$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cm4Hj3ux9Jey3atycoOHr66HtRQ.roa File: cm4Hj3ux9Jey3atycoOHr66HtRQ.roa (raw, json) Hash identifier: OaMW3by2as5LSyxzIqZ0Ns4TbDUNeOqEwl7amUZA3a4= Subject key identifier: 72:6E:07:8F:7B:B1:F4:97:B2:DD:AB:72:72:83:87:AF:AE:87:B5:14 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 7A Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cm4Hj3ux9Jey3atycoOHr66HtRQ.roa Signing time: Tue 31 Mar 2026 08:07:22 +0000 ROA not before: Tue 31 Mar 2026 08:07:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 15830 IP address blocks: 203.140.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Mar 31 08:07:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=726E078F7BB1F497B2DDAB72728387AFAE87B514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:c2:a9:1a:b6:18:7e:5d:63:a2:f0:ec:a4: df:9f:0d:20:d1:d4:ec:e2:9f:58:90:05:5d:5b:21: 17:d7:33:dd:c8:ea:ed:aa:30:18:cb:07:d3:16:df: 74:9f:47:a5:8e:a1:24:28:2f:9c:9d:68:c9:6a:60: 6f:87:6f:6e:e3:a0:c8:3c:00:c9:4f:7e:9f:cd:a7: 0d:df:86:d6:35:02:6e:51:c8:fd:7f:80:5b:e0:5a: 4a:64:a4:d9:5a:1c:6f:f9:d4:b7:69:a9:90:11:d4: e3:b0:4c:03:5a:35:a5:25:6b:88:f7:fb:fc:21:1c: 0d:80:4b:77:75:7c:33:ad:c6:e2:0e:ec:52:15:a4: a0:d2:d6:d1:af:ae:a3:01:fd:72:f5:8f:aa:45:0c: 96:6f:61:23:9f:8f:57:42:6f:cd:25:b3:9c:f1:ff: d6:07:1d:e6:66:97:f5:61:13:66:fb:f6:a9:af:e8: 7d:ff:f3:2a:3f:5b:ef:ad:f6:86:06:1f:74:d5:97: 7a:45:9f:45:c7:ad:3d:77:56:0e:d2:f4:50:36:b2: 6e:a9:3c:9f:c6:b1:48:8e:f9:d5:54:32:b7:f5:9e: f7:bd:f6:77:12:42:41:24:af:fd:b9:c3:34:3f:d6: fa:c1:93:51:ee:ed:62:68:7a:53:05:2e:a2:58:0e: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:07:8F:7B:B1:F4:97:B2:DD:AB:72:72:83:87:AF:AE:87:B5:14 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/cm4Hj3ux9Jey3atycoOHr66HtRQ.roa sbgp-ipAddrBlock: critical IPv4: 203.140.224.0/20 Signature Algorithm: sha256WithRSAEncryption 45:d2:43:96:82:33:20:db:8a:d4:4a:06:d0:df:0f:2d:68:29: 01:b1:a7:90:13:d8:cc:b8:f4:82:d5:b0:e8:6e:2d:84:ad:68: aa:e1:e7:be:7e:06:87:cc:72:37:f6:b5:5a:d4:80:9a:c4:cd: 11:ed:3e:81:57:68:10:28:ab:6b:db:87:61:55:46:12:d0:05: d5:0f:ff:2e:42:cf:ef:f3:c1:84:98:39:76:1b:30:fa:bd:e0: 4c:f7:c6:cb:9c:fc:5f:ba:f1:35:52:43:05:d2:08:6c:51:e6: f6:4e:c3:17:79:1a:e0:b2:ba:46:23:4d:96:62:5c:16:aa:9d: 02:3f:f9:73:a7:22:0c:a1:6b:51:91:02:57:9c:92:21:1d:d6: e9:43:c4:b1:ee:a1:0b:1c:67:1f:d5:2f:61:fb:61:ea:be:65: 3f:16:6b:ff:62:cd:ad:06:08:18:7d:22:ef:53:11:7e:f8:a2: 5d:a1:63:83:a8:53:61:6f:5e:96:7e:92:c1:d7:ee:b8:a8:80: 09:5b:36:f3:02:d1:bf:f8:44:7c:c9:7d:f8:6d:c6:dc:89:75: 8e:3a:79:ed:77:95:a2:13:1b:50:52:a0:8e:83:b4:f5:f8:59: f3:5f:32:7e:81:11:5a:d5:40:d4:47:9f:f5:42:b0:e4:31:52: 3a:69:fc:da -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI2MDMzMTA4 MDcyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzI2RTA3OEY3QkIxRjQ5 N0IyRERBQjcyNzI4Mzg3QUZBRTg3QjUxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN1pwqkathh+XWOi8Oyk358NINHU7OKfWJAFXVshF9cz3cjq7aow GMsH0xbfdJ9HpY6hJCgvnJ1oyWpgb4dvbuOgyDwAyU9+n82nDd+G1jUCblHI/X+A W+BaSmSk2Vocb/nUt2mpkBHU47BMA1o1pSVriPf7/CEcDYBLd3V8M63G4g7sUhWk oNLW0a+uowH9cvWPqkUMlm9hI5+PV0JvzSWznPH/1gcd5maX9WETZvv2qa/off/z Kj9b7632hgYfdNWXekWfRcetPXdWDtL0UDaybqk8n8axSI751VQyt/We9732dxJC QSSv/bnDND/W+sGTUe7tYmh6UwUuolgOS7ECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRybgePe7H0l7Ldq3Jyg4evroe1FDAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIxMDQyL2NtNEhqM3V4OUpleTNhdHljb09IcjY2SHRSUS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLjOAwDQYJKoZIhvcNAQELBQAD ggEBAEXSQ5aCMyDbitRKBtDfDy1oKQGxp5AT2My49ILVsOhuLYStaKrh575+BofM cjf2tVrUgJrEzRHtPoFXaBAoq2vbh2FVRhLQBdUP/y5Cz+/zwYSYOXYbMPq94Ez3 xsuc/F+68TVSQwXSCGxR5vZOwxd5GuCyukYjTZZiXBaqnQI/+XOnIgyha1GRAlec kiEd1ulDxLHuoQscZx/VL2H7Yeq+ZT8Wa/9iza0GCBh9Iu9TEX74ol2hY4OoU2Fv XpZ+ksHX7riogAlbNvMC0b/4RHzJffhtxtyJdY46ee13laITG1BSoI6DtPX4WfNf Mn6BEVrVQNRHn/VCsOQxUjpp/No= -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:24 2026 by rpki-client