$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/xVLyJ2tfuGeekW12uDP8eNZstHE.roa File: xVLyJ2tfuGeekW12uDP8eNZstHE.roa (raw, json) Hash identifier: vskv/NmShNcR2fF982f3l3ABccNBQ435UJJb5XSABmk= Subject key identifier: C5:52:F2:27:6B:5F:B8:67:9E:91:6D:76:B8:33:FC:78:D6:6C:B4:71 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 7F Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/xVLyJ2tfuGeekW12uDP8eNZstHE.roa Signing time: Tue 31 Mar 2026 08:24:29 +0000 ROA not before: Tue 31 Mar 2026 08:24:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 14.1.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C552F2276B5FB8679E916D76B833FC78D66CB471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:92:c0:37:3b:bf:20:9a:59:5c:d4:df:47: cb:20:7a:5a:43:5a:7f:19:b6:1d:66:56:13:51:9f: ab:32:f1:ce:6d:56:3a:2d:d0:d6:d9:e0:7f:63:e2: 90:a0:31:2e:81:b0:15:ca:d6:81:f8:48:6a:1e:fc: 47:cf:e7:76:b8:e8:be:31:9e:6d:89:e8:04:b0:6e: c6:28:97:56:ba:09:3e:ec:1b:e5:0b:c6:09:55:a8: 8a:cf:d1:99:f5:d2:6b:b9:de:00:66:e1:7a:75:09: 9b:a5:ac:7d:88:37:f3:26:08:1e:70:7b:22:d6:d8: d9:79:9a:ea:8a:16:7e:54:26:40:e1:a7:03:6c:5d: d4:9e:86:1c:3d:5b:e9:d8:d8:03:5a:e4:1a:b4:30: c2:a6:c9:2c:c3:f2:b4:bb:a3:61:30:1e:0a:09:35: c5:19:5d:60:47:d0:97:59:83:b7:7e:80:26:05:a3: fe:35:13:12:0a:0b:2d:53:dc:9d:95:b2:a9:5f:e6: 0a:43:20:5d:ea:16:4b:5f:2c:3a:38:f6:1a:af:c1: 92:1c:5d:5e:01:40:1a:6a:b3:54:f7:6f:76:76:03: 34:bb:0e:6d:53:bd:b3:48:14:ca:71:45:66:60:be: 1b:b1:91:5b:ca:8c:51:09:fd:6f:87:04:51:cb:63: 1b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:F2:27:6B:5F:B8:67:9E:91:6D:76:B8:33:FC:78:D6:6C:B4:71 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/xVLyJ2tfuGeekW12uDP8eNZstHE.roa sbgp-ipAddrBlock: critical IPv4: 14.1.8.0/21 Signature Algorithm: sha256WithRSAEncryption 93:b6:da:5c:21:85:1b:9e:c0:71:38:e4:6f:e1:e5:18:d8:9f: 0c:5e:87:44:19:df:07:6d:0a:92:47:4d:8c:b8:0f:9e:0d:c1: 3a:ea:a0:cf:3b:a4:ca:e9:da:da:bc:ca:e1:2c:c6:cc:8d:40: 8a:47:16:87:6c:fc:a1:4d:e3:a5:ea:a7:43:bc:61:b3:94:10: d3:1a:3f:19:05:cf:62:ff:c3:fa:66:ce:95:45:22:d0:53:e4: 01:68:48:ea:7c:cb:ca:51:f6:31:b7:d0:74:b2:48:33:1e:5c: fc:f6:5e:39:15:a5:51:ae:f8:19:b8:ae:38:32:5c:2b:20:f3: e3:22:d4:92:5b:ce:2c:9b:4c:52:8f:be:11:66:bf:02:9f:e5: ca:4c:0e:a7:ed:c4:8f:44:43:aa:34:e4:85:c6:25:ee:3b:b8: cc:57:a6:fa:23:21:a5:60:a6:2c:08:ee:20:1d:83:d2:a8:a4: fc:87:dd:c3:1d:56:30:1a:49:a2:65:1d:b9:a5:0c:98:9c:eb: 87:f0:7c:5a:10:4d:a1:4c:f5:b6:1a:2a:d5:8a:ff:ab:2a:c5: dd:cb:a0:dc:80:15:dc:84:fc:c7:5d:fa:2c:77:db:6d:de:9a: 57:16:04:29:41:48:4f:05:58:11:e0:5d:8d:3a:8b:0c:bd:35: 5d:7d:9c:44 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI2MDMzMTA4 MjQyOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzU1MkYyMjc2QjVGQjg2 NzlFOTE2RDc2QjgzM0ZDNzhENjZDQjQ3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZyksA3O78gmllc1N9HyyB6WkNafxm2HWZWE1GfqzLxzm1WOi3Q 1tngf2PikKAxLoGwFcrWgfhIah78R8/ndrjovjGebYnoBLBuxiiXVroJPuwb5QvG CVWois/RmfXSa7neAGbhenUJm6WsfYg38yYIHnB7ItbY2Xma6ooWflQmQOGnA2xd 1J6GHD1b6djYA1rkGrQwwqbJLMPytLujYTAeCgk1xRldYEfQl1mDt36AJgWj/jUT EgoLLVPcnZWyqV/mCkMgXeoWS18sOjj2Gq/BkhxdXgFAGmqzVPdvdnYDNLsObVO9 s0gUynFFZmC+G7GRW8qMUQn9b4cEUctjG4cCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTFUvIna1+4Z56RbXa4M/x41my0cTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80NTQveFZMeUoydGZ1R2Vla1cxMnVEUDhlTlpzdEhFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAw4BCDANBgkqhkiG9w0BAQsFAAOCAQEA k7baXCGFG57AcTjkb+HlGNifDF6HRBnfB20KkkdNjLgPng3BOuqgzzukyuna2rzK 4SzGzI1AikcWh2z8oU3jpeqnQ7xhs5QQ0xo/GQXPYv/D+mbOlUUi0FPkAWhI6nzL ylH2MbfQdLJIMx5c/PZeORWlUa74GbiuODJcKyDz4yLUklvOLJtMUo++EWa/Ap/l ykwOp+3Ej0RDqjTkhcYl7ju4zFem+iMhpWCmLAjuIB2D0qik/Ifdwx1WMBpJomUd uaUMmJzrh/B8WhBNoUz1thoq1Yr/qyrF3cug3IAV3IT8x136LHfbbd6aVxYEKUFI TwVYEeBdjTqLDL01XX2cRA== -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:01 2026 by rpki-client