$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/jRV9A4p0UwgFXZZGN5fYmnjueo8.roa File: jRV9A4p0UwgFXZZGN5fYmnjueo8.roa (raw, json) Hash identifier: KuS8taPPoriCkAaqfND2+RuEsI9Ru4PCOAbEXqJbV8k= Subject key identifier: 8D:15:7D:03:8A:74:53:08:05:5D:96:46:37:97:D8:9A:78:EE:7A:8F Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 8A Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/jRV9A4p0UwgFXZZGN5fYmnjueo8.roa Signing time: Tue 31 Mar 2026 08:24:34 +0000 ROA not before: Tue 31 Mar 2026 08:24:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 203.215.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8D157D038A745308055D96463797D89A78EE7A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:61:d5:6b:17:fb:86:df:59:1d:b6:97:20: 27:ca:7b:ee:58:ef:60:3d:cf:4c:ad:38:cc:95:f1: 82:56:c2:05:90:6c:6f:01:59:c5:68:cc:2a:d9:67: 5f:41:2e:3a:c5:71:59:27:64:22:e6:e9:91:0e:c9: db:c5:c5:ec:56:59:ba:4e:b2:a7:a3:db:8b:b9:5c: 9f:02:7f:79:4a:f1:8f:35:4b:a8:99:0f:c8:13:42: 2b:13:d5:64:8d:f4:d1:28:4c:2d:92:48:b7:5f:08: 25:c1:0b:85:4f:27:36:79:49:6d:5c:45:32:37:76: 02:eb:3c:d6:6f:1d:06:ba:e0:d3:88:6c:41:70:aa: 77:11:49:61:91:98:12:36:22:d3:45:60:6b:4b:dd: 34:74:53:e6:3b:d6:5d:93:ba:45:c6:12:3f:30:34: 6f:0e:5b:8d:31:a9:8b:92:08:2b:d0:33:5c:b6:ed: 0d:7c:23:d4:a1:18:99:0a:db:c5:af:39:45:77:10: 95:4e:5b:c4:93:a8:75:de:60:38:65:17:56:85:23: d2:3c:bf:f6:8f:b4:e8:c4:c9:09:e9:77:d0:95:5d: 72:ad:36:b4:e7:58:b0:12:0c:2c:67:cf:d9:1a:10: 83:2a:38:ab:ac:00:93:ef:8f:1e:ec:88:3f:f4:0c: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:7D:03:8A:74:53:08:05:5D:96:46:37:97:D8:9A:78:EE:7A:8F X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/jRV9A4p0UwgFXZZGN5fYmnjueo8.roa sbgp-ipAddrBlock: critical IPv4: 203.215.56.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:ce:5f:7f:8d:e9:6a:35:9c:bc:dd:66:7c:1e:df:ed:1b:0b: cb:49:80:94:87:87:0c:2f:e7:fc:24:ef:5e:73:78:33:d3:3e: c3:a6:c5:84:78:df:92:da:53:23:fb:29:d4:0a:2c:d2:0a:2c: be:e2:86:18:7b:cf:32:f5:84:ed:96:bb:07:5d:67:0f:ff:a5: 20:96:12:b8:87:7b:b1:5e:95:45:7c:fb:c3:1a:68:ae:a4:33: 84:ae:be:29:d1:60:52:9b:f9:81:ef:46:7b:ad:12:d1:a8:2f: 3e:26:d2:96:1b:58:6a:bb:91:99:50:c3:6b:c7:2c:58:d7:80: c2:6a:66:3b:0f:a9:6e:68:fa:36:71:69:1e:55:08:a3:a1:ce: 9e:35:6b:d4:0f:1f:3c:56:d3:71:75:39:1e:01:37:8c:7f:56: 85:46:2e:cd:04:a2:6d:03:9a:e3:d4:e3:1c:e9:3a:58:be:30: b6:28:64:e9:0e:9e:a6:37:a9:1d:a9:bf:bf:b4:6c:44:2c:eb: d5:cb:31:ca:0d:29:20:5d:7f:fa:45:d6:0e:a3:6c:50:12:91: 9a:1b:09:e8:df:a8:8b:e4:94:45:2b:36:0f:a3:5b:db:aa:8f: ec:6f:73:cb:db:42:48:ef:f5:33:dd:dc:c8:95:63:58:c2:1a: 6c:26:0e:a7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEMTU3RDAzOEE3NDUz MDgwNTVEOTY0NjM3OTdEODlBNzhFRTdBOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhwWHVaxf7ht9ZHbaXICfKe+5Y72A9z0ytOMyV8YJWwgWQbG8B WcVozCrZZ19BLjrFcVknZCLm6ZEOydvFxexWWbpOsqej24u5XJ8Cf3lK8Y81S6iZ D8gTQisT1WSN9NEoTC2SSLdfCCXBC4VPJzZ5SW1cRTI3dgLrPNZvHQa64NOIbEFw qncRSWGRmBI2ItNFYGtL3TR0U+Y71l2TukXGEj8wNG8OW40xqYuSCCvQM1y27Q18 I9ShGJkK28WvOUV3EJVOW8STqHXeYDhlF1aFI9I8v/aPtOjEyQnpd9CVXXKtNrTn WLASDCxnz9kaEIMqOKusAJPvjx7siD/0DCMFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUjRV9A4p0UwgFXZZGN5fYmnjueo8wHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L2pSVjlBNHAwVXdnRlhaWkdONWZZbW5qdWVvOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALL1zgwDQYJKoZIhvcNAQELBQADggEB AIrOX3+N6Wo1nLzdZnwe3+0bC8tJgJSHhwwv5/wk715zeDPTPsOmxYR435LaUyP7 KdQKLNIKLL7ihhh7zzL1hO2WuwddZw//pSCWEriHe7FelUV8+8MaaK6kM4SuvinR YFKb+YHvRnutEtGoLz4m0pYbWGq7kZlQw2vHLFjXgMJqZjsPqW5o+jZxaR5VCKOh zp41a9QPHzxW03F1OR4BN4x/VoVGLs0Eom0DmuPU4xzpOli+MLYoZOkOnqY3qR2p v7+0bEQs69XLMcoNKSBdf/pF1g6jbFASkZobCejfqIvklEUrNg+jW9uqj+xvc8vb Qkjv9TPd3MiVY1jCGmwmDqc= -----END CERTIFICATE-----Generated at Tue Apr 7 16:29:20 2026 by rpki-client