a3:69:1e:ce:f9:a9: b3:48:dc:aa:a9:e0:be:14:40:8b:02:d8:06:f7:69: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:7C:51:DD:EE:6A:B7:85:2D:11:91:5E:85:AA:AB:D6:DF:3B:90 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Q_Z8Ud3uareFLRGRXoWqq9bfO5A.roa sbgp-ipAddrBlock: critical IPv4: 133.88.94.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:34:0f:98:2b:b0:f7:38:0f:10:1c:b7:0c:cd:13:eb:4f:9d: 0b:1d:48:2d:5b:de:23:93:29:ed:a3:5b:e5:c3:2b:a3:e4:79: e0:24:c4:35:0b:d4:d8:47:ca:25:0b:81:88:37:d4:3b:94:8c: 5e:c9:47:13:cb:d0:8f:a0:14:b0:3b:e7:08:15:7e:ef:55:76: a6:5b:2b:26:8a:8f:2f:ad:a2:50:77:26:ba:7f:82:27:80:7b: f1:6b:81:07:2a:5f:8e:b0:c7:3f:f6:6f:2e:0b:f6:b6:25:4b: 37:d2:35:b2:ba:ee:e0:dc:2b:67:c0:35:9d:89:08:af:ca:0c: 08:00:4b:0c:6f:31:4c:64:03:20:14:f1:38:f8:36:d3:49:75: dd:08:0b:9d:86:aa:45:4d:49:66:5f:13:71:57:47:59:86:ab: 46:08:e6:13:6b:ac:3a:71:cc:5b:98:f0:33:61:d6:4d:ca:4b: 0c:16:02:f9:98:63:63:8a:ea:14:91:ed:71:5d:c7:71:bf:31: f4:86:62:48:09:6c:fe:33:db:c9:d9:07:1e:75:f5:41:9b:ad: 2d:9d:c3:c4:b1:a3:42:86:00:d1:7a:af:38:8f:56:61:4e:f4: 22:71:db:31:c7:07:81:dc:43:8a:f5:6c:53:8f:9a:ec:0d:4c: ea:57:09:10 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI2MDMzMTA4 MzEwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDNGNjdDNTFEREVFNkFC Nzg1MkQxMTkxNUU4NUFBQUJENkRGM0I5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQCc7wLfAMZ1hlUomDE9On7FiDHbN1V/PkQ+tLxtZoZ0gt190Em yHMeOwAKyMwq3WI12uwfDtNJORX1iZvwmxvHXQC+1DYVsWFwMUNgwIxSdsexwWYt YbUvrLusBTN55td1QY9WKmxXbLoO31U17BmSyeObLmoGULdZ5Ifa6Sac3lWfcQOB Rtng92LtohwEmzJbVV1iSIvtqSm8Ez7RZbYFDeYfJJ4+kISvvvysyF2Ond3D2Wbs 2st/QtDuOzDbL2EvpxW3VqIehLGTh4xWn2IkSanRDvxoef4i4pDUHbhZKo438mDL DTN7o2kezvmps0jcqqngvhRAiwLYBvdpozkCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRD9nxR3e5qt4UtEZFehaqr1t87kDAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDM0L1FfWjhVZDN1YXJlRkxSR1JYb1dxcTliZk81QS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFWF4wDQYJKoZIhvcNAQELBQAD ggEBAJw0D5grsPc4DxActwzNE+tPnQsdSC1b3iOTKe2jW+XDK6PkeeAkxDUL1NhH yiULgYg31DuUjF7JRxPL0I+gFLA75wgVfu9VdqZbKyaKjy+tolB3Jrp/gieAe/Fr gQcqX46wxz/2by4L9rYlSzfSNbK67uDcK2fANZ2JCK/KDAgASwxvMUxkAyAU8Tj4 NtNJdd0IC52GqkVNSWZfE3FXR1mGq0YI5hNrrDpxzFuY8DNh1k3KSwwWAvmYY2OK 6hSR7XFdx3G/MfSGYkgJbP4z28nZBx519UGbrS2dw8Sxo0KGANF6rziPVmFO9CJx 2zHHB4HcQ4r1bFOPmuwNTOpXCRA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:40 2026 by rpki-client