$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20153/hxNrStOUwrNsarlLGceLG0XS1IQ.roa File: hxNrStOUwrNsarlLGceLG0XS1IQ.roa (raw, json) Hash identifier: httHC64sRtmAg6XmC3O8zBI5lv0vAZjpM/U6hMPmyFc= Subject key identifier: 87:13:6B:4A:D3:94:C2:B3:6C:6A:B9:4B:19:C7:8B:1B:45:D2:D4:84 Certificate issuer: /CN=5C57DDC59248271E71E1325877992B9738E043D4 Certificate serial: 24 Authority key identifier: 5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/hxNrStOUwrNsarlLGceLG0XS1IQ.roa Signing time: Tue 31 Mar 2026 08:42:02 +0000 ROA not before: Tue 31 Mar 2026 08:42:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131986 IP address blocks: 133.32.108.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C57DDC59248271E71E1325877992B9738E043D4 Validity Not Before: Mar 31 08:42:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=87136B4AD394C2B36C6AB94B19C78B1B45D2D484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:1f:5b:ba:51:cd:31:69:5c:db:21:6e:76: dc:7b:a1:d6:d5:f4:31:55:1c:9b:56:24:dd:34:d4: 03:59:50:62:f5:98:6e:11:2b:4e:07:db:32:cc:8f: 59:9b:44:ba:9d:4b:4e:c1:80:30:b1:fe:7e:da:d7: 93:cb:9d:8f:0c:c8:eb:7b:8e:a9:98:54:3c:ab:3e: 34:47:1c:06:ae:87:6d:9f:9e:cd:a8:d4:0d:a9:40: b6:7e:70:b1:d0:18:b7:08:90:af:c3:87:c6:72:ce: 98:1d:06:64:84:74:20:6c:4e:39:e2:2a:4b:fb:98: 96:08:82:bf:1d:2d:43:70:5b:06:07:04:73:89:fd: 42:97:bd:d7:bd:71:8f:a2:f7:01:b9:34:6a:0e:ce: db:14:0a:0c:c3:a1:f5:d9:aa:30:cd:65:db:cb:00: 93:d2:cf:28:08:60:50:61:b3:ec:36:9a:8e:e4:b4: 18:28:5a:44:ac:94:bc:51:a3:75:1d:42:31:19:b5: d8:40:ee:7b:84:c6:5e:94:ff:9c:e5:8f:ef:f9:00: 0e:44:63:af:90:06:2e:6e:bf:e9:1d:04:b6:c4:86: 5b:8e:ca:db:d5:6f:ae:6d:7f:5b:44:2d:bb:da:bc: 5a:ee:95:96:91:10:56:02:c5:a4:a5:13:67:8d:12: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:6B:4A:D3:94:C2:B3:6C:6A:B9:4B:19:C7:8B:1B:45:D2:D4:84 X509v3 Authority Key Identifier: keyid:5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/hxNrStOUwrNsarlLGceLG0XS1IQ.roa sbgp-ipAddrBlock: critical IPv4: 133.32.108.0/23 Signature Algorithm: sha256WithRSAEncryption c7:83:93:25:17:93:f0:9c:f5:b1:a0:20:d9:6d:ba:71:e9:b2: 9b:37:90:fe:94:96:91:65:a9:2d:4b:91:d1:61:13:ee:61:32: 3a:e3:73:23:9e:4f:a7:9b:4b:99:53:b0:bf:57:2e:a0:2d:c1: d6:55:cb:a6:d2:10:e9:4e:fe:97:84:ce:7e:d5:87:9f:6b:eb: 3a:eb:c1:5a:74:80:34:6c:42:0e:ef:db:28:fc:b5:4d:c5:d9: 4e:ad:b6:40:d8:fb:6b:25:a5:76:90:c2:9b:12:15:90:db:9d: 32:8f:82:3a:77:7f:6b:a4:2e:a8:74:7d:9e:dd:9e:16:41:08: ce:5a:bb:0d:6d:dd:c3:ca:f5:4b:38:a5:dd:8a:3d:9b:2f:2f: 2e:23:b8:4a:7c:f2:b7:5e:7a:32:30:db:09:28:3d:3b:62:fb: 73:33:08:c7:9e:fd:a2:98:41:cc:8f:f0:82:98:17:02:80:54: 1c:65:3c:0b:66:ac:00:75:2a:7c:ce:59:41:f3:4e:0e:f8:9b: ba:2a:16:4b:71:fe:c4:b1:63:6c:5c:86:d7:77:42:ee:ca:86: 1f:a1:1a:56:9b:d6:2b:fc:db:28:06:0c:7f:ee:2a:c9:ea:d1: 2b:e7:03:9b:a5:2b:cd:fa:d6:2b:ce:d3:6f:87:99:29:e1:7b: ed:c9:c9:50 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QzU3 RERDNTkyNDgyNzFFNzFFMTMyNTg3Nzk5MkI5NzM4RTA0M0Q0MB4XDTI2MDMzMTA4 NDIwMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODcxMzZCNEFEMzk0QzJC MzZDNkFCOTRCMTlDNzhCMUI0NUQyRDQ4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxrH1u6Uc0xaVzbIW523Huh1tX0MVUcm1Yk3TTUA1lQYvWYbhEr TgfbMsyPWZtEup1LTsGAMLH+ftrXk8udjwzI63uOqZhUPKs+NEccBq6HbZ+ezajU DalAtn5wsdAYtwiQr8OHxnLOmB0GZIR0IGxOOeIqS/uYlgiCvx0tQ3BbBgcEc4n9 Qpe9171xj6L3Abk0ag7O2xQKDMOh9dmqMM1l28sAk9LPKAhgUGGz7DaajuS0GCha RKyUvFGjdR1CMRm12EDue4TGXpT/nOWP7/kADkRjr5AGLm6/6R0EtsSGW47K29Vv rm1/W0Qtu9q8Wu6VlpEQVgLFpKUTZ40SxDkCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSHE2tK05TCs2xquUsZx4sbRdLUhDAfBgNVHSMEGDAWgBRcV93FkkgnHnHhMlh3 mSuXOOBD1DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNTMvWEZmZHhaSklKeDV4NFRKWWQ1a3JsempnUTlRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEZmZHhaSklKeDV4NFRKWWQ1a3Js empnUTlRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMTUzL2h4TnJTdE9Vd3JOc2FybExHY2VMRzBYUzFJUS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGFIGwwDQYJKoZIhvcNAQELBQAD ggEBAMeDkyUXk/Cc9bGgINltunHpsps3kP6UlpFlqS1LkdFhE+5hMjrjcyOeT6eb S5lTsL9XLqAtwdZVy6bSEOlO/peEzn7Vh59r6zrrwVp0gDRsQg7v2yj8tU3F2U6t tkDY+2slpXaQwpsSFZDbnTKPgjp3f2ukLqh0fZ7dnhZBCM5auw1t3cPK9Us4pd2K PZsvLy4juEp88rdeejIw2wkoPTti+3MzCMee/aKYQcyP8IKYFwKAVBxlPAtmrAB1 KnzOWUHzTg74m7oqFktx/sSxY2xchtd3Qu7Khh+hGlab1iv82ygGDH/uKsnq0Svn A5ulK8361ivO02+HmSnhe+3JyVA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:22 2026 by rpki-client