$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/DJxMiiCi3Avs7A_lfN0VFZlKlRc.roa File: DJxMiiCi3Avs7A_lfN0VFZlKlRc.roa (raw, json) Hash identifier: NbLKF2x11dO48SVkPmg27XF12Xoj0V6E2qRSbja37BI= Subject key identifier: 0C:9C:4C:8A:20:A2:DC:0B:EC:EC:0F:E5:7C:DD:15:15:99:4A:95:17 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 87 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/DJxMiiCi3Avs7A_lfN0VFZlKlRc.roa Signing time: Tue 31 Mar 2026 08:24:33 +0000 ROA not before: Tue 31 Mar 2026 08:24:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 202.228.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0C9C4C8A20A2DC0BECEC0FE57CDD1515994A9517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:d2:c1:f4:79:39:0d:9e:18:ba:e6:c4:da: 73:ea:d6:5f:9d:2b:4a:3b:40:59:37:d4:a2:10:ce: ae:84:0a:b6:3f:8c:26:13:a9:5f:7b:f8:4f:86:a2: 6e:56:fb:08:bf:fa:d4:1c:15:a2:ba:98:3b:e6:b0: 52:91:7c:82:3d:f9:0e:9d:4d:ab:18:cd:87:b7:82: 17:cc:2f:16:72:e3:dd:f8:1f:be:53:93:81:51:6b: 58:f9:50:dc:ec:c9:d4:25:f1:8c:a3:ad:ad:2b:d1: a2:8a:98:e5:1a:fc:0e:fa:34:06:d3:90:3f:00:09: 3c:c4:b0:6b:37:c9:5d:d6:37:01:22:ed:17:c0:dd: 34:8a:37:8f:18:37:4e:14:f5:fc:58:c9:c3:24:9b: 11:40:5f:7c:d5:2b:fb:9e:a7:e9:81:38:89:a7:8b: 77:31:57:be:3e:0e:e2:69:a4:a0:25:c2:b7:ba:18: 0a:f6:21:8e:0f:2b:29:d1:1c:e6:08:32:ee:d8:07: ce:a2:8a:00:02:90:97:a1:07:e0:6c:a5:ba:f0:a7: 22:43:93:f5:67:40:4c:66:33:54:4c:e6:5d:0d:31: 61:ee:46:fa:da:50:2f:e1:d1:c1:06:c5:5b:31:77: a6:3e:21:19:bd:84:75:24:63:03:d8:1c:ae:aa:1b: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:4C:8A:20:A2:DC:0B:EC:EC:0F:E5:7C:DD:15:15:99:4A:95:17 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/DJxMiiCi3Avs7A_lfN0VFZlKlRc.roa sbgp-ipAddrBlock: critical IPv4: 202.228.240.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:3d:92:77:62:76:71:f6:69:d1:a8:7e:0d:13:4b:61:85:91: fa:ca:0d:e3:6a:58:c4:25:91:f1:2e:88:aa:68:f9:62:9f:03: e1:3d:19:88:9a:d8:89:aa:f2:f6:ce:93:03:d6:e8:f9:f8:1f: 56:9d:c1:b0:b9:7e:b5:9e:aa:22:f0:34:60:a2:39:7a:2c:3a: 45:4a:d5:ea:8f:6c:bb:de:50:c4:71:ad:14:ad:16:09:1e:57: 39:cc:af:38:e4:cb:3d:a7:ac:1f:35:69:92:90:42:5f:15:c1: 0a:6b:49:35:57:f1:8a:93:ec:0d:ef:31:9b:9f:72:fa:f1:4a: a5:53:82:16:e3:08:88:6c:1b:3e:1c:30:20:4c:05:98:9e:40: 8c:11:f8:5c:15:a6:53:1c:4a:4b:52:e7:c9:23:0e:8d:38:28: f0:0b:94:3e:6e:d5:c1:b4:71:89:df:b5:2b:b2:9f:bf:6f:4b: bf:34:a9:fe:4e:9d:e4:b3:d1:92:a1:97:5e:02:b8:52:89:04: f3:42:20:51:e0:88:7f:55:98:fe:17:22:83:6a:1d:0b:6e:92: 6d:f0:eb:c1:53:f8:ae:f2:aa:c9:48:f4:7b:8a:30:99:87:29: c2:a0:8a:1b:77:2d:1a:84:97:d5:b3:03:43:45:5e:d0:4b:04: 65:1c:05:70 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDOUM0QzhBMjBBMkRD MEJFQ0VDMEZFNTdDREQxNTE1OTk0QTk1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuXNLB9Hk5DZ4YuubE2nPq1l+dK0o7QFk31KIQzq6ECrY/jCYT qV97+E+Gom5W+wi/+tQcFaK6mDvmsFKRfII9+Q6dTasYzYe3ghfMLxZy4934H75T k4FRa1j5UNzsydQl8Yyjra0r0aKKmOUa/A76NAbTkD8ACTzEsGs3yV3WNwEi7RfA 3TSKN48YN04U9fxYycMkmxFAX3zVK/uep+mBOImni3cxV74+DuJppKAlwre6GAr2 IY4PKynRHOYIMu7YB86iigACkJehB+BspbrwpyJDk/VnQExmM1RM5l0NMWHuRvra UC/h0cEGxVsxd6Y+IRm9hHUkYwPYHK6qG9j9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDJxMiiCi3Avs7A/lfN0VFZlKlRcwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L0RKeE1paUNpM0F2czdBX2xmTjBWRlpsS2xSYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATK5PAwDQYJKoZIhvcNAQELBQADggEB AEo9kndidnH2adGofg0TS2GFkfrKDeNqWMQlkfEuiKpo+WKfA+E9GYia2Imq8vbO kwPW6Pn4H1adwbC5frWeqiLwNGCiOXosOkVK1eqPbLveUMRxrRStFgkeVznMrzjk yz2nrB81aZKQQl8VwQprSTVX8YqT7A3vMZufcvrxSqVTghbjCIhsGz4cMCBMBZie QIwR+FwVplMcSktS58kjDo04KPALlD5u1cG0cYnftSuyn79vS780qf5OneSz0ZKh l14CuFKJBPNCIFHgiH9VmP4XIoNqHQtukm3w68FT+K7yqslI9HuKMJmHKcKgiht3 LRqEl9WzA0NFXtBLBGUcBXA= -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:56 2026 by rpki-client