$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/ZWMi10qzkQEsxwu3fHGC_4QLm5s.roa File: ZWMi10qzkQEsxwu3fHGC_4QLm5s.roa (raw, json) Hash identifier: OGZwX4IGzWmnxcnIceyc70WVR0NpizrBIKZjkIjc7CI= Subject key identifier: 65:63:22:D7:4A:B3:91:01:2C:C7:0B:B7:7C:71:82:FF:84:0B:9B:9B Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Certificate serial: 32 Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/ZWMi10qzkQEsxwu3fHGC_4QLm5s.roa Signing time: Tue 31 Mar 2026 08:38:10 +0000 ROA not before: Tue 31 Mar 2026 08:38:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131928 IP address blocks: 219.100.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Validity Not Before: Mar 31 08:38:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=656322D74AB391012CC70BB77C7182FF840B9B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:3f:aa:6d:0a:35:e3:66:29:5d:d8:a6:80: 44:cd:78:13:db:6c:f4:59:b5:f2:c6:50:2a:7a:44: d9:4e:25:3f:55:f2:eb:38:a3:95:6e:a2:43:26:f4: 31:58:cd:b7:7c:ee:29:b8:66:3a:9f:fa:00:df:1c: 0e:d5:46:44:1b:d7:f1:04:fa:8f:28:5e:fb:e0:51: a6:42:f6:97:5b:9d:fc:1e:79:bb:35:e6:5c:ee:a8: d4:38:5f:ad:92:ea:0b:c9:e8:0e:84:22:12:f0:7c: ab:c9:a7:43:9b:f8:03:e3:10:3b:d3:be:4b:88:c8: 14:8a:51:0b:c5:8e:eb:72:29:0e:d4:d5:a0:60:44: 7a:58:c0:4f:3b:dc:f0:24:4d:08:2c:01:98:1a:92: e6:14:d2:54:6b:af:b7:3d:16:be:89:42:7d:27:70: c2:4d:80:8f:77:7b:e0:31:4e:5d:3a:6f:13:ae:fa: 21:92:c2:2f:47:b8:88:a7:46:64:07:40:7d:08:64: 40:52:34:d8:f5:bd:23:a9:da:4b:b7:5f:d7:97:2a: 55:89:b8:80:3f:03:65:07:76:6e:86:72:ee:5d:c2: 99:9c:89:f7:ff:73:9a:94:ed:e7:86:49:13:91:7e: da:b9:f3:6f:8c:49:8a:62:35:4f:bf:45:1b:2a:75: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:63:22:D7:4A:B3:91:01:2C:C7:0B:B7:7C:71:82:FF:84:0B:9B:9B X509v3 Authority Key Identifier: keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/ZWMi10qzkQEsxwu3fHGC_4QLm5s.roa sbgp-ipAddrBlock: critical IPv4: 219.100.124.0/22 Signature Algorithm: sha256WithRSAEncryption 06:96:0e:02:a9:2e:69:16:61:05:c4:f3:e2:f4:2c:f2:56:c5: 09:cd:da:01:66:a5:f2:0b:5b:34:0c:c4:e0:0d:5c:eb:9f:09: 68:fb:e2:47:0a:6a:43:64:14:e2:51:37:a5:c9:34:ab:48:63: e9:7c:8d:e0:d7:cd:e3:f1:05:74:cf:37:d4:21:d1:30:90:33: 5e:4b:3d:5b:76:03:e5:d1:61:9a:38:27:83:19:5f:db:83:6e: 0e:61:9e:75:d2:be:ad:95:20:56:79:aa:97:99:d2:25:b9:1b: f9:b0:92:50:3b:a5:1f:88:8d:7c:48:59:9d:86:14:bf:71:79: 5b:61:54:d9:9b:6f:79:38:78:89:e6:57:80:4d:03:d7:87:79: d6:05:08:15:e3:50:11:a5:78:ba:da:95:81:a6:9e:dd:30:7b: 00:09:c3:22:e2:44:ba:22:00:db:9b:79:da:f2:a4:69:05:10: 85:96:52:87:3a:69:3c:20:19:01:cd:9b:9c:26:ad:7f:74:d3: 94:1c:bc:1d:29:da:04:57:a4:3b:87:c6:82:b4:ab:cb:b3:71: da:0a:c6:ca:5c:d5:3d:3a:6e:5e:3f:8f:75:54:77:27:32:05: cf:ac:86:3d:4a:62:22:19:15:01:17:cc:fe:42:55:eb:f6:f9: b0:77:b1:d9 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI2MDMzMTA4 MzgxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjU2MzIyRDc0QUIzOTEw MTJDQzcwQkI3N0M3MTgyRkY4NDBCOUI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJz9P6ptCjXjZild2KaARM14E9ts9Fm18sZQKnpE2U4lP1Xy6zij lW6iQyb0MVjNt3zuKbhmOp/6AN8cDtVGRBvX8QT6jyhe++BRpkL2l1ud/B55uzXm XO6o1DhfrZLqC8noDoQiEvB8q8mnQ5v4A+MQO9O+S4jIFIpRC8WO63IpDtTVoGBE eljATzvc8CRNCCwBmBqS5hTSVGuvtz0WvolCfSdwwk2Aj3d74DFOXTpvE676IZLC L0e4iKdGZAdAfQhkQFI02PW9I6naS7df15cqVYm4gD8DZQd2boZy7l3CmZyJ9/9z mpTt54ZJE5F+2rnzb4xJimI1T79FGyp1FdMCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRlYyLXSrORASzHC7d8cYL/hAubmzAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is /PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4 ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDYwL1pXTWkxMHF6a1FFc3h3dTNmSEdDXzRRTG01cy5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALbZHwwDQYJKoZIhvcNAQELBQAD ggEBAAaWDgKpLmkWYQXE8+L0LPJWxQnN2gFmpfILWzQMxOANXOufCWj74kcKakNk FOJRN6XJNKtIY+l8jeDXzePxBXTPN9Qh0TCQM15LPVt2A+XRYZo4J4MZX9uDbg5h nnXSvq2VIFZ5qpeZ0iW5G/mwklA7pR+IjXxIWZ2GFL9xeVthVNmbb3k4eInmV4BN A9eHedYFCBXjUBGleLralYGmnt0wewAJwyLiRLoiANubedrypGkFEIWWUoc6aTwg GQHNm5wmrX9005QcvB0p2gRXpDuHxoK0q8uzcdoKxspc1T06bl4/j3VUdycyBc+s hj1KYiIZFQEXzP5CVev2+bB3sdk= -----END CERTIFICATE-----Generated at Tue Apr 7 20:04:28 2026 by rpki-client