$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Td5KNsKwwlJqsDAfQ4xZv2TEl2Y.roa File: Td5KNsKwwlJqsDAfQ4xZv2TEl2Y.roa (raw, json) Hash identifier: dDtfbzci2ND/oSI96SQKd+GssUZSQZsZZVFcjz5tZzw= Subject key identifier: 4D:DE:4A:36:C2:B0:C2:52:6A:B0:30:1F:43:8C:59:BF:64:C4:97:66 Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C Certificate serial: 63 Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Td5KNsKwwlJqsDAfQ4xZv2TEl2Y.roa Signing time: Tue 31 Mar 2026 07:38:40 +0000 ROA not before: Tue 31 Mar 2026 07:38:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131949 IP address blocks: 202.226.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C Validity Not Before: Mar 31 07:38:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4DDE4A36C2B0C2526AB0301F438C59BF64C49766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:89:a4:e3:c5:53:c7:01:44:e3:b4:a2:28:46: 88:cd:be:f4:78:1b:fc:24:2c:34:4d:6e:fa:82:88: e6:02:8d:93:a1:e2:44:7d:db:90:76:87:0f:07:17: 89:26:77:04:e3:3e:c8:65:9a:89:b5:4f:4b:71:ea: b8:80:75:03:d1:45:a7:79:0c:37:15:f7:6f:6c:ae: 6f:96:d4:e2:79:68:6f:0e:85:aa:3c:60:19:f6:1c: be:51:b8:d2:03:8c:d9:d2:63:f9:c2:81:c6:81:59: 57:81:b4:e8:a4:01:c5:0c:d7:31:99:4f:4e:78:d6: ed:fc:a5:93:c9:63:8d:d2:1b:27:50:65:4e:51:64: 9a:0a:64:a3:a6:ba:42:71:51:6b:71:ae:17:73:94: fb:5a:40:78:1b:f3:23:ae:8c:85:ae:8b:aa:ce:fd: 26:f8:4e:08:0e:a2:2c:a8:f4:af:6d:1e:f0:68:39: 27:f9:ae:78:4a:18:4d:3a:b7:d7:3a:cd:3a:4d:4e: 0e:34:75:1e:6c:3f:ac:b3:74:37:ec:ea:79:dc:a2: 8c:db:0c:91:05:38:a4:13:28:95:e1:94:e7:46:5a: bf:45:5f:98:44:86:f9:ce:31:0e:e9:f9:b8:9d:8a: f9:a2:11:13:ae:16:1a:56:69:d5:95:be:4d:34:d6: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DE:4A:36:C2:B0:C2:52:6A:B0:30:1F:43:8C:59:BF:64:C4:97:66 X509v3 Authority Key Identifier: keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/Td5KNsKwwlJqsDAfQ4xZv2TEl2Y.roa sbgp-ipAddrBlock: critical IPv4: 202.226.8.0/22 Signature Algorithm: sha256WithRSAEncryption 07:b7:d3:63:b4:31:7f:ab:a2:ff:35:b1:b0:10:8d:a1:d1:c0: e2:79:18:af:2d:3d:4f:91:64:40:01:30:22:1f:4e:53:26:e1: b0:d8:21:4a:cf:0e:52:f8:bd:2d:c2:72:2d:89:b5:2d:81:4c: f3:17:2d:dc:1b:6e:a3:68:5b:a9:92:48:76:61:1c:b4:a0:64: 94:34:e0:53:0f:43:b1:8d:45:b0:fc:8b:2d:6f:21:2b:62:89: cf:6d:9b:76:48:7d:a8:2e:c9:e3:ad:9e:78:a1:57:c4:f9:de: ab:58:9b:c7:48:6e:9c:4f:ce:e6:95:27:fb:7c:ce:11:40:a2: 57:65:5e:f8:a1:99:60:d8:9f:29:2f:af:bb:d0:85:b7:3b:c3: 3c:64:94:f5:24:ed:d8:40:63:f2:37:17:0e:d7:33:b0:b2:f1: c2:bc:71:7a:57:c3:8b:2e:83:f2:4b:c4:16:19:97:4b:79:77: e2:6a:a6:c3:7a:60:d7:da:c8:a8:4d:e9:0d:d6:d2:7e:a9:47: fa:2b:3e:21:47:fa:9e:a9:d5:e7:51:98:3e:bb:c9:1d:1a:0c: 2b:a2:2e:86:8c:68:54:23:aa:63:4c:02:f8:8c:e1:a6:4c:20: c3:db:5c:81:50:6d:76:56:26:7d:5f:92:65:a1:19:81:32:ff: f1:4b:3c:c4 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTFG NjI2NTk1QkRFQUJFOTMzNEM2MUQ3MjlDNERBMjU0Q0VEOTFDMB4XDTI2MDMzMTA3 Mzg0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNERERTRBMzZDMkIwQzI1 MjZBQjAzMDFGNDM4QzU5QkY2NEM0OTc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOiJpOPFU8cBROO0oihGiM2+9Hgb/CQsNE1u+oKI5gKNk6HiRH3b kHaHDwcXiSZ3BOM+yGWaibVPS3HquIB1A9FFp3kMNxX3b2yub5bU4nlobw6Fqjxg GfYcvlG40gOM2dJj+cKBxoFZV4G06KQBxQzXMZlPTnjW7fylk8ljjdIbJ1BlTlFk mgpko6a6QnFRa3GuF3OU+1pAeBvzI66Mha6Lqs79JvhOCA6iLKj0r20e8Gg5J/mu eEoYTTq31zrNOk1ODjR1Hmw/rLN0N+zqedyijNsMkQU4pBMoleGU50Zav0VfmESG +c4xDun5uJ2K+aIRE64WGlZp1ZW+TTTWMKECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRN3ko2wrDCUmqwMB9DjFm/ZMSXZjAfBgNVHSMEGDAWgBRxH2Jllb3qvpM0xh1y nE2iVM7ZHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTMvY1I5aVpaVzk2cjZUTk1ZZGNweE5vbFRPMlJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1I5aVpaVzk2cjZUTk1ZZGNweE5v bFRPMlJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDkzL1RkNUtOc0t3d2xKcXNEQWZRNHhadjJURWwyWS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALK4ggwDQYJKoZIhvcNAQELBQAD ggEBAAe302O0MX+rov81sbAQjaHRwOJ5GK8tPU+RZEABMCIfTlMm4bDYIUrPDlL4 vS3Cci2JtS2BTPMXLdwbbqNoW6mSSHZhHLSgZJQ04FMPQ7GNRbD8iy1vIStiic9t m3ZIfaguyeOtnnihV8T53qtYm8dIbpxPzuaVJ/t8zhFAoldlXvihmWDYnykvr7vQ hbc7wzxklPUk7dhAY/I3Fw7XM7Cy8cK8cXpXw4sug/JLxBYZl0t5d+JqpsN6YNfa yKhN6Q3W0n6pR/orPiFH+p6p1edRmD67yR0aDCuiLoaMaFQjqmNMAviM4aZMIMPb XIFQbXZWJn1fkmWhGYEy//FLPMQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:21 2026 by rpki-client