$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/EsNcBTwd901ZEB_64Jhe3_ikItc.roa File: EsNcBTwd901ZEB_64Jhe3_ikItc.roa (raw, json) Hash identifier: YC1xES2SG3WTLamKrrNuc/rsJNUpjDELu0CMLfBRito= Subject key identifier: 12:C3:5C:05:3C:1D:F7:4D:59:10:1F:FA:E0:98:5E:DF:F8:A4:22:D7 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 8E Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/EsNcBTwd901ZEB_64Jhe3_ikItc.roa Signing time: Tue 31 Mar 2026 08:24:36 +0000 ROA not before: Tue 31 Mar 2026 08:24:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 219.109.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=12C35C053C1DF74D59101FFAE0985EDFF8A422D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:65:bd:66:3e:e5:b6:88:92:e3:44:33:e2: 99:84:f4:c4:96:20:7b:47:d3:e3:b6:64:8b:ef:d3: a6:93:fa:e3:5d:26:1d:94:67:11:67:a2:ac:4e:ad: a9:81:4d:b4:0e:10:99:de:7c:eb:76:ba:bb:3c:b1: e9:1f:32:2d:81:14:4c:a3:ce:5f:53:51:48:fe:b4: 1f:a0:1d:09:52:ca:b0:59:a2:3a:5f:2e:bc:c3:5b: aa:fa:50:41:dd:db:dd:0e:2b:32:0e:d2:49:a9:9b: a8:53:c8:dc:54:65:86:b8:85:5d:1f:62:7c:80:32: 59:75:e3:d2:d7:81:fa:41:83:67:6c:36:51:84:7e: d2:34:22:f8:e9:34:c8:3a:33:46:92:c3:16:98:10: 22:a0:30:25:fb:1f:cc:f3:f1:4e:37:22:b7:0d:71: 71:55:c9:30:d6:14:ea:8d:39:50:d1:94:0b:46:95: 23:d6:d4:d6:93:10:c1:39:29:76:55:ef:1f:95:76: 4d:09:c0:82:e4:af:34:d5:6c:a2:06:1e:10:02:bc: 6c:a6:9b:4f:56:bb:65:a8:62:21:22:93:60:8e:12: 6c:66:55:96:37:d4:57:f6:00:18:96:46:8e:da:a1: 50:66:9f:56:b0:86:0e:67:28:5a:9a:f1:18:42:8a: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:5C:05:3C:1D:F7:4D:59:10:1F:FA:E0:98:5E:DF:F8:A4:22:D7 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/EsNcBTwd901ZEB_64Jhe3_ikItc.roa sbgp-ipAddrBlock: critical IPv4: 219.109.64.0/20 Signature Algorithm: sha256WithRSAEncryption d0:e3:25:31:dc:25:79:5d:5b:b7:e8:5c:37:1c:70:24:f8:eb: 24:ad:05:ac:d3:61:7a:9f:e1:51:5a:8e:40:a5:a4:97:b4:13: 9e:67:a7:35:f1:ef:c3:5a:b1:49:f4:7d:c3:c9:5c:38:85:34: e8:69:90:e6:7e:53:ce:48:36:7c:90:df:89:f2:ad:f6:65:e2: a5:b4:82:55:d1:31:9e:72:ba:02:c4:70:c5:5f:96:db:8f:90: 12:8a:4f:65:4b:bb:b0:ea:92:43:e3:c5:a8:65:e9:cc:71:6e: c6:ca:0a:d9:4d:3e:ff:a6:bf:b7:ab:9c:4e:a9:a3:da:44:1f: f1:0d:f3:f5:36:3c:5e:18:08:84:7e:95:8b:90:52:fa:ae:42: 89:d9:e2:78:d2:d3:8e:aa:cd:01:ed:96:bb:29:da:01:0c:67: b1:4e:51:ed:ee:c4:f2:11:76:c5:b7:01:a2:51:19:03:9d:cb: 27:13:0a:8d:2c:02:eb:cd:f0:5a:4b:c0:b5:51:b0:2d:63:bb: 39:5a:a3:59:4e:dc:7c:e0:da:78:7a:8f:da:f0:6f:44:b4:ed: 75:03:66:34:58:26:9b:ac:5b:b8:37:eb:84:d8:8a:04:9f:4d: b4:d5:63:6e:11:87:92:5a:06:4a:b5:7f:e4:64:3b:da:55:e8: 16:7f:c3:92 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyQzM1QzA1M0MxREY3 NEQ1OTEwMUZGQUUwOTg1RURGRjhBNDIyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ92W9Zj7ltoiS40Qz4pmE9MSWIHtH0+O2ZIvv06aT+uNdJh2U ZxFnoqxOramBTbQOEJnefOt2urs8sekfMi2BFEyjzl9TUUj+tB+gHQlSyrBZojpf LrzDW6r6UEHd290OKzIO0kmpm6hTyNxUZYa4hV0fYnyAMll149LXgfpBg2dsNlGE ftI0IvjpNMg6M0aSwxaYECKgMCX7H8zz8U43IrcNcXFVyTDWFOqNOVDRlAtGlSPW 1NaTEME5KXZV7x+Vdk0JwILkrzTVbKIGHhACvGymm09Wu2WoYiEik2COEmxmVZY3 1Ff2ABiWRo7aoVBmn1awhg5nKFqa8RhCihUbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUEsNcBTwd901ZEB/64Jhe3/ikItcwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L0VzTmNCVHdkOTAxWkVCXzY0SmhlM19pa0l0Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbbUAwDQYJKoZIhvcNAQELBQADggEB ANDjJTHcJXldW7foXDcccCT46yStBazTYXqf4VFajkClpJe0E55npzXx78NasUn0 fcPJXDiFNOhpkOZ+U85INnyQ34nyrfZl4qW0glXRMZ5yugLEcMVfltuPkBKKT2VL u7DqkkPjxahl6cxxbsbKCtlNPv+mv7ernE6po9pEH/EN8/U2PF4YCIR+lYuQUvqu QonZ4njS046qzQHtlrsp2gEMZ7FOUe3uxPIRdsW3AaJRGQOdyycTCo0sAuvN8FpL wLVRsC1juzlao1lO3Hzg2nh6j9rwb0S07XUDZjRYJpusW7g364TYigSfTbTVY24R h5JaBkq1f+RkO9pV6BZ/w5I= -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:59 2026 by rpki-client