$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ISglXUS_vDy6yPtEiVMVArf_LiA.roa File: ISglXUS_vDy6yPtEiVMVArf_LiA.roa (raw, json) Hash identifier: 8ZES4LAup0liRjlJYA5Aj61jT+q4D+HRaLJCQsQEUas= Subject key identifier: 21:28:25:5D:44:BF:BC:3C:BA:C8:FB:44:89:53:15:02:B7:FF:2E:20 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 76 Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ISglXUS_vDy6yPtEiVMVArf_LiA.roa Signing time: Tue 31 Mar 2026 08:07:19 +0000 ROA not before: Tue 31 Mar 2026 08:07:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 15830 IP address blocks: 14.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Mar 31 08:07:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2128255D44BFBC3CBAC8FB4489531502B7FF2E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:d0:ad:d2:70:a1:90:bb:33:d7:77:76:75: de:06:37:ab:97:8e:89:1f:95:3c:2e:d1:f2:99:49: 23:43:ab:95:9b:15:4f:c9:ec:8f:9c:90:58:2a:0c: c8:2e:57:a4:89:ee:aa:6a:78:58:85:ab:f2:3e:7d: 31:2e:7c:5c:37:2a:d7:52:b2:1a:bc:cb:87:34:50: e5:cb:a8:8f:75:c4:f4:9a:35:e1:37:14:0f:ce:e0: 14:44:bc:5d:54:ac:b5:9e:69:5a:b2:c3:18:46:d8: dd:3b:ca:35:4b:57:ba:ef:77:f8:a4:f0:1f:a2:ee: 51:ae:4f:67:51:89:b7:4b:9b:72:14:44:38:c7:db: 0c:64:f2:62:8a:8a:4c:fe:bb:e4:21:a8:15:cc:cb: b4:b2:50:4d:85:bc:1d:12:c2:f8:a1:a0:8d:2c:49: 98:56:1b:dd:d5:cb:ec:3a:0b:c5:8b:c0:c7:ce:2a: 2c:37:d0:78:09:d9:ca:81:2e:21:4b:db:17:43:ff: d9:f7:ee:9b:3f:e7:71:4e:be:89:36:14:92:f8:fc: 77:51:87:80:53:47:73:23:a8:48:f9:c5:f0:83:3d: 77:d8:ac:ad:81:93:00:7a:6b:b1:14:5b:ae:4d:cb: f8:ac:fe:37:77:65:2f:ca:7e:b3:ac:16:4e:39:8d: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:25:5D:44:BF:BC:3C:BA:C8:FB:44:89:53:15:02:B7:FF:2E:20 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ISglXUS_vDy6yPtEiVMVArf_LiA.roa sbgp-ipAddrBlock: critical IPv4: 14.128.16.0/20 Signature Algorithm: sha256WithRSAEncryption 15:6d:c9:88:e4:d8:ee:a4:c5:c1:50:4b:d0:48:81:cf:d6:58: 98:dd:5f:ce:23:5c:e3:41:c1:d9:d1:e6:5d:27:c2:da:2f:96: c8:4c:0e:f5:d4:dc:d1:14:57:ee:e9:ea:13:55:30:b4:9b:bd: d4:ad:3a:20:7e:c7:08:cf:a2:aa:b5:e6:4b:0a:54:a1:4b:2d: 64:31:24:15:7e:8e:7c:31:c9:e1:93:d9:6b:21:86:e1:9e:8c: 3b:a6:d3:3d:5d:c0:bc:5e:e0:40:3d:c9:a3:9a:b7:5e:79:9a: 87:4b:37:f8:8b:30:a4:e7:54:cb:34:6b:95:81:a2:7d:d6:07: 3c:f6:ae:07:5b:9c:57:a3:af:19:87:56:7b:cd:bc:4d:0a:b1: 55:bc:a7:d0:af:a4:d5:58:e9:f0:e0:b1:4f:f2:f9:01:46:91: 01:ae:ab:00:8e:f5:20:70:06:42:ce:c0:9c:b6:3a:22:95:d3: 42:cc:1c:db:08:51:04:5c:3d:e1:cd:f4:3c:30:c0:88:27:bd: 26:d3:18:fc:0e:4c:11:1c:62:62:7a:8d:48:bf:0e:5e:85:9e: 6b:b4:c4:eb:18:7d:eb:f4:5c:a4:a4:e1:16:84:f0:45:e5:0e: b3:ad:cc:b5:9a:90:13:bb:5e:8e:a4:06:a0:4c:77:74:20:b9: bf:3b:65:dd -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI2MDMzMTA4 MDcxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjEyODI1NUQ0NEJGQkMz Q0JBQzhGQjQ0ODk1MzE1MDJCN0ZGMkUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMSx0K3ScKGQuzPXd3Z13gY3q5eOiR+VPC7R8plJI0OrlZsVT8ns j5yQWCoMyC5XpInuqmp4WIWr8j59MS58XDcq11KyGrzLhzRQ5cuoj3XE9Jo14TcU D87gFES8XVSstZ5pWrLDGEbY3TvKNUtXuu93+KTwH6LuUa5PZ1GJt0ubchREOMfb DGTyYoqKTP675CGoFczLtLJQTYW8HRLC+KGgjSxJmFYb3dXL7DoLxYvAx84qLDfQ eAnZyoEuIUvbF0P/2ffumz/ncU6+iTYUkvj8d1GHgFNHcyOoSPnF8IM9d9isrYGT AHprsRRbrk3L+Kz+N3dlL8p+s6wWTjmNFmUCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQhKCVdRL+8PLrI+0SJUxUCt/8uIDAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIxMDQyL0lTZ2xYVVNfdkR5NnlQdEVpVk1WQXJmX0xpQS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQOgBAwDQYJKoZIhvcNAQELBQAD ggEBABVtyYjk2O6kxcFQS9BIgc/WWJjdX84jXONBwdnR5l0nwtovlshMDvXU3NEU V+7p6hNVMLSbvdStOiB+xwjPoqq15ksKVKFLLWQxJBV+jnwxyeGT2WshhuGejDum 0z1dwLxe4EA9yaOat155modLN/iLMKTnVMs0a5WBon3WBzz2rgdbnFejrxmHVnvN vE0KsVW8p9CvpNVY6fDgsU/y+QFGkQGuqwCO9SBwBkLOwJy2OiKV00LMHNsIUQRc PeHN9DwwwIgnvSbTGPwOTBEcYmJ6jUi/Dl6Fnmu0xOsYfev0XKSk4RaE8EXlDrOt zLWakBO7Xo6kBqBMd3Qgub87Zd0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:16 2026 by rpki-client