$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/VtAvBc5i4p0ZKuX5_Ey2YWFowA4.roa File: VtAvBc5i4p0ZKuX5_Ey2YWFowA4.roa (raw, json) Hash identifier: 2dMc33Y89hnpRnr3dpeSEdg72kS0V5zgCc73vbB7LD0= Subject key identifier: 56:D0:2F:05:CE:62:E2:9D:19:2A:E5:F9:FC:4C:B6:61:61:68:C0:0E Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Certificate serial: 77 Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/VtAvBc5i4p0ZKuX5_Ey2YWFowA4.roa Signing time: Tue 31 Mar 2026 07:52:00 +0000 ROA not before: Tue 31 Mar 2026 07:52:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23637 IP address blocks: 202.9.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Validity Not Before: Mar 31 07:52:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=56D02F05CE62E29D192AE5F9FC4CB6616168C00E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:12:10:2d:4d:fe:15:da:3d:44:8c:df:89: 5d:50:c0:d7:7e:bd:17:9e:ab:f7:63:ac:a2:cb:1d: 43:cc:5a:a9:6d:23:4a:ff:b4:3c:d0:dd:cc:3a:24: e3:f5:b6:4c:b8:03:4a:34:3c:0d:40:1c:e5:1f:14: 13:d2:63:d1:a1:3a:1c:d3:c2:93:b0:a4:09:95:f0: 97:82:17:80:38:d5:a9:78:ce:fe:36:3a:6a:0b:d4: 60:da:cc:0a:0d:89:63:0a:6b:e3:72:89:a6:38:87: 4c:00:44:e3:2e:26:24:53:31:1d:46:74:09:b5:a5: a2:5c:df:e1:4f:f5:3a:35:1e:d9:df:26:26:ee:c6: 97:80:ea:48:5b:32:be:22:08:4d:81:03:17:dc:c4: 9f:bc:58:3f:f2:ef:a4:f6:20:63:3d:9d:d0:40:b5: c7:86:c1:ea:fd:aa:84:a6:ab:bb:5c:41:b0:08:12: 47:0b:dd:22:14:9b:8b:aa:10:ea:af:58:5b:25:65: 51:a2:a3:18:5e:c3:c2:83:87:c0:51:71:ac:76:29: dd:03:e8:cc:6e:41:26:83:86:52:19:02:40:e0:ec: 77:14:c9:1b:04:27:c3:cc:8a:44:b9:fb:3a:d1:b5: f2:83:de:5d:48:4e:a6:4a:d9:fb:a8:ce:d5:04:a2: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D0:2F:05:CE:62:E2:9D:19:2A:E5:F9:FC:4C:B6:61:61:68:C0:0E X509v3 Authority Key Identifier: keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/VtAvBc5i4p0ZKuX5_Ey2YWFowA4.roa sbgp-ipAddrBlock: critical IPv4: 202.9.210.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ab:11:5d:82:c2:b5:36:05:26:3f:92:2d:d1:b3:91:0a:9e: 69:83:58:c2:69:75:be:9f:50:63:06:77:0b:4d:dd:b3:cf:a5: b4:27:4c:49:3c:04:bc:9c:77:7b:9a:7e:ae:e1:2c:6c:da:b3: c9:b0:5a:d9:21:03:41:1d:74:9c:c5:db:89:21:65:d8:36:99: 5a:bf:79:cd:b1:2b:de:e1:62:ce:a9:8d:d5:92:51:35:15:26: bf:87:f9:0f:09:51:de:e8:d6:81:39:0c:41:75:e4:60:43:c1: b2:3e:54:38:7e:6a:6c:80:40:96:d2:fe:84:48:a8:8d:b9:d7: 36:83:fb:d1:a0:3b:3d:2a:12:95:42:99:88:38:8f:16:29:78: b8:4d:19:a4:65:6c:ed:4e:6b:d5:25:2f:32:e9:42:5f:fd:dd: 2a:50:f3:72:6d:1e:fb:6f:e1:d5:83:b3:21:d4:2e:3e:5d:79: 53:d4:75:dd:42:46:cf:21:d4:a5:1c:ff:49:e0:25:47:7b:b0: b7:87:8e:0a:5a:9a:67:fc:31:4c:91:f0:35:1d:d8:2c:94:9c: f2:be:42:d2:8d:98:28:2a:c9:f4:7a:89:90:59:c0:aa:26:1c: 39:93:d7:0e:11:cb:8b:06:8b:cd:3e:00:6f:fa:f1:75:b5:ef: 55:b2:d1:10 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTI2MDMzMTA3 NTIwMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTZEMDJGMDVDRTYyRTI5 RDE5MkFFNUY5RkM0Q0I2NjE2MTY4QzAwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOleEhAtTf4V2j1EjN+JXVDA1369F56r92OsossdQ8xaqW0jSv+0 PNDdzDok4/W2TLgDSjQ8DUAc5R8UE9Jj0aE6HNPCk7CkCZXwl4IXgDjVqXjO/jY6 agvUYNrMCg2JYwpr43KJpjiHTABE4y4mJFMxHUZ0CbWlolzf4U/1OjUe2d8mJu7G l4DqSFsyviIITYEDF9zEn7xYP/LvpPYgYz2d0EC1x4bB6v2qhKaru1xBsAgSRwvd IhSbi6oQ6q9YWyVlUaKjGF7DwoOHwFFxrHYp3QPozG5BJoOGUhkCQODsdxTJGwQn w8yKRLn7OtG18oPeXUhOpkrZ+6jO1QSiNMsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRW0C8FzmLinRkq5fn8TLZhYWjADjAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1 i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3 ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOTkvVnRBdkJjNWk0cDBaS3VYNV9FeTJZV0Zvd0E0LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoJ0jANBgkqhkiG9w0BAQsFAAOCAQEA fKsRXYLCtTYFJj+SLdGzkQqeaYNYwml1vp9QYwZ3C03ds8+ltCdMSTwEvJx3e5p+ ruEsbNqzybBa2SEDQR10nMXbiSFl2DaZWr95zbEr3uFizqmN1ZJRNRUmv4f5DwlR 3ujWgTkMQXXkYEPBsj5UOH5qbIBAltL+hEiojbnXNoP70aA7PSoSlUKZiDiPFil4 uE0ZpGVs7U5r1SUvMulCX/3dKlDzcm0e+2/h1YOzIdQuPl15U9R13UJGzyHUpRz/ SeAlR3uwt4eOClqaZ/wxTJHwNR3YLJSc8r5C0o2YKCrJ9HqJkFnAqiYcOZPXDhHL iwaLzT4Ab/rxdbXvVbLREA== -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:58 2026 by rpki-client