$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Gd_LS6KjEbyHJXNqGJG5X1v0mtU.roa File: Gd_LS6KjEbyHJXNqGJG5X1v0mtU.roa (raw, json) Hash identifier: 2OecPBO6f68BpxXhFTcbyK0W/q/3kIIn7jHkgWBmjDw= Subject key identifier: 19:DF:CB:4B:A2:A3:11:BC:87:25:73:6A:18:91:B9:5F:5B:F4:9A:D5 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 83 Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Gd_LS6KjEbyHJXNqGJG5X1v0mtU.roa Signing time: Tue 31 Mar 2026 08:24:31 +0000 ROA not before: Tue 31 Mar 2026 08:24:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 111.91.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=19DFCB4BA2A311BC8725736A1891B95F5BF49AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:31:47:75:be:52:71:63:17:c9:ff:7a:44: d3:21:f5:0a:be:70:1c:c3:bd:ca:89:31:ba:ee:c4: 18:d3:84:ff:6d:0e:e9:fb:07:66:24:93:34:c4:2d: 4c:23:eb:b5:e9:b0:ba:7c:bf:74:98:45:d1:0f:46: 23:2b:e1:28:1a:1b:0f:21:4d:c9:5f:f5:dd:26:07: 20:20:5a:7b:fd:82:de:d5:05:8e:ff:7b:c4:44:dc: e8:62:65:8f:da:29:2b:22:a7:88:59:2d:f5:4a:fb: 65:9e:91:44:0f:3e:60:b4:b0:00:85:0f:56:ca:4f: 24:d7:f5:ac:b3:b4:63:88:2b:22:68:6d:ac:4c:e4: c3:2e:b1:90:85:ea:80:29:61:d0:0e:e3:d7:6d:0a: a7:a3:8a:ca:c3:b8:51:72:32:23:5f:74:00:59:2c: 27:c3:c2:47:f6:74:17:61:19:70:d6:0d:b3:51:ae: 62:a7:de:22:9c:bd:86:49:2a:f4:5a:bd:65:2b:a5: 4f:85:fc:59:a5:9a:6e:40:3e:16:11:66:51:fb:29: dd:cc:1c:34:46:14:ee:16:47:8c:2d:8b:bf:bf:73: 92:e2:b4:e1:1c:5e:dd:a6:20:30:d3:4d:97:83:06: 08:8d:81:69:1c:62:1a:b1:3e:dc:25:e9:4d:46:d0: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:CB:4B:A2:A3:11:BC:87:25:73:6A:18:91:B9:5F:5B:F4:9A:D5 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Gd_LS6KjEbyHJXNqGJG5X1v0mtU.roa sbgp-ipAddrBlock: critical IPv4: 111.91.240.0/20 Signature Algorithm: sha256WithRSAEncryption 53:5b:30:fb:6e:09:bf:c3:e2:80:06:bf:91:2b:a6:ef:67:fb: 3a:06:4c:8b:39:a8:38:78:f5:48:5a:f3:01:25:62:50:11:19: 5c:b2:40:18:c9:ce:14:a7:4b:84:76:ae:91:33:cf:ca:4d:a5: a6:03:e4:84:b2:20:2e:bf:e0:66:41:10:f4:22:3f:a4:cb:e4: f9:ce:16:8c:c8:54:9c:01:89:0a:7c:2c:84:ec:06:8d:7f:bb: e5:04:68:dd:95:af:87:89:15:ec:96:48:e1:b9:fa:f6:0d:72: 48:56:12:df:fa:fc:b0:b0:82:41:d0:7c:5e:74:4e:93:a2:9f: 1e:36:56:fd:e9:25:bf:41:74:b9:d5:52:54:75:4a:a1:d5:96: 56:46:59:8c:ae:75:73:64:e0:99:5b:34:83:5b:5a:f1:b1:0e: ac:b2:95:d8:ad:e5:e2:00:33:05:bf:b3:de:a2:1e:84:d5:9f: 61:ad:5b:b6:1c:c6:7a:4c:02:53:3a:b3:b5:d4:b7:d2:3b:74: 09:98:98:cc:2c:c5:0b:e2:a2:92:40:8c:7f:d4:f8:0f:28:e6: 17:33:0a:e7:04:f8:a0:c3:75:09:7d:30:88:95:47:2c:47:3e: ef:5f:c5:cd:6b:30:85:46:76:56:48:7f:21:0e:d5:fb:3a:89: 7a:81:7c:a4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5REZDQjRCQTJBMzEx QkM4NzI1NzM2QTE4OTFCOTVGNUJGNDlBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4fDFHdb5ScWMXyf96RNMh9Qq+cBzDvcqJMbruxBjThP9tDun7 B2YkkzTELUwj67XpsLp8v3SYRdEPRiMr4SgaGw8hTclf9d0mByAgWnv9gt7VBY7/ e8RE3OhiZY/aKSsip4hZLfVK+2WekUQPPmC0sACFD1bKTyTX9ayztGOIKyJobaxM 5MMusZCF6oApYdAO49dtCqejisrDuFFyMiNfdABZLCfDwkf2dBdhGXDWDbNRrmKn 3iKcvYZJKvRavWUrpU+F/Fmlmm5APhYRZlH7Kd3MHDRGFO4WR4wti7+/c5LitOEc Xt2mIDDTTZeDBgiNgWkcYhqxPtwl6U1G0KUFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUGd/LS6KjEbyHJXNqGJG5X1v0mtUwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L0dkX0xTNktqRWJ5SEpYTnFHSkc1WDF2MG10VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARvW/AwDQYJKoZIhvcNAQELBQADggEB AFNbMPtuCb/D4oAGv5Erpu9n+zoGTIs5qDh49Uha8wElYlARGVyyQBjJzhSnS4R2 rpEzz8pNpaYD5ISyIC6/4GZBEPQiP6TL5PnOFozIVJwBiQp8LITsBo1/u+UEaN2V r4eJFeyWSOG5+vYNckhWEt/6/LCwgkHQfF50TpOinx42Vv3pJb9BdLnVUlR1SqHV llZGWYyudXNk4JlbNINbWvGxDqyyldit5eIAMwW/s96iHoTVn2GtW7YcxnpMAlM6 s7XUt9I7dAmYmMwsxQviopJAjH/U+A8o5hczCucE+KDDdQl9MIiVRyxHPu9fxc1r MIVGdlZIfyEO1fs6iXqBfKQ= -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:48 2026 by rpki-client