$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5p33LhBFoBtk6MsE7BC8Op4Y_c4.roa File: 5p33LhBFoBtk6MsE7BC8Op4Y_c4.roa (raw, json) Hash identifier: wJ2DJmopcV1aT2TJfVV2yni9fwwlJn15MR6XoJOowJs= Subject key identifier: E6:9D:F7:2E:10:45:A0:1B:64:E8:CB:04:EC:10:BC:3A:9E:18:FD:CE Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 99 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5p33LhBFoBtk6MsE7BC8Op4Y_c4.roa Signing time: Tue 31 Mar 2026 07:55:09 +0000 ROA not before: Tue 31 Mar 2026 07:55:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 158.199.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E69DF72E1045A01B64E8CB04EC10BC3A9E18FDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:f8:c4:43:4f:c4:09:22:3f:3d:01:fd:ba: 56:9b:65:d5:c3:35:01:48:7d:e0:18:e0:52:27:0b: 07:e7:f9:af:ef:40:15:19:47:e3:d1:a7:0e:a9:d9: c7:b6:99:00:6f:76:92:69:5b:a8:4c:9f:fc:15:af: 2e:f7:2f:6a:39:4f:9b:fe:41:c5:35:5e:3c:88:1c: 78:c4:4d:0e:fd:2a:bc:f9:24:1c:1a:2f:13:fa:9f: d8:60:fb:61:cd:a4:0b:bd:da:bd:4a:e0:8f:64:1d: d4:03:af:20:9c:8e:93:f0:22:bc:e2:a3:f7:d0:71: 48:50:62:86:9b:2f:3f:ab:e3:91:4f:e6:07:23:70: d5:77:27:15:c9:25:20:12:73:ba:56:10:06:cb:c5: 09:67:7a:8c:ab:a0:66:31:8a:3b:4f:3e:53:a4:00: 19:2e:76:2f:29:5c:37:49:1c:6b:bf:e7:11:d4:80: 63:2e:e1:62:ed:24:a4:f0:cb:6e:7b:ff:ed:83:34: d1:db:a0:ec:af:12:4a:a0:31:75:a9:02:77:b1:c7: 84:dc:21:40:65:7a:8a:3b:20:dd:bf:d6:e2:8e:1e: d6:b6:4f:bb:ee:96:e8:5f:d1:be:33:18:8e:17:0a: 2d:24:fa:10:9e:d9:f8:00:4b:d3:ae:6c:d3:9f:f5: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:F7:2E:10:45:A0:1B:64:E8:CB:04:EC:10:BC:3A:9E:18:FD:CE X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5p33LhBFoBtk6MsE7BC8Op4Y_c4.roa sbgp-ipAddrBlock: critical IPv4: 158.199.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:b5:f7:24:02:e6:49:65:38:ad:07:cc:7e:13:3a:8c:cf:ac: b5:c3:36:a0:c1:e7:15:d3:91:28:3d:f5:f6:e2:fa:ff:ad:00: b2:f0:a4:b6:8d:e6:1a:8d:e0:30:82:45:3c:8d:98:bb:d7:5a: 61:f5:14:f5:ad:0a:a0:f7:10:51:cc:9f:97:87:38:f7:d8:86: 75:48:3c:1e:57:49:6b:33:97:cf:15:d4:36:f9:8a:14:5f:73: 57:d2:13:a7:4f:36:34:da:e5:17:17:4d:56:28:00:b0:1b:91: d1:1a:93:17:d3:53:72:c6:05:83:f5:6a:24:2e:2b:58:5c:1f: d9:a6:e8:a2:1a:af:00:05:cc:d8:97:07:b4:59:3d:52:be:1d: 3d:b0:d9:b8:b7:b4:f1:00:99:86:5b:fd:4b:49:32:c9:eb:06: c2:ad:bf:6e:0c:a8:ee:1f:5e:d4:04:97:66:c2:c7:7d:b6:fb: 42:11:4a:a1:f0:9f:64:d9:ab:20:5a:ab:49:1c:5d:5d:4a:09: 44:af:b1:38:67:35:33:0c:a6:ab:9d:85:83:f8:52:f6:8c:db: 37:94:a6:71:6f:06:03:04:43:a9:af:bd:f0:71:51:8d:3a:f1: 32:6c:61:3b:ee:72:6e:98:0c:69:bb:df:bf:b6:8d:42:08:7a: 4e:bc:a1:c9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2OURGNzJFMTA0NUEw MUI2NEU4Q0IwNEVDMTBCQzNBOUUxOEZEQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEo/jEQ0/ECSI/PQH9ulabZdXDNQFIfeAY4FInCwfn+a/vQBUZ R+PRpw6p2ce2mQBvdpJpW6hMn/wVry73L2o5T5v+QcU1XjyIHHjETQ79Krz5JBwa LxP6n9hg+2HNpAu92r1K4I9kHdQDryCcjpPwIrzio/fQcUhQYoabLz+r45FP5gcj cNV3JxXJJSASc7pWEAbLxQlneoyroGYxijtPPlOkABkudi8pXDdJHGu/5xHUgGMu 4WLtJKTwy257/+2DNNHboOyvEkqgMXWpAnexx4TcIUBleoo7IN2/1uKOHta2T7vu luhf0b4zGI4XCi0k+hCe2fgAS9OubNOf9e7FAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU5p33LhBFoBtk6MsE7BC8Op4Y/c4wHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzVwMzNMaEJGb0J0azZNc0U3QkM4T3A0WV9jNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWexyAwDQYJKoZIhvcNAQELBQADggEB AGq19yQC5kllOK0HzH4TOozPrLXDNqDB5xXTkSg99fbi+v+tALLwpLaN5hqN4DCC RTyNmLvXWmH1FPWtCqD3EFHMn5eHOPfYhnVIPB5XSWszl88V1Db5ihRfc1fSE6dP NjTa5RcXTVYoALAbkdEakxfTU3LGBYP1aiQuK1hcH9mm6KIarwAFzNiXB7RZPVK+ HT2w2bi3tPEAmYZb/UtJMsnrBsKtv24MqO4fXtQEl2bCx322+0IRSqHwn2TZqyBa q0kcXV1KCUSvsThnNTMMpqudhYP4UvaM2zeUpnFvBgMEQ6mvvfBxUY068TJsYTvu cm6YDGm737+2jUIIek68ock= -----END CERTIFICATE-----Generated at Tue Apr 7 22:23:36 2026 by rpki-client