$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/IvVG3iWZa1mh_M10frvxbsvbAQA.roa File: IvVG3iWZa1mh_M10frvxbsvbAQA.roa (raw, json) Hash identifier: g31DOgU4Ks53oOd3kPaNriPNAxRAM4hIZcdzJZuvKFo= Subject key identifier: 22:F5:46:DE:25:99:6B:59:A1:FC:CD:74:7E:BB:F1:6E:CB:DB:01:00 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: AB Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/IvVG3iWZa1mh_M10frvxbsvbAQA.roa Signing time: Tue 31 Mar 2026 08:37:17 +0000 ROA not before: Tue 31 Mar 2026 08:37:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7679 IP address blocks: 218.219.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Mar 31 08:37:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=22F546DE25996B59A1FCCD747EBBF16ECBDB0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:26:d8:a9:0f:87:0e:b2:4c:71:c4:ba:7e: b9:5c:32:28:83:3f:c0:86:5e:ab:8d:7c:3b:87:0b: 59:b7:7c:9e:bd:fa:16:1b:02:cd:d5:9c:bd:d1:1e: 82:e8:01:0e:c0:9c:1a:e9:b7:39:08:8a:6b:95:4e: 96:6f:28:c0:7f:08:33:6d:57:06:2c:be:88:3f:ac: 0b:c4:e4:ff:ff:39:08:0b:38:06:cb:83:c0:ff:d5: 12:04:44:ac:7b:1b:71:d8:2b:51:95:cc:e1:7c:73: 44:2d:f6:d8:ca:a8:aa:23:bf:3f:6a:34:9c:5a:6c: 1c:02:fd:75:cf:83:88:b8:5e:e1:04:f5:eb:44:ac: 81:ce:b0:9b:1a:24:42:85:0b:83:bd:5f:6b:74:a5: 11:82:fc:54:02:68:84:22:15:71:0b:e3:17:e9:92: 63:8c:3c:81:40:bc:6d:c2:af:27:d8:97:6d:cc:27: ed:00:2f:aa:ec:83:cf:0c:80:28:9d:d3:11:d8:a2: 4b:e3:5a:f2:04:8a:96:d1:77:cf:18:38:09:69:d0: 40:8a:0c:cc:b1:4e:78:5c:98:61:c7:cc:01:2c:e4: cc:bb:0e:99:2a:ba:a9:a2:16:36:23:cd:7e:70:83: 05:c9:6b:cc:e1:8f:ac:b8:b8:2a:39:9f:d9:36:ac: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F5:46:DE:25:99:6B:59:A1:FC:CD:74:7E:BB:F1:6E:CB:DB:01:00 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/IvVG3iWZa1mh_M10frvxbsvbAQA.roa sbgp-ipAddrBlock: critical IPv4: 218.219.96.0/19 Signature Algorithm: sha256WithRSAEncryption 25:97:cb:ec:a3:73:6b:6b:cc:43:7e:6b:d2:e4:73:94:7b:6b: ad:02:a2:f7:04:1e:58:8f:8b:b6:5a:31:75:e2:d3:db:b3:64: 0d:ae:47:b1:09:f4:c2:96:fc:c7:5e:4a:b2:c0:f1:8c:0c:f1: 35:cd:56:52:c9:73:ce:5a:bc:6d:ba:5f:be:50:33:fa:7d:9c: 78:21:54:c1:da:a1:a1:01:bb:4d:c2:32:93:35:38:fc:ba:f8: 37:88:d5:ee:1f:79:6b:ae:9c:5a:35:02:37:f1:f9:de:71:48: c9:8b:a5:f2:ee:0f:cc:f4:a9:2e:af:d2:70:06:3c:4c:2a:e4: 10:2c:cb:a5:c0:3d:19:91:fb:47:6d:a4:e8:b6:91:cc:d7:71: 53:e8:6c:c7:1f:7e:cb:86:27:cc:33:c7:ed:fa:85:58:5a:18: 87:ea:90:96:68:b2:32:3d:0f:14:80:d1:0c:b2:ec:76:b7:2e: 36:eb:39:9b:78:89:77:81:d4:da:46:d3:4b:7a:fa:ef:66:fe: 3b:db:61:63:94:13:c8:69:f3:05:0f:8e:65:2c:c8:61:30:73: dc:5d:89:b1:1e:24:52:05:ba:88:e5:81:08:88:b4:10:dc:50: e4:db:35:d3:fd:24:69:79:68:66:df:12:67:ea:19:fc:49:09: 86:f4:ea:64 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1 RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw ODM3MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyRjU0NkRFMjU5OTZC NTlBMUZDQ0Q3NDdFQkJGMTZFQ0JEQjAxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI7ibYqQ+HDrJMccS6frlcMiiDP8CGXquNfDuHC1m3fJ69+hYb As3VnL3RHoLoAQ7AnBrptzkIimuVTpZvKMB/CDNtVwYsvog/rAvE5P//OQgLOAbL g8D/1RIERKx7G3HYK1GVzOF8c0Qt9tjKqKojvz9qNJxabBwC/XXPg4i4XuEE9etE rIHOsJsaJEKFC4O9X2t0pRGC/FQCaIQiFXEL4xfpkmOMPIFAvG3CryfYl23MJ+0A L6rsg88MgCid0xHYokvjWvIEipbRd88YOAlp0ECKDMyxTnhcmGHHzAEs5My7Dpkq uqmiFjYjzX5wgwXJa8zhj6y4uCo5n9k2rKspAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIvVG3iWZa1mh/M10frvxbsvbAQAwHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3 WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjQ5L0l2VkczaVdaYTFtaF9NMTBmcnZ4YnN2YkFRQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXa22AwDQYJKoZIhvcNAQELBQADggEB ACWXy+yjc2trzEN+a9Lkc5R7a60CovcEHliPi7ZaMXXi09uzZA2uR7EJ9MKW/Mde SrLA8YwM8TXNVlLJc85avG26X75QM/p9nHghVMHaoaEBu03CMpM1OPy6+DeI1e4f eWuunFo1Ajfx+d5xSMmLpfLuD8z0qS6v0nAGPEwq5BAsy6XAPRmR+0dtpOi2kczX cVPobMcffsuGJ8wzx+36hVhaGIfqkJZosjI9DxSA0Qyy7Ha3LjbrOZt4iXeB1NpG 00t6+u9m/jvbYWOUE8hp8wUPjmUsyGEwc9xdibEeJFIFuojlgQiItBDcUOTbNdP9 JGl5aGbfEmfqGfxJCYb06mQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:01 2026 by rpki-client