$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/iELBww0yjLOWzkKRUepOqacUgig.roa File: iELBww0yjLOWzkKRUepOqacUgig.roa (raw, json) Hash identifier: oITmbLUwI9l7wYgZMGLAXP6YeRMibkjMJJbIvlKB1OI= Subject key identifier: 88:42:C1:C3:0D:32:8C:B3:96:CE:42:91:51:EA:4E:A9:A7:14:82:28 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 94 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/iELBww0yjLOWzkKRUepOqacUgig.roa Signing time: Tue 31 Mar 2026 08:37:05 +0000 ROA not before: Tue 31 Mar 2026 08:37:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7679 IP address blocks: 114.142.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Mar 31 08:37:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8842C1C30D328CB396CE429151EA4EA9A7148228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:1c:a6:da:ff:ee:5d:56:de:7e:de:c6:38: 6c:90:af:d8:bd:cc:ca:3e:cd:32:26:04:6b:6a:7c: 07:a8:40:a8:b9:da:51:38:95:2f:7d:7a:a1:a0:0d: bb:18:3f:65:9f:5b:5b:97:68:b6:3f:aa:ad:1d:31: 46:56:88:ee:e9:cc:09:74:60:b6:e9:ba:72:b8:12: e1:7f:f2:ee:08:a3:8e:13:d2:54:8b:64:06:89:18: 85:fe:84:f1:8d:e0:d5:8f:4b:43:66:ec:35:b3:da: 79:66:7c:69:11:06:37:b2:1d:30:29:ea:68:8d:5f: de:41:b7:1c:88:cb:af:77:09:d3:ac:1d:84:22:ef: ea:3d:f2:92:b4:70:0e:3d:1b:38:c8:a9:b6:d6:d8: 5c:49:3d:dd:b8:12:54:87:64:98:db:31:cb:8e:f9: 78:b5:01:76:15:1f:62:45:d4:2c:be:ee:b2:67:46: f5:b0:9e:41:c9:e7:c1:68:8c:69:df:7d:ec:f5:9e: c5:fb:ea:5a:6c:35:17:09:1b:82:9c:65:a4:5c:51: c9:2f:78:e3:d8:97:67:66:e2:a1:bc:57:f8:9a:a8: bc:d5:0d:23:38:6c:2b:6d:07:60:d1:20:79:04:50: 96:d3:32:59:c4:6a:a4:8f:2c:e1:be:f0:43:52:94: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:C1:C3:0D:32:8C:B3:96:CE:42:91:51:EA:4E:A9:A7:14:82:28 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/iELBww0yjLOWzkKRUepOqacUgig.roa sbgp-ipAddrBlock: critical IPv4: 114.142.0.0/17 Signature Algorithm: sha256WithRSAEncryption bd:33:9b:17:c8:25:45:86:d7:15:3c:ac:03:4c:b9:2b:61:fe: 5e:f4:70:65:84:6d:35:94:4e:d2:fd:b8:4f:aa:4c:95:d7:c7: 32:35:24:7c:d8:72:52:40:15:3c:2c:9b:f1:5e:e2:8d:3b:2b: aa:85:d6:20:a6:1b:46:ca:40:07:ea:3a:a0:b7:17:8d:59:bb: 7c:52:b9:14:b6:4d:f5:15:5e:25:c5:cc:33:66:21:cd:ad:58: da:80:13:13:e4:ba:2e:40:f3:83:0e:04:c9:8b:4b:5d:27:a5: 84:17:09:99:96:c5:b7:65:88:41:5e:ac:d9:f5:e9:b4:a6:5c: fa:cb:c9:80:ba:f0:3c:53:62:5a:32:6d:b6:4e:a6:15:54:3f: 22:0e:eb:ba:a4:24:fd:50:fe:86:42:ae:38:18:39:96:d6:0f: f4:51:e1:12:96:fc:6f:36:64:b9:1d:1c:34:54:8a:a4:69:8c: 82:ce:65:f4:f8:eb:d8:df:7c:09:f9:de:ee:c9:f8:d9:be:a2: 92:a4:cf:b1:12:fb:ed:2b:ec:8b:02:0a:b1:1d:ce:eb:e5:a4: 30:64:95:30:7f:4a:7e:88:30:39:26:a3:68:8e:c2:44:dc:a5: 21:f1:83:5c:2b:6c:af:77:5c:7f:c0:76:3e:cb:f6:1d:cf:8c: 83:65:1e:35 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1 RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw ODM3MDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4NDJDMUMzMEQzMjhD QjM5NkNFNDI5MTUxRUE0RUE5QTcxNDgyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTCBym2v/uXVbeft7GOGyQr9i9zMo+zTImBGtqfAeoQKi52lE4 lS99eqGgDbsYP2WfW1uXaLY/qq0dMUZWiO7pzAl0YLbpunK4EuF/8u4Io44T0lSL ZAaJGIX+hPGN4NWPS0Nm7DWz2nlmfGkRBjeyHTAp6miNX95BtxyIy693CdOsHYQi 7+o98pK0cA49GzjIqbbW2FxJPd24ElSHZJjbMcuO+Xi1AXYVH2JF1Cy+7rJnRvWw nkHJ58FojGnffez1nsX76lpsNRcJG4KcZaRcUckveOPYl2dm4qG8V/iaqLzVDSM4 bCttB2DRIHkEUJbTMlnEaqSPLOG+8ENSlEaFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUiELBww0yjLOWzkKRUepOqacUgigwHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3 WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjQ5L2lFTEJ3dzB5akxPV3prS1JVZXBPcWFjVWdpZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdyjgAwDQYJKoZIhvcNAQELBQADggEB AL0zmxfIJUWG1xU8rANMuSth/l70cGWEbTWUTtL9uE+qTJXXxzI1JHzYclJAFTws m/Fe4o07K6qF1iCmG0bKQAfqOqC3F41Zu3xSuRS2TfUVXiXFzDNmIc2tWNqAExPk ui5A84MOBMmLS10npYQXCZmWxbdliEFerNn16bSmXPrLyYC68DxTYloybbZOphVU PyIO67qkJP1Q/oZCrjgYOZbWD/RR4RKW/G82ZLkdHDRUiqRpjILOZfT469jffAn5 3u7J+Nm+opKkz7ES++0r7IsCCrEdzuvlpDBklTB/Sn6IMDkmo2iOwkTcpSHxg1wr bK93XH/Adj7L9h3PjINlHjU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:35 2026 by rpki-client