$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G-TxW4CHsqHrtQTKFrt6M5eSftw.roa File: G-TxW4CHsqHrtQTKFrt6M5eSftw.roa (raw, json) Hash identifier: naFR8A3tjOk4Oo5xKJy7yL6dTh3ZjtBsGhAATivX5d4= Subject key identifier: 1B:E4:F1:5B:80:87:B2:A1:EB:B5:04:CA:16:BB:7A:33:97:92:7E:DC Certificate issuer: /CN=1BFFA60D8A341D616211C38BB9250610836D3B9D Certificate serial: 0A Authority key identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G-TxW4CHsqHrtQTKFrt6M5eSftw.roa Signing time: Tue 31 Mar 2026 08:47:27 +0000 ROA not before: Tue 31 Mar 2026 08:47:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 152873 IP address blocks: 43.229.16.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BFFA60D8A341D616211C38BB9250610836D3B9D Validity Not Before: Mar 31 08:47:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1BE4F15B8087B2A1EBB504CA16BB7A3397927EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:9e:e9:61:28:80:c1:f6:aa:d8:e6:95:c7: 88:48:f2:bf:fd:9a:a2:b1:b3:05:5d:8b:6b:a3:26: ef:c6:00:cc:c7:e4:3b:f7:f9:a4:03:55:c0:ad:7a: 09:9d:69:8a:ee:76:d8:7a:08:ca:09:b8:e9:76:af: 47:9d:67:83:00:58:96:11:55:92:9b:68:0d:66:c3: 2a:54:67:4b:95:b7:28:72:b6:aa:53:4e:bd:0d:b6: 96:1b:6e:42:5d:f8:14:11:1f:b5:f3:bb:b3:01:49: 49:04:96:59:1e:09:b1:e1:eb:f0:c9:5a:65:97:89: 8d:05:16:2d:c3:37:0a:7f:61:82:07:cf:0c:74:c9: 37:32:26:c8:a5:dc:ca:d1:e5:7a:a3:24:39:ac:96: 1d:f3:c1:3a:e9:ff:ed:3d:02:3c:98:4c:aa:3e:5c: 48:33:63:d3:d9:1a:2d:e4:6b:6f:4d:e6:b2:68:86: 4c:2a:90:43:0c:b0:a0:33:42:eb:22:3c:e1:b3:c6: e1:ce:82:35:9c:15:44:d7:49:e8:3a:e5:3a:55:aa: 02:6c:4a:65:5e:2c:00:b2:25:b0:c8:9c:12:b6:d6: 0d:ce:be:27:e3:ca:07:dc:d7:a1:d4:20:f2:8e:55: 83:a3:77:55:07:7f:a1:4c:c5:d3:a8:db:58:a8:3e: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E4:F1:5B:80:87:B2:A1:EB:B5:04:CA:16:BB:7A:33:97:92:7E:DC X509v3 Authority Key Identifier: keyid:1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G-TxW4CHsqHrtQTKFrt6M5eSftw.roa sbgp-ipAddrBlock: critical IPv4: 43.229.16.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:d8:25:14:88:00:6e:73:4e:8a:4f:27:6e:22:a8:99:95:89: 21:14:a6:7e:b8:42:74:c6:2d:ff:ce:c7:4c:11:99:5d:98:57: 44:58:ab:d9:34:99:a7:cc:c3:b4:05:97:f3:5d:c8:f8:76:bd: 28:98:c1:f7:13:36:cf:0e:1a:35:51:db:fd:dd:93:b9:90:66: 19:00:dc:b5:c7:d7:e7:fb:13:7d:57:45:58:22:82:06:ef:03: b6:13:73:97:3a:03:44:3e:91:65:42:23:ae:e3:59:02:02:78: fe:0c:af:96:bd:8d:79:71:2e:22:39:19:94:c8:29:b2:08:de: cb:78:27:9b:b2:5b:6d:ed:c5:78:62:68:b2:87:cd:29:6a:ff: 8b:c9:70:a3:e7:1b:78:30:a9:a3:f6:8d:be:24:19:58:4b:68: 05:e6:b6:09:d6:04:1f:29:fb:31:03:11:3b:99:ef:f7:bf:22: ab:da:a7:61:f5:24:7d:fd:a7:ff:2d:7f:5f:e5:e5:2d:26:b6: 4a:39:f0:b6:91:b5:02:f4:97:ce:90:23:67:40:42:b3:0f:28: 47:4c:e2:46:29:e6:a1:5b:9a:4c:14:00:d2:0c:c6:75:93:99: 35:16:9e:11:4f:4a:b6:ae:bb:e6:b4:bb:94:9f:9f:13:20:6f: b2:ed:dd:5c -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkZG QTYwRDhBMzQxRDYxNjIxMUMzOEJCOTI1MDYxMDgzNkQzQjlEMB4XDTI2MDMzMTA4 NDcyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUJFNEYxNUI4MDg3QjJB MUVCQjUwNENBMTZCQjdBMzM5NzkyN0VEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALrxnulhKIDB9qrY5pXHiEjyv/2aorGzBV2La6Mm78YAzMfkO/f5 pANVwK16CZ1piu522HoIygm46XavR51ngwBYlhFVkptoDWbDKlRnS5W3KHK2qlNO vQ22lhtuQl34FBEftfO7swFJSQSWWR4JseHr8MlaZZeJjQUWLcM3Cn9hggfPDHTJ NzImyKXcytHleqMkOayWHfPBOun/7T0CPJhMqj5cSDNj09kaLeRrb03msmiGTCqQ QwywoDNC6yI84bPG4c6CNZwVRNdJ6DrlOlWqAmxKZV4sALIlsMicErbWDc6+J+PK B9zXodQg8o5Vg6N3VQd/oUzF06jbWKg+4k8CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQb5PFbgIeyoeu1BMoWu3ozl5J+3DAfBgNVHSMEGDAWgBQb/6YNijQdYWIRw4u5 JQYQg207nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyODEvR18tbURZbzBIV0ZpRWNPTHVTVUdFSU50TzUwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR18tbURZbzBIV0ZpRWNPTHVTVUdF SU50TzUwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjgxL0ctVHhXNENIc3FIcnRRVEtGcnQ2TTVlU2Z0dy5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEr5RAwDQYJKoZIhvcNAQELBQAD ggEBAJ/YJRSIAG5zTopPJ24iqJmViSEUpn64QnTGLf/Ox0wRmV2YV0RYq9k0mafM w7QFl/NdyPh2vSiYwfcTNs8OGjVR2/3dk7mQZhkA3LXH1+f7E31XRVgiggbvA7YT c5c6A0Q+kWVCI67jWQICeP4Mr5a9jXlxLiI5GZTIKbII3st4J5uyW23txXhiaLKH zSlq/4vJcKPnG3gwqaP2jb4kGVhLaAXmtgnWBB8p+zEDETuZ7/e/Iqvap2H1JH39 p/8tf1/l5S0mtko58LaRtQL0l86QI2dAQrMPKEdM4kYp5qFbmkwUANIMxnWTmTUW nhFPSrauu+a0u5SfnxMgb7Lt3Vw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:18 2026 by rpki-client