$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/2LLnOo0tX2hcB7rnP9hk6ugVzFM.roa File: 2LLnOo0tX2hcB7rnP9hk6ugVzFM.roa (raw, json) Hash identifier: XtNJjQVRiayy04iGd5k9czE/U1X4yNJszQMeCvJWUAU= Subject key identifier: D8:B2:E7:3A:8D:2D:5F:68:5C:07:BA:E7:3F:D8:64:EA:E8:15:CC:53 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 86 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/2LLnOo0tX2hcB7rnP9hk6ugVzFM.roa Signing time: Tue 31 Mar 2026 08:24:32 +0000 ROA not before: Tue 31 Mar 2026 08:24:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 180.214.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D8B2E73A8D2D5F685C07BAE73FD864EAE815CC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:95:d1:f3:be:01:3c:a2:2d:c7:9d:ca:88: aa:d3:0f:ff:3f:13:e7:a2:8e:70:21:1a:55:74:3f: c1:e8:20:80:a8:42:0a:9a:7a:57:fb:f0:70:58:09: d9:63:f1:19:57:4c:f8:9b:cb:0b:df:7c:b8:b0:89: 50:e3:85:15:8c:89:44:01:9a:9d:58:1a:6c:75:4c: 3c:43:f5:4f:a6:bb:de:82:03:81:15:6c:e6:51:fa: 16:c5:61:79:03:0f:84:8f:01:b5:b5:29:7f:fd:38: d7:71:4f:e8:b0:68:f0:04:ef:a7:c7:53:64:d5:91: a3:c4:88:ab:bc:f9:b3:5c:36:53:e4:70:42:c5:65: b3:36:d6:cb:9b:93:30:41:52:cb:65:e7:74:fb:2b: a2:b0:3c:a2:fe:e0:09:b9:1b:8d:3a:79:95:ae:24: 58:cc:28:79:72:23:af:69:fd:af:0c:32:de:6b:ee: 9d:a3:da:78:58:d2:ef:a7:55:67:61:cd:07:ab:fe: 07:91:bb:77:de:83:64:03:d5:e2:9b:a1:51:6a:d0: 66:ef:c0:3b:ef:2d:d9:b7:ff:dc:ec:3d:48:b6:a9: ce:20:66:af:cd:8b:7b:13:54:60:e6:5a:5b:80:9d: 3a:17:57:75:65:3f:7a:8e:41:94:ab:2f:eb:43:06: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:E7:3A:8D:2D:5F:68:5C:07:BA:E7:3F:D8:64:EA:E8:15:CC:53 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/2LLnOo0tX2hcB7rnP9hk6ugVzFM.roa sbgp-ipAddrBlock: critical IPv4: 180.214.224.0/21 Signature Algorithm: sha256WithRSAEncryption 39:a2:c9:60:8a:16:77:ef:df:c0:5e:c9:8d:f7:bb:26:aa:ef: 2b:be:1a:06:c9:3e:5c:1f:1c:5d:1e:25:cf:0a:d5:45:38:1d: b8:98:f3:0b:e6:17:00:57:4c:d1:57:2e:7c:57:99:9f:65:67: 84:89:aa:a9:df:1d:85:e8:85:db:8d:4e:a7:50:0e:e4:14:a4: 5c:b9:c0:bc:cf:25:fd:03:37:5d:83:a8:ca:c4:f9:a0:44:b1: 75:68:c1:31:27:9d:41:29:5d:1b:17:87:7b:d4:2b:c7:d7:b3: 5e:67:75:0b:d6:05:c9:5e:0d:2d:39:0e:be:12:73:c5:db:0a: 4e:00:74:e5:a5:44:bc:2c:9b:1f:ce:74:cb:df:dd:40:13:bd: 73:4f:18:84:ae:01:bc:3c:64:26:f7:db:3c:a7:c9:23:76:c6: 1c:bc:86:bd:b3:1d:28:be:e1:f8:48:08:37:cb:f5:4d:41:82: ac:5d:5a:79:8b:13:c3:ce:c1:4f:4a:73:26:ed:13:79:1f:a2: 6d:06:8d:a0:0a:ab:24:88:fd:40:52:8f:47:2c:d3:66:92:eb: cc:bd:e0:37:2c:f5:2f:10:10:94:04:06:29:2f:a3:6c:38:9f: 37:04:e3:2b:2e:41:cc:8a:1d:f2:b8:c7:16:5c:a7:38:5f:95: a4:9a:19:b6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4QjJFNzNBOEQyRDVG Njg1QzA3QkFFNzNGRDg2NEVBRTgxNUNDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCydZXR874BPKItx53KiKrTD/8/E+eijnAhGlV0P8HoIICoQgqa elf78HBYCdlj8RlXTPibywvffLiwiVDjhRWMiUQBmp1YGmx1TDxD9U+mu96CA4EV bOZR+hbFYXkDD4SPAbW1KX/9ONdxT+iwaPAE76fHU2TVkaPEiKu8+bNcNlPkcELF ZbM21subkzBBUstl53T7K6KwPKL+4Am5G406eZWuJFjMKHlyI69p/a8MMt5r7p2j 2nhY0u+nVWdhzQer/geRu3feg2QD1eKboVFq0GbvwDvvLdm3/9zsPUi2qc4gZq/N i3sTVGDmWluAnToXV3VlP3qOQZSrL+tDBq5FAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2LLnOo0tX2hcB7rnP9hk6ugVzFMwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0LzJMTG5PbzB0WDJoY0I3cm5QOWhrNnVnVnpGTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO01uAwDQYJKoZIhvcNAQELBQADggEB ADmiyWCKFnfv38BeyY33uyaq7yu+GgbJPlwfHF0eJc8K1UU4HbiY8wvmFwBXTNFX LnxXmZ9lZ4SJqqnfHYXohduNTqdQDuQUpFy5wLzPJf0DN12DqMrE+aBEsXVowTEn nUEpXRsXh3vUK8fXs15ndQvWBcleDS05Dr4Sc8XbCk4AdOWlRLwsmx/OdMvf3UAT vXNPGISuAbw8ZCb32zynySN2xhy8hr2zHSi+4fhICDfL9U1BgqxdWnmLE8POwU9K cybtE3kfom0GjaAKqySI/UBSj0cs02aS68y94Dcs9S8QEJQEBikvo2w4nzcE4ysu QcyKHfK4xxZcpzhflaSaGbY= -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:04 2026 by rpki-client