$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/Sy3yHvGPz1OC73Dv914cTNc7i3A.roa File: Sy3yHvGPz1OC73Dv914cTNc7i3A.roa (raw, json) Hash identifier: vqkehGDg/NViHW+PBQyTNE+dA6Ud9rSJaoL2toZYHks= Subject key identifier: 4B:2D:F2:1E:F1:8F:CF:53:82:EF:70:EF:F7:5E:1C:4C:D7:3B:8B:70 Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Certificate serial: 0B Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/Sy3yHvGPz1OC73Dv914cTNc7i3A.roa Signing time: Tue 31 Mar 2026 08:49:02 +0000 ROA not before: Tue 31 Mar 2026 08:49:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10001 IP address blocks: 122.49.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Validity Not Before: Mar 31 08:49:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4B2DF21EF18FCF5382EF70EFF75E1C4CD73B8B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:ca:4a:63:bc:6f:e4:58:89:23:b4:38:a3: ae:54:77:28:74:cb:16:94:db:28:c0:45:a1:38:41: 67:4a:1a:29:11:53:b0:03:a3:a4:7b:60:1d:a4:cb: 01:d6:86:bb:61:cc:c7:5b:3b:63:74:b9:c3:07:20: b8:a4:0b:9a:b2:db:88:57:fd:18:fa:34:89:55:d5: ba:a3:80:a2:bd:f9:4a:d4:53:18:38:1c:81:5e:6c: 26:bb:94:2a:47:24:f9:97:4a:20:99:29:98:37:f0: 35:32:d7:86:94:08:c0:49:ec:fe:f5:16:cb:ab:ca: 8d:f8:c1:c4:d3:ad:a5:8a:7e:fd:63:ad:1d:64:fd: fe:8a:dd:18:d7:6b:22:9d:09:cc:96:1d:06:f7:32: 85:9d:13:c9:2d:fe:5d:75:8f:86:26:2b:45:59:88: bd:21:b4:07:ca:b9:7a:13:e6:e5:2b:01:da:28:4a: ff:df:1c:42:02:fe:e6:a0:65:66:93:c5:71:0e:a3: 98:b7:5a:fa:b6:b8:b2:37:8e:6d:23:99:14:02:a7: 9a:be:53:bc:d8:28:83:c4:bd:e9:0e:b8:d0:0c:43: 41:09:2d:a7:92:ce:1e:08:1e:eb:21:c7:e6:e4:9d: 82:52:31:75:f4:7d:db:a0:f3:8c:6f:87:63:31:f1: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:F2:1E:F1:8F:CF:53:82:EF:70:EF:F7:5E:1C:4C:D7:3B:8B:70 X509v3 Authority Key Identifier: keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/Sy3yHvGPz1OC73Dv914cTNc7i3A.roa sbgp-ipAddrBlock: critical IPv4: 122.49.192.0/21 Signature Algorithm: sha256WithRSAEncryption 44:08:42:16:d5:35:9e:62:f5:6d:64:fc:77:57:4f:0f:65:c6: 8e:98:38:d4:54:64:45:17:34:d8:81:3f:6f:a3:14:51:77:c0: f7:1c:2c:c0:19:58:45:8d:32:c8:da:0a:17:bc:09:38:2b:f2: b8:be:ca:c2:08:ed:7d:f2:f1:9c:dc:a9:2b:e7:cc:15:5f:ac: 60:4a:88:d3:c4:46:6c:2a:92:0b:13:39:03:61:a6:65:5a:0c: 5a:ce:1e:60:94:7b:ee:cd:46:b5:d2:64:ba:a7:59:f0:f6:3a: 2c:64:cf:2d:f9:71:b6:7f:8e:78:6e:29:79:ee:76:25:7c:ab: 77:0c:82:c0:30:27:f7:66:a3:da:99:6e:5a:80:d6:2b:e5:0b: 34:a5:75:65:d2:5c:10:73:3a:4b:a8:9c:26:fb:72:a7:48:fb: f6:af:33:62:22:d8:a6:44:54:97:5f:b2:f4:f1:b3:44:57:70: fd:68:70:b4:fd:32:2b:ff:f6:7d:05:d4:2a:72:fa:4d:4f:11: 8a:06:8a:50:c5:5b:bb:ac:8a:cc:6c:30:50:12:67:94:2c:4e: 02:37:79:1f:d9:84:49:aa:96:43:36:e8:86:ca:51:8f:5c:6a: d6:74:70:5e:f6:2f:cd:f1:53:9c:cc:46:c9:c3:15:aa:28:7c: 15:51:9e:11 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTkw QkZENjNGODY3NUI3QjQ0NTYzNjIzRTQyRjcyOTI1NkNBMUU4MB4XDTI2MDMzMTA4 NDkwMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEIyREYyMUVGMThGQ0Y1 MzgyRUY3MEVGRjc1RTFDNENENzNCOEI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALFsykpjvG/kWIkjtDijrlR3KHTLFpTbKMBFoThBZ0oaKRFTsAOj pHtgHaTLAdaGu2HMx1s7Y3S5wwcguKQLmrLbiFf9GPo0iVXVuqOAor35StRTGDgc gV5sJruUKkck+ZdKIJkpmDfwNTLXhpQIwEns/vUWy6vKjfjBxNOtpYp+/WOtHWT9 /ordGNdrIp0JzJYdBvcyhZ0TyS3+XXWPhiYrRVmIvSG0B8q5ehPm5SsB2ihK/98c QgL+5qBlZpPFcQ6jmLda+ra4sjeObSOZFAKnmr5TvNgog8S96Q640AxDQQktp5LO Hgge6yHH5uSdglIxdfR926DzjG+HYzHx+VsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRLLfIe8Y/PU4LvcO/3XhxM1zuLcDAfBgNVHSMEGDAWgBS5kL/WP4Z1t7RFY2I+ QvcpJWyh6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDI1L3VaQ18xai1HZGJlMFJXTmlQa0wzS1NWc29lZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VaQ18xai1HZGJlMFJXTmlQa0wzS1NW c29lZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80MjUvU3kzeUh2R1B6MU9DNzNEdjkxNGNUTmM3aTNBLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3oxwDANBgkqhkiG9w0BAQsFAAOCAQEA RAhCFtU1nmL1bWT8d1dPD2XGjpg41FRkRRc02IE/b6MUUXfA9xwswBlYRY0yyNoK F7wJOCvyuL7KwgjtffLxnNypK+fMFV+sYEqI08RGbCqSCxM5A2GmZVoMWs4eYJR7 7s1GtdJkuqdZ8PY6LGTPLflxtn+OeG4pee52JXyrdwyCwDAn92aj2pluWoDWK+UL NKV1ZdJcEHM6S6icJvtyp0j79q8zYiLYpkRUl1+y9PGzRFdw/WhwtP0yK//2fQXU KnL6TU8RigaKUMVbu6yKzGwwUBJnlCxOAjd5H9mESaqWQzbohspRj1xq1nRwXvYv zfFTnMxGycMVqih8FVGeEQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:48 2026 by rpki-client