$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/jsxKSAkXEBjWHU5JGgMDMIWUjUQ.roa File: jsxKSAkXEBjWHU5JGgMDMIWUjUQ.roa (raw, json) Hash identifier: ZovLbnpUK/aBBhBSNT1bTAb5/8M6u9HCCsv8bZgx/0A= Subject key identifier: 8E:CC:4A:48:09:17:10:18:D6:1D:4E:49:1A:03:03:30:85:94:8D:44 Certificate issuer: /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Certificate serial: 6D Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/jsxKSAkXEBjWHU5JGgMDMIWUjUQ.roa Signing time: Tue 31 Mar 2026 07:32:57 +0000 ROA not before: Tue 31 Mar 2026 07:32:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63774 IP address blocks: 202.226.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Validity Not Before: Mar 31 07:32:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8ECC4A4809171018D61D4E491A03033085948D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:20:00:2b:65:9d:a9:cb:91:5a:17:d1:8d: 8f:d1:80:81:76:eb:03:3a:f6:2b:aa:c9:16:12:8e: 2f:7a:8f:03:2c:4f:73:6c:52:bd:60:87:ee:03:dd: 66:68:81:ca:45:9e:c2:df:2e:2e:92:4c:85:70:98: c0:a6:a3:a0:60:a7:95:df:ff:31:3b:16:07:3a:16: 81:51:53:3b:81:97:45:3b:d4:41:7f:ab:81:78:1f: 37:92:bd:30:de:61:ce:28:e4:90:6c:c6:5d:db:b0: fe:d0:ce:46:25:f0:f3:fa:25:d7:59:d4:3c:76:b6: 31:68:66:71:eb:55:73:f2:11:08:d2:43:c9:fa:78: 0b:cf:75:fe:83:df:6b:e5:01:1f:3f:07:dc:1d:be: 5d:0b:18:1c:1c:ce:05:b8:fb:cc:7d:4c:3c:e2:a8: 82:99:79:7e:9c:d7:b7:1a:32:68:f3:66:da:e8:72: 6f:ce:c4:a0:02:da:45:9a:3f:31:c3:79:9b:a4:c3: 7f:97:9c:bc:29:24:b4:f2:32:96:d9:21:05:ed:2d: 9b:30:0a:8a:cf:3a:4c:fe:1b:89:de:5a:8a:0f:f7: 91:4a:63:1c:6a:4b:f3:a1:ae:69:5f:d3:2d:d7:40: bc:89:3c:f2:f5:1b:04:dc:ab:df:1b:77:06:52:9b: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CC:4A:48:09:17:10:18:D6:1D:4E:49:1A:03:03:30:85:94:8D:44 X509v3 Authority Key Identifier: keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/jsxKSAkXEBjWHU5JGgMDMIWUjUQ.roa sbgp-ipAddrBlock: critical IPv4: 202.226.0.0/22 Signature Algorithm: sha256WithRSAEncryption 70:9b:75:d7:5c:55:83:ee:27:b1:99:20:32:31:13:82:f0:b4: 96:14:05:01:f1:a4:3d:02:3c:02:63:6b:c1:1c:33:26:3a:2b: 13:1f:2c:2c:d8:80:71:d5:08:13:fd:ca:ae:1e:79:c0:d3:3d: fa:0e:52:46:a7:8e:5e:96:7c:de:73:fd:87:a5:9d:bb:aa:de: 07:8e:da:04:5a:81:f5:d2:5e:86:ce:ba:1c:94:41:20:44:c7: 37:41:56:e1:41:bf:ec:5a:c0:77:27:30:84:b1:22:f6:44:7a: 7d:98:f4:91:98:e6:c4:a6:d8:ba:69:c8:08:f6:72:b8:67:a6: 69:18:a0:d4:27:9d:96:26:7b:ba:44:5a:22:41:55:85:b1:d8: aa:53:e6:8e:52:04:5c:b0:ec:ee:37:4a:ed:67:b9:b5:86:8b: 43:cd:06:86:76:d4:3d:00:10:d2:df:31:8c:b0:a5:d9:54:e1: 40:f0:10:9e:11:f8:6d:04:c8:36:b8:b0:4e:fe:2a:68:7f:91: f2:e7:61:2c:38:e5:70:5c:eb:c6:c5:1a:80:11:54:86:65:34: a5:54:b5:ae:9a:c2:eb:f8:2d:c5:30:98:8c:71:98:8a:82:ea: 20:d1:67:1a:dd:ce:cc:5e:d2:6c:d3:b0:ad:24:d3:cc:ef:95: d2:ba:0b:e2 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEQx ODdEQjFEOUY0RDM2QjRERTQ0OEJFNDM3NjcxMjlBNzlENzY0MB4XDTI2MDMzMTA3 MzI1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEVDQzRBNDgwOTE3MTAx OEQ2MUQ0RTQ5MUEwMzAzMzA4NTk0OEQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBrIAArZZ2py5FaF9GNj9GAgXbrAzr2K6rJFhKOL3qPAyxPc2xS vWCH7gPdZmiBykWewt8uLpJMhXCYwKajoGCnld//MTsWBzoWgVFTO4GXRTvUQX+r gXgfN5K9MN5hzijkkGzGXduw/tDORiXw8/ol11nUPHa2MWhmcetVc/IRCNJDyfp4 C891/oPfa+UBHz8H3B2+XQsYHBzOBbj7zH1MPOKogpl5fpzXtxoyaPNm2uhyb87E oALaRZo/McN5m6TDf5ecvCkktPIyltkhBe0tmzAKis86TP4bid5aig/3kUpjHGpL 86GuaV/TLddAvIk88vUbBNyr3xt3BlKbxXkCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSOzEpICRcQGNYdTkkaAwMwhZSNRDAfBgNVHSMEGDAWgBQQ0YfbHZ9NNrTeRIvk N2cSmnnXZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjQvRU5HSDJ4MmZUVGEwM2tTTDVEZG5FcHA1MTJRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRU5HSDJ4MmZUVGEwM2tTTDVEZG5F cHA1MTJRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDY0L2pzeEtTQWtYRUJqV0hVNUpHZ01ETUlXVWpVUS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALK4gAwDQYJKoZIhvcNAQELBQAD ggEBAHCbdddcVYPuJ7GZIDIxE4LwtJYUBQHxpD0CPAJja8EcMyY6KxMfLCzYgHHV CBP9yq4eecDTPfoOUkanjl6WfN5z/Yelnbuq3geO2gRagfXSXobOuhyUQSBExzdB VuFBv+xawHcnMISxIvZEen2Y9JGY5sSm2LppyAj2crhnpmkYoNQnnZYme7pEWiJB VYWx2KpT5o5SBFyw7O43Su1nubWGi0PNBoZ21D0AENLfMYywpdlU4UDwEJ4R+G0E yDa4sE7+Kmh/kfLnYSw45XBc68bFGoARVIZlNKVUta6awuv4LcUwmIxxmIqC6iDR Zxrdzsxe0mzTsK0k08zvldK6C+I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:34:02 2026 by rpki-client