$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3148/N8aa6l9BLJp4uk_UTlmlcB9uJlA.roa File: N8aa6l9BLJp4uk_UTlmlcB9uJlA.roa (raw, json) Hash identifier: 0jSI3+LiksmTPp2e6AEHhfOSMzePM1n9utsE9knTtGQ= Subject key identifier: 37:C6:9A:EA:5F:41:2C:9A:78:BA:4F:D4:4E:59:A5:70:1F:6E:26:50 Certificate issuer: /CN=1A58DF54F62A6833085C76FA6198598BF904C0A3 Certificate serial: 2D Authority key identifier: 1A:58:DF:54:F6:2A:68:33:08:5C:76:FA:61:98:59:8B:F9:04:C0:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/N8aa6l9BLJp4uk_UTlmlcB9uJlA.roa Signing time: Tue 31 Mar 2026 08:33:43 +0000 ROA not before: Tue 31 Mar 2026 08:33:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17683 IP address blocks: 202.11.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A58DF54F62A6833085C76FA6198598BF904C0A3 Validity Not Before: Mar 31 08:33:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=37C69AEA5F412C9A78BA4FD44E59A5701F6E2650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:29:eb:b3:73:85:94:d4:f9:43:d2:c4:a1: 8b:0b:d9:12:5e:6c:30:50:eb:c1:eb:b1:b5:bb:17: c6:1d:79:c9:02:d9:56:09:1c:a9:48:25:54:66:9f: a2:4f:c9:66:f7:a9:0c:c1:83:c5:6f:61:47:7a:01: d7:c8:c2:37:07:3c:42:c0:83:92:fe:55:e0:d6:22: 46:8c:a3:79:fb:e0:ba:0c:ae:28:53:64:d0:81:41: 9b:e0:c4:ce:06:ea:9c:38:b1:c9:2f:f6:a5:4f:9e: 4c:74:b3:c9:bd:10:47:0f:ac:50:c3:52:1c:74:b5: 76:be:0e:f0:4a:b2:e3:e8:b9:dc:4e:b3:cd:78:53: 9f:7f:38:ff:43:5c:47:f5:d6:fa:81:1d:3a:ce:51: cb:e5:11:d0:9d:12:b6:80:de:a0:1d:8c:4a:7e:3a: 73:ef:b3:f0:3c:69:77:a2:04:55:00:a2:ea:43:c4: c9:24:be:3c:a1:0a:70:87:a4:64:43:d2:03:22:ef: 21:95:01:42:b1:09:fb:8c:df:91:90:64:c8:1d:58: 2d:5f:05:c6:38:57:3d:2b:89:83:35:8b:e8:a2:b6: 35:90:51:2e:0f:fd:fb:04:9f:ca:b0:12:69:68:79: c2:ae:32:41:65:d4:87:2c:10:62:c0:ef:40:14:72: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C6:9A:EA:5F:41:2C:9A:78:BA:4F:D4:4E:59:A5:70:1F:6E:26:50 X509v3 Authority Key Identifier: keyid:1A:58:DF:54:F6:2A:68:33:08:5C:76:FA:61:98:59:8B:F9:04:C0:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/N8aa6l9BLJp4uk_UTlmlcB9uJlA.roa sbgp-ipAddrBlock: critical IPv4: 202.11.156.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:c7:5e:b8:d9:35:c7:be:22:97:ff:b1:20:c3:28:1b:1f:a9: b3:48:7c:eb:0a:6e:e7:53:a4:14:d3:dc:6b:ac:27:66:f7:5a: eb:de:50:95:cb:4d:a7:72:9c:b7:74:19:ea:ba:2d:ef:af:ea: 32:3e:82:aa:d2:b6:91:47:9a:d2:a4:dd:51:e0:b8:59:02:a8: 49:23:f3:0a:10:65:78:90:4c:04:31:66:7a:a3:0b:b1:c0:36: a2:2f:e6:ca:3b:f6:52:72:bc:6e:73:0c:fe:15:e7:7c:4f:b6: 84:f9:52:15:0d:76:6f:f5:cb:c7:6d:ea:5f:d0:bc:60:a1:5c: df:ac:fc:af:a9:ec:53:96:31:13:bd:bd:05:7b:64:93:1a:e0: 16:02:98:f8:08:6f:d5:ad:44:82:1b:7d:bc:bd:06:a5:db:90: a9:25:ba:5b:29:1c:a6:7c:8f:05:40:86:de:ac:09:ff:c5:ab: de:58:8c:4c:10:ba:65:4f:be:18:f0:e0:db:3a:f4:4d:56:fd: b9:d0:66:d0:d7:44:9f:df:92:95:43:07:d6:8f:3f:2b:b7:27: 6b:98:48:21:01:42:5b:6d:53:78:e9:23:98:50:fe:a1:0c:56: a9:ca:6c:18:3f:a7:42:b2:77:5e:40:86:3c:77:50:a4:2c:6d: 04:ce:96:ed -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQTU4 REY1NEY2MkE2ODMzMDg1Qzc2RkE2MTk4NTk4QkY5MDRDMEEzMB4XDTI2MDMzMTA4 MzM0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzdDNjlBRUE1RjQxMkM5 QTc4QkE0RkQ0NEU1OUE1NzAxRjZFMjY1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKobKeuzc4WU1PlD0sShiwvZEl5sMFDrweuxtbsXxh15yQLZVgkc qUglVGafok/JZvepDMGDxW9hR3oB18jCNwc8QsCDkv5V4NYiRoyjefvgugyuKFNk 0IFBm+DEzgbqnDixyS/2pU+eTHSzyb0QRw+sUMNSHHS1dr4O8Eqy4+i53E6zzXhT n384/0NcR/XW+oEdOs5Ry+UR0J0StoDeoB2MSn46c++z8Dxpd6IEVQCi6kPEySS+ PKEKcIekZEPSAyLvIZUBQrEJ+4zfkZBkyB1YLV8FxjhXPSuJgzWL6KK2NZBRLg/9 +wSfyrASaWh5wq4yQWXUhywQYsDvQBRyqesCAwEAAaOCAdswggHXMB0GA1UdDgQW BBQ3xprqX0Esmni6T9ROWaVwH24mUDAfBgNVHSMEGDAWgBQaWN9U9ipoMwhcdvph mFmL+QTAozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzE0OC9HbGpmVlBZcWFETUlYSGI2WVpoWmlfa0V3S00uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9HbGpmVlBZcWFETUlYSGI2WVpoWmlf a0V3S00uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzE0OC9OOGFhNmw5QkxKcDR1a19VVGxtbGNCOXVKbEEucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCygucMA0GCSqGSIb3DQEBCwUAA4IB AQBMx1642TXHviKX/7EgwygbH6mzSHzrCm7nU6QU09xrrCdm91rr3lCVy02ncpy3 dBnqui3vr+oyPoKq0raRR5rSpN1R4LhZAqhJI/MKEGV4kEwEMWZ6owuxwDaiL+bK O/ZScrxucwz+Fed8T7aE+VIVDXZv9cvHbepf0LxgoVzfrPyvqexTljETvb0Fe2ST GuAWApj4CG/VrUSCG328vQal25CpJbpbKRymfI8FQIberAn/xaveWIxMELplT74Y 8ODbOvRNVv250GbQ10Sf35KVQwfWjz8rtydrmEghAUJbbVN46SOYUP6hDFapymwY P6dCsndeQIY8d1CkLG0Ezpbt -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:08 2026 by rpki-client