$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3408/AcV78l1TWeZzFKL1UkQ82Qq9I8A.roa File: AcV78l1TWeZzFKL1UkQ82Qq9I8A.roa (raw, json) Hash identifier: gdYvaCXHXEg/OA5vYDrHvqu2w0QtbgmWYAJHM2cMVq0= Subject key identifier: 01:C5:7B:F2:5D:53:59:E6:73:14:A2:F5:52:44:3C:D9:0A:BD:23:C0 Certificate issuer: /CN=D21628E1CE4C92C95144611EBA74E1A6B5B4A169 Certificate serial: 31 Authority key identifier: D2:16:28:E1:CE:4C:92:C9:51:44:61:1E:BA:74:E1:A6:B5:B4:A1:69 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/AcV78l1TWeZzFKL1UkQ82Qq9I8A.roa Signing time: Tue 31 Mar 2026 08:32:10 +0000 ROA not before: Tue 31 Mar 2026 08:32:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7529 IP address blocks: 202.17.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21628E1CE4C92C95144611EBA74E1A6B5B4A169 Validity Not Before: Mar 31 08:32:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=01C57BF25D5359E67314A2F552443CD90ABD23C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2e:45:f5:c7:50:60:93:a1:64:74:8b:6c:10: 26:c3:29:1e:28:7f:6f:3e:b4:ef:17:04:c4:a9:fb: 4d:77:80:bd:99:cf:dc:86:85:bc:82:48:5d:31:2e: 6f:c7:6f:e8:89:95:00:4a:48:24:40:db:1f:a7:4e: 25:10:3c:94:f9:da:c3:b1:be:44:0a:01:cf:6c:dd: 58:6a:eb:6f:a3:10:25:d9:11:90:a8:ed:58:6e:dc: 9d:4f:97:45:69:0a:e5:04:37:c7:71:1d:7d:4f:59: f2:4a:8f:f6:e8:9a:82:ae:23:f1:b7:d5:31:0a:fb: 10:b8:4e:8a:5d:26:27:92:29:35:c5:03:99:29:ee: b1:0d:8b:07:91:0b:0d:7a:a9:80:d7:d9:1b:85:da: be:4c:9e:0d:e7:5b:a7:f4:a0:21:a3:89:04:75:68: 5f:d7:65:38:f1:e7:ee:9d:1e:93:41:d8:eb:9a:23: 20:59:cb:a7:1a:be:dc:16:64:4d:86:27:f1:4c:ba: 1e:38:d3:cd:7f:f6:57:5c:9f:cf:b9:85:f5:5d:e1: 11:96:2d:8b:ab:98:41:64:4f:5d:8a:30:41:c8:92: 47:63:45:f9:2b:51:54:33:e5:4d:3b:82:e1:0b:7a: 12:20:1c:9e:31:fd:be:b9:21:20:52:16:1c:e8:9b: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:7B:F2:5D:53:59:E6:73:14:A2:F5:52:44:3C:D9:0A:BD:23:C0 X509v3 Authority Key Identifier: keyid:D2:16:28:E1:CE:4C:92:C9:51:44:61:1E:BA:74:E1:A6:B5:B4:A1:69 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/0hYo4c5MkslRRGEeunThprW0oWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0hYo4c5MkslRRGEeunThprW0oWk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3408/AcV78l1TWeZzFKL1UkQ82Qq9I8A.roa sbgp-ipAddrBlock: critical IPv4: 202.17.189.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b4:80:9c:d5:f1:63:a0:21:da:a7:41:51:30:b0:cb:5a:13: d7:ef:de:a1:26:5e:f7:75:8e:1e:90:4c:dd:72:58:ed:43:71: c5:dd:ce:02:bf:31:6d:06:97:31:e6:f4:48:72:70:c2:2e:0e: 57:bb:3c:c0:29:5f:99:5e:0c:a9:ee:04:3c:40:68:cd:56:f8: ed:3b:e7:40:43:22:7a:19:2e:d9:1e:89:47:dc:11:13:46:f7: 83:6f:b4:6d:47:28:82:70:2c:9e:cd:86:e6:b6:69:d4:b6:d8: 06:0c:e9:5f:54:02:3f:cb:dc:f2:0e:e9:0e:92:48:97:50:10: 63:54:be:0d:87:32:65:42:6f:77:a7:60:09:02:8a:3b:b6:38: 10:99:a3:99:b7:9d:8f:14:91:04:13:90:a0:9e:63:61:ae:fa: 6f:6e:59:c5:0e:d7:cf:5a:d1:17:9b:6f:eb:28:4c:52:06:c7: 50:6b:18:9e:dc:1e:2b:cd:7d:8c:a3:50:c8:63:72:df:0e:78: 61:67:4a:5a:7c:fc:4f:bf:61:9d:a0:12:aa:44:8a:d9:c5:1b: 8e:a6:38:b7:83:05:81:60:fd:92:f2:71:1a:e8:fb:a2:77:51: af:45:6d:f9:e5:3d:30:0d:dd:aa:53:b0:10:ee:2a:00:59:d5: f5:d9:9a:e5 -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjE2 MjhFMUNFNEM5MkM5NTE0NDYxMUVCQTc0RTFBNkI1QjRBMTY5MB4XDTI2MDMzMTA4 MzIxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDFDNTdCRjI1RDUzNTlF NjczMTRBMkY1NTI0NDNDRDkwQUJEMjNDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOkuRfXHUGCToWR0i2wQJsMpHih/bz607xcExKn7TXeAvZnP3IaF vIJIXTEub8dv6ImVAEpIJEDbH6dOJRA8lPnaw7G+RAoBz2zdWGrrb6MQJdkRkKjt WG7cnU+XRWkK5QQ3x3EdfU9Z8kqP9uiagq4j8bfVMQr7ELhOil0mJ5IpNcUDmSnu sQ2LB5ELDXqpgNfZG4XavkyeDedbp/SgIaOJBHVoX9dlOPHn7p0ek0HY65ojIFnL pxq+3BZkTYYn8Uy6HjjTzX/2V1yfz7mF9V3hEZYti6uYQWRPXYowQciSR2NF+StR VDPlTTuC4Qt6EiAcnjH9vrkhIFIWHOibaE0CAwEAAaOCAdswggHXMB0GA1UdDgQW BBQBxXvyXVNZ5nMUovVSRDzZCr0jwDAfBgNVHSMEGDAWgBTSFijhzkySyVFEYR66 dOGmtbShaTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzQwOC8waFlvNGM1TWtzbFJSR0VldW5UaHByVzBvV2suY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8waFlvNGM1TWtzbFJSR0VldW5UaHBy VzBvV2suY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzQwOC9BY1Y3OGwxVFdlWnpGS0wxVWtRODJRcTlJOEEucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyhG9MA0GCSqGSIb3DQEBCwUAA4IB AQCBtICc1fFjoCHap0FRMLDLWhPX796hJl73dY4ekEzdcljtQ3HF3c4CvzFtBpcx 5vRIcnDCLg5XuzzAKV+ZXgyp7gQ8QGjNVvjtO+dAQyJ6GS7ZHolH3BETRveDb7Rt RyiCcCyezYbmtmnUttgGDOlfVAI/y9zyDukOkkiXUBBjVL4NhzJlQm93p2AJAoo7 tjgQmaOZt52PFJEEE5CgnmNhrvpvblnFDtfPWtEXm2/rKExSBsdQaxie3B4rzX2M o1DIY3LfDnhhZ0pafPxPv2GdoBKqRIrZxRuOpji3gwWBYP2S8nEa6Puid1GvRW35 5T0wDd2qU7AQ7ioAWdX12Zrl -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:47 2026 by rpki-client