$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20201/KNOCn3pCUvWmCMU2ajASNZSNEaY.roa File: KNOCn3pCUvWmCMU2ajASNZSNEaY.roa (raw, json) Hash identifier: Yf6GbZYIkf5Khfcap+iZQgHU7JM3u7ece2W9ABOUwy8= Subject key identifier: 28:D3:82:9F:7A:42:52:F5:A6:08:C5:36:6A:30:12:35:94:8D:11:A6 Certificate issuer: /CN=BDE43C6BAEE3F803AD22DBF3692AB092D7E88F5A Certificate serial: 10 Authority key identifier: BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/KNOCn3pCUvWmCMU2ajASNZSNEaY.roa Signing time: Fri 03 Apr 2026 02:30:14 +0000 ROA not before: Fri 03 Apr 2026 02:30:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 16509 IP address blocks: 202.243.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE43C6BAEE3F803AD22DBF3692AB092D7E88F5A Validity Not Before: Apr 3 02:30:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=28D3829F7A4252F5A608C5366A301235948D11A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:82:9e:92:b1:3a:e3:ee:59:58:6a:58:0c: 2f:8b:d7:0c:f9:2f:87:2a:b2:bd:b5:4b:89:25:65: 11:2b:ad:87:95:8c:94:10:41:16:b6:37:43:4e:0b: 02:cb:ed:20:c0:11:5e:19:9c:40:1b:f6:8b:8e:81: ff:1d:89:52:43:78:58:53:61:ac:78:f4:ca:41:b3: 74:f6:dc:9c:36:d2:be:af:e4:54:73:fc:2f:c6:7e: ce:e6:2c:2b:c7:c5:47:c1:e5:16:1e:1c:f9:8b:42: 36:b8:e1:0c:3f:6a:a7:d3:aa:4a:cb:ce:21:d8:12: 46:ec:be:7d:7a:03:a0:ab:2d:22:aa:30:f0:e8:11: 13:21:2b:25:0d:05:39:bb:8f:6c:45:00:ce:53:03: b9:e0:4b:27:ef:fa:20:47:5d:d0:8d:54:c9:fb:5d: de:4a:e2:77:3b:c2:38:06:19:d3:d5:08:b9:9d:fb: 03:f9:c4:ec:2b:3c:0f:13:3b:fb:32:e9:98:37:5c: 6d:b6:fb:66:0d:da:d9:37:32:f7:95:01:bc:a7:c0: 49:cf:ae:4d:f4:68:76:d2:ae:02:7b:1d:ae:7e:ee: a4:86:36:d1:1e:fc:7f:f2:fb:52:d6:2a:71:d2:60: ac:0d:ff:60:7d:45:5d:ca:05:4a:4b:17:e4:e4:a1: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:82:9F:7A:42:52:F5:A6:08:C5:36:6A:30:12:35:94:8D:11:A6 X509v3 Authority Key Identifier: keyid:BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/KNOCn3pCUvWmCMU2ajASNZSNEaY.roa sbgp-ipAddrBlock: critical IPv4: 202.243.186.0/24 Signature Algorithm: sha256WithRSAEncryption 18:08:9c:e8:04:50:72:aa:1f:44:f5:5c:2f:1c:06:c7:16:42: de:0b:27:25:30:8e:33:7a:2a:74:1b:29:ed:45:69:8f:af:21: bb:57:c1:29:73:04:0c:df:e4:13:c1:ab:2e:e8:a5:7b:ff:41: e5:2b:cd:4a:ea:bd:f6:9b:f1:f7:07:04:5e:fa:db:60:d7:9d: 71:6c:ce:57:e3:b7:97:c5:5e:65:d3:1a:bd:dc:6d:71:43:d4: c6:90:46:e4:84:6d:ae:f4:74:f4:e6:63:fe:e8:f1:68:6d:c7: 1d:2c:ca:43:fe:75:c3:28:4f:0a:91:9c:bf:7d:6c:dd:b6:48: 0d:85:54:68:3c:69:60:5d:a3:09:5e:21:bd:ec:22:72:44:0b: 9c:3d:9f:6e:f6:bf:a6:a3:0d:13:1d:da:3d:ff:ff:63:b4:56: b5:a6:53:de:56:0d:c9:a3:30:19:45:5d:22:52:9a:43:e5:dd: ff:22:8b:15:f2:1d:e4:d8:cd:aa:d4:26:0d:53:e7:0d:c3:b1: fb:e1:57:56:fc:2b:cd:e9:a8:80:ed:af:e5:53:bd:ef:f6:ea: 16:20:e1:dd:5c:d6:bd:98:af:86:bc:f4:07:97:38:ef:a8:93: f5:6c:16:54:eb:7e:a9:31:51:5c:14:c9:81:c9:37:7d:59:3d: 39:a7:38:d5 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCREU0 M0M2QkFFRTNGODAzQUQyMkRCRjM2OTJBQjA5MkQ3RTg4RjVBMB4XDTI2MDQwMzAy MzAxNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjhEMzgyOUY3QTQyNTJG NUE2MDhDNTM2NkEzMDEyMzU5NDhEMTFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpPgp6SsTrj7llYalgML4vXDPkvhyqyvbVLiSVlESuth5WMlBBB FrY3Q04LAsvtIMARXhmcQBv2i46B/x2JUkN4WFNhrHj0ykGzdPbcnDbSvq/kVHP8 L8Z+zuYsK8fFR8HlFh4c+YtCNrjhDD9qp9OqSsvOIdgSRuy+fXoDoKstIqow8OgR EyErJQ0FObuPbEUAzlMDueBLJ+/6IEdd0I1Uyftd3kridzvCOAYZ09UIuZ37A/nE 7Cs8DxM7+zLpmDdcbbb7Zg3a2Tcy95UBvKfASc+uTfRodtKuAnsdrn7upIY20R78 f/L7UtYqcdJgrA3/YH1FXcoFSksX5OSht8cCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQo04KfekJS9aYIxTZqMBI1lI0RpjAfBgNVHSMEGDAWgBS95DxrruP4A60i2/Np KrCS1+iPWjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMDEvdmVROGE2N2otQU90SXR2emFTcXdrdGZvajFvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdmVROGE2N2otQU90SXR2emFTcXdr dGZvajFvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjAxL0tOT0NuM3BDVXZXbUNNVTJhakFTTlpTTkVhWS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADK87owDQYJKoZIhvcNAQELBQAD ggEBABgInOgEUHKqH0T1XC8cBscWQt4LJyUwjjN6KnQbKe1FaY+vIbtXwSlzBAzf 5BPBqy7opXv/QeUrzUrqvfab8fcHBF7622DXnXFszlfjt5fFXmXTGr3cbXFD1MaQ RuSEba70dPTmY/7o8Whtxx0sykP+dcMoTwqRnL99bN22SA2FVGg8aWBdowleIb3s InJEC5w9n272v6ajDRMd2j3//2O0VrWmU95WDcmjMBlFXSJSmkPl3f8iixXyHeTY zarUJg1T5w3DsfvhV1b8K83pqIDtr+VTve/26hYg4d1c1r2Yr4a89AeXOO+ok/Vs FlTrfqkxUVwUyYHJN31ZPTmnONU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:55 2026 by rpki-client