$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/ClRmK4bA7iwSbFTqkrXxOm1Kuos.roa File: ClRmK4bA7iwSbFTqkrXxOm1Kuos.roa (raw, json) Hash identifier: 6AXQBENaI/nXNdJxDxmGSp+OWSMH3B8qUEe6U2Pj+X0= Subject key identifier: 0A:54:66:2B:86:C0:EE:2C:12:6C:54:EA:92:B5:F1:3A:6D:4A:BA:8B Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 8B Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ClRmK4bA7iwSbFTqkrXxOm1Kuos.roa Signing time: Tue 31 Mar 2026 08:24:35 +0000 ROA not before: Tue 31 Mar 2026 08:24:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 203.217.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0A54662B86C0EE2C126C54EA92B5F13A6D4ABA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:a3:3a:a7:fb:5c:ba:c7:a0:64:d9:c2:ab: 69:cb:f8:44:d9:23:49:16:e6:8f:2b:f2:d9:2c:65: 9f:11:eb:56:21:36:77:ec:c0:2e:ef:14:c2:db:34: 23:42:94:0e:88:77:ac:c3:10:ca:ab:30:5f:c8:8a: ad:47:e0:e7:20:f9:65:40:c8:64:e4:54:f2:f6:2c: 27:3f:5d:35:19:13:b5:82:89:79:82:e3:3e:d0:61: c9:c9:00:17:22:f2:53:b4:47:95:28:d5:8c:48:0b: 50:56:00:0c:94:41:bf:2e:bd:5a:0d:d4:2a:26:1a: f0:f4:23:8a:80:73:21:74:5d:3a:ec:08:2f:42:84: 75:dd:8a:42:62:c4:38:f2:ed:a1:12:3d:03:f4:dc: 42:ff:e0:a2:fd:69:b8:0c:b7:e2:90:08:1b:2a:42: 2d:a6:31:4c:a7:a2:01:96:33:ad:4b:1b:f2:39:b8: 27:94:2d:50:94:0f:55:d5:e5:f3:55:5a:c0:21:85: fb:85:c5:97:91:f5:8f:d3:70:5a:a6:2d:37:1b:42: b1:36:ae:91:d1:04:ba:74:cd:5c:5b:1a:d4:4b:3d: 3c:ae:83:5b:b2:f8:f3:c7:df:17:eb:c0:01:31:45: 33:12:57:42:24:24:22:97:83:5c:32:a3:88:88:c6: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:66:2B:86:C0:EE:2C:12:6C:54:EA:92:B5:F1:3A:6D:4A:BA:8B X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ClRmK4bA7iwSbFTqkrXxOm1Kuos.roa sbgp-ipAddrBlock: critical IPv4: 203.217.156.0/22 Signature Algorithm: sha256WithRSAEncryption 82:37:b9:b5:a7:e1:b2:37:a8:ed:0e:7e:bc:c5:29:8e:2c:ac: d2:2c:25:7b:68:33:a4:3a:01:56:2b:5d:a3:9e:c9:ae:1f:80: 0a:18:a7:ff:d5:5c:d7:08:93:09:ff:61:ca:a2:53:bc:b2:9b: fa:1e:54:d9:65:5a:ed:3e:8e:4f:b1:2b:16:cf:cc:cc:e1:b7: 5e:a6:61:b7:cf:8a:1f:f1:ba:e1:d0:9c:c5:13:bf:62:dd:15: 8e:67:6e:50:34:fe:4b:5a:cd:e1:60:1c:c0:95:1a:80:3e:c1: ad:7c:43:e5:ee:46:9f:44:93:54:35:24:26:c3:1a:89:c6:c5: 00:0f:ec:f1:49:00:64:fd:a6:fb:db:9b:6b:f5:94:68:43:af: eb:c3:11:23:1c:4f:f5:c1:0a:20:87:df:50:89:9e:80:d8:e2: 42:d6:52:89:5e:b2:35:d0:8e:e9:98:75:72:12:08:2c:b9:3c: 11:31:2a:53:f0:f0:93:4c:89:7b:a7:61:0a:2d:61:68:12:6f: 87:d2:ba:f1:7b:13:f4:09:0a:9f:a4:12:2b:68:c4:93:3f:84: bd:b7:21:31:ce:5d:d3:a1:4d:02:bf:81:1b:ec:84:d0:e8:50: eb:0f:55:38:6b:44:f8:69:a3:ca:e0:3c:7e:7a:70:7a:74:6c: fd:be:80:b7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBNTQ2NjJCODZDMEVF MkMxMjZDNTRFQTkyQjVGMTNBNkQ0QUJBOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu1qM6p/tcusegZNnCq2nL+ETZI0kW5o8r8tksZZ8R61YhNnfs wC7vFMLbNCNClA6Id6zDEMqrMF/Iiq1H4Ocg+WVAyGTkVPL2LCc/XTUZE7WCiXmC 4z7QYcnJABci8lO0R5Uo1YxIC1BWAAyUQb8uvVoN1ComGvD0I4qAcyF0XTrsCC9C hHXdikJixDjy7aESPQP03EL/4KL9abgMt+KQCBsqQi2mMUynogGWM61LG/I5uCeU LVCUD1XV5fNVWsAhhfuFxZeR9Y/TcFqmLTcbQrE2rpHRBLp0zVxbGtRLPTyug1uy +PPH3xfrwAExRTMSV0IkJCKXg1wyo4iIxsUjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUClRmK4bA7iwSbFTqkrXxOm1KuoswHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L0NsUm1LNGJBN2l3U2JGVHFrclh4T20xS3Vvcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALL2ZwwDQYJKoZIhvcNAQELBQADggEB AII3ubWn4bI3qO0OfrzFKY4srNIsJXtoM6Q6AVYrXaOeya4fgAoYp//VXNcIkwn/ YcqiU7yym/oeVNllWu0+jk+xKxbPzMzht16mYbfPih/xuuHQnMUTv2LdFY5nblA0 /ktazeFgHMCVGoA+wa18Q+XuRp9Ek1Q1JCbDGonGxQAP7PFJAGT9pvvbm2v1lGhD r+vDESMcT/XBCiCH31CJnoDY4kLWUolesjXQjumYdXISCCy5PBExKlPw8JNMiXun YQotYWgSb4fSuvF7E/QJCp+kEitoxJM/hL23ITHOXdOhTQK/gRvshNDoUOsPVThr RPhpo8rgPH56cHp0bP2+gLc= -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:59 2026 by rpki-client