$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/4HASGRag3LJ-peWiHHRkgiUd-hg.roa File: 4HASGRag3LJ-peWiHHRkgiUd-hg.roa (raw, json) Hash identifier: 3AT5ngxqXNRZZcnaJ8s2m2bYjeVUEunY4HNelU1wW6g= Subject key identifier: E0:70:12:19:16:A0:DC:B2:7E:A5:E5:A2:1C:74:64:82:25:1D:FA:18 Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 0152 Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/4HASGRag3LJ-peWiHHRkgiUd-hg.roa Signing time: Tue 31 Mar 2026 07:30:23 +0000 ROA not before: Tue 31 Mar 2026 07:30:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9607 IP address blocks: 210.231.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Mar 31 07:30:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E070121916A0DCB27EA5E5A21C746482251DFA18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1c:5f:cd:f9:7e:d8:07:7b:dc:00:4d:a1:21: 53:57:bb:1d:ac:30:be:36:11:99:d6:fe:1d:8a:55: 2b:c8:97:da:c4:78:a0:9f:8a:7d:a8:f3:61:1a:b4: 79:b0:da:96:f9:b7:c0:b4:6a:5e:44:86:3d:1c:1a: 4a:ff:18:00:e1:f6:d0:61:07:b4:ba:da:e7:50:31: 6e:5a:1f:da:99:94:a3:31:78:59:1e:2f:9a:87:31: ef:8c:f4:e6:22:ce:89:c8:1e:96:7f:7f:3f:9a:b4: 1e:9a:5d:47:e0:7b:6b:59:a1:e4:aa:79:ad:c9:7a: 3c:1a:33:07:3f:cc:3f:83:0d:91:a9:04:cf:9c:b8: de:01:7c:60:c6:80:99:33:c9:3a:6e:36:34:24:a6: 5a:04:4d:fa:b8:36:a2:ca:39:9a:b6:ec:0d:49:65: c9:6f:01:33:5e:f0:70:30:53:13:2f:60:06:81:78: 72:de:d9:c1:dd:53:36:e3:aa:8c:70:73:23:0d:6c: a3:ff:e1:97:1e:a4:83:98:98:f3:e4:8b:7a:82:98: ae:84:6c:f7:f4:9c:04:2f:56:1d:cd:85:3d:e7:49: c9:e0:71:74:83:04:7b:18:17:80:79:d5:d9:d7:e5: 3e:4d:33:b1:5f:23:e4:a3:27:ae:15:cc:d1:27:4e: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:12:19:16:A0:DC:B2:7E:A5:E5:A2:1C:74:64:82:25:1D:FA:18 X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/4HASGRag3LJ-peWiHHRkgiUd-hg.roa sbgp-ipAddrBlock: critical IPv4: 210.231.208.0/22 Signature Algorithm: sha256WithRSAEncryption 92:72:a7:85:a7:31:2e:ec:8a:29:da:c5:e9:2f:62:f4:ba:7c: 43:f4:84:a9:b4:82:f1:98:14:83:c8:9b:8a:45:bf:67:d9:64: 31:4c:e2:a4:29:a2:92:60:27:6a:8c:3c:49:47:c2:d0:76:09: e8:4e:74:43:20:d3:66:df:7b:d9:95:c1:12:1d:7d:69:98:b4: 9f:79:8d:22:dc:81:ef:52:64:fb:94:24:09:15:c1:0c:2d:fd: c7:37:01:67:e7:27:f1:5d:bd:d8:89:cf:54:cf:bb:da:6b:f4: 95:88:91:5f:65:23:9e:6f:69:c5:d8:be:7e:01:cf:b0:99:61: 4a:a5:1e:78:69:7e:f1:96:9d:29:b5:53:eb:95:5a:a9:75:5b: e4:89:78:6c:31:bf:a3:b1:ba:fd:73:28:4e:df:ca:07:96:0d: ae:3f:2e:a4:b0:69:b7:29:fa:91:d2:24:12:6c:a5:04:ce:ac: b5:00:e6:84:51:07:cb:f7:2c:00:80:18:69:28:21:73:6c:6c: e8:ee:66:70:47:49:67:e9:81:14:28:5f:4c:d7:cc:fd:c0:00: 90:70:f8:6f:60:da:1f:78:73:f4:bc:f0:16:7f:dd:4a:c3:c4: 85:90:86:f9:2c:00:cf:89:a2:e3:8c:6b:1e:95:9d:97:b0:07: f3:fe:cd:54 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw NzMwMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUwNzAxMjE5MTZBMERD QjI3RUE1RTVBMjFDNzQ2NDgyMjUxREZBMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwHF/N+X7YB3vcAE2hIVNXux2sML42EZnW/h2KVSvIl9rEeKCf in2o82EatHmw2pb5t8C0al5Ehj0cGkr/GADh9tBhB7S62udQMW5aH9qZlKMxeFke L5qHMe+M9OYizonIHpZ/fz+atB6aXUfge2tZoeSqea3JejwaMwc/zD+DDZGpBM+c uN4BfGDGgJkzyTpuNjQkploETfq4NqLKOZq27A1JZclvATNe8HAwUxMvYAaBeHLe 2cHdUzbjqoxwcyMNbKP/4ZcepIOYmPPki3qCmK6EbPf0nAQvVh3NhT3nScngcXSD BHsYF4B51dnX5T5NM7FfI+SjJ64VzNEnTjg9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4HASGRag3LJ+peWiHHRkgiUd+hgwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzU0LzRIQVNHUmFnM0xKLXBlV2lISFJrZ2lVZC1oZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALS59AwDQYJKoZIhvcNAQELBQADggEB AJJyp4WnMS7siinaxekvYvS6fEP0hKm0gvGYFIPIm4pFv2fZZDFM4qQpopJgJ2qM PElHwtB2CehOdEMg02bfe9mVwRIdfWmYtJ95jSLcge9SZPuUJAkVwQwt/cc3AWfn J/FdvdiJz1TPu9pr9JWIkV9lI55vacXYvn4Bz7CZYUqlHnhpfvGWnSm1U+uVWql1 W+SJeGwxv6Oxuv1zKE7fygeWDa4/LqSwabcp+pHSJBJspQTOrLUA5oRRB8v3LACA GGkoIXNsbOjuZnBHSWfpgRQoX0zXzP3AAJBw+G9g2h94c/S88BZ/3UrDxIWQhvks AM+JouOMax6VnZewB/P+zVQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:15 2026 by rpki-client