$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/1kR7yNSb1PftGonAQPhduO9erVc.roa File: 1kR7yNSb1PftGonAQPhduO9erVc.roa (raw, json) Hash identifier: rR2wHm6BQDjAzJLyPeJkkUME3Dh0l8pboZtLUSmJ7uk= Subject key identifier: D6:44:7B:C8:D4:9B:D4:F7:ED:1A:89:C0:40:F8:5D:B8:EF:5E:AD:57 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 95 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/1kR7yNSb1PftGonAQPhduO9erVc.roa Signing time: Tue 31 Mar 2026 07:47:25 +0000 ROA not before: Tue 31 Mar 2026 07:47:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10019 IP address blocks: 194.193.96.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 31 07:47:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D6447BC8D49BD4F7ED1A89C040F85DB8EF5EAD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:1c:b2:6b:08:f5:fd:41:af:db:e5:86:e4: 76:7c:3d:42:eb:31:c6:dd:18:9e:51:8e:dc:54:5a: fb:d3:7d:be:5f:6d:8f:e4:d8:06:5c:24:6b:76:29: eb:c5:2e:5e:b5:bc:9b:d0:63:6e:c9:62:d7:e6:25: 38:1e:18:ea:d7:38:dd:38:b7:ac:82:4a:24:04:43: 02:27:06:d9:b4:23:89:30:d5:91:e7:a0:3a:3f:f5: c8:e1:14:50:38:9f:8c:f8:1d:d7:8f:21:7a:e3:3e: 6c:5d:86:f0:ac:96:1a:fe:aa:5b:8b:a1:71:7b:dc: d9:c1:c3:0b:9a:b0:0b:b7:fd:d3:0b:8a:98:f8:50: 95:e5:bb:d0:25:25:99:c2:a7:1d:47:96:93:34:d3: ef:35:cd:5e:f4:b5:80:01:7e:bb:b0:cc:3c:37:f2: a5:46:35:e9:fb:b5:28:6e:2b:0f:4f:7a:90:7f:1f: 78:b6:f7:ac:8f:70:bc:02:85:4b:d4:de:19:9c:5a: 2f:23:08:82:cf:89:87:61:1d:e3:a6:34:94:91:2a: c4:41:c1:6e:d9:d1:2b:85:42:34:be:cb:6c:8e:ce: 20:79:45:2f:ea:b5:2b:32:55:e2:ed:5c:cb:12:3e: ff:f8:e2:32:64:ba:d3:66:19:26:ac:4c:a0:19:47: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:7B:C8:D4:9B:D4:F7:ED:1A:89:C0:40:F8:5D:B8:EF:5E:AD:57 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/1kR7yNSb1PftGonAQPhduO9erVc.roa sbgp-ipAddrBlock: critical IPv4: 194.193.96.0/19 Signature Algorithm: sha256WithRSAEncryption 78:26:cb:e6:f8:4f:b1:72:c5:42:cd:09:c6:bc:0d:f1:66:28: e6:b1:55:61:a5:28:07:9c:e2:b8:8a:c9:f7:61:55:94:9e:e9: ef:93:14:66:b5:6f:43:b5:c3:be:d0:6b:02:23:66:09:99:e9: 80:17:cc:50:c4:c9:c3:f9:9d:a8:dd:5b:51:a6:f7:d9:21:06: bc:7c:9d:18:ac:0e:e9:b9:0a:d1:71:7e:89:6e:6d:14:2d:27: 45:2d:c5:c2:6d:1c:bc:e2:f2:4a:c9:51:2b:6c:31:c6:9e:43: aa:65:6c:f1:fd:d1:d7:fc:4b:ec:72:21:52:14:5d:b1:af:d1: ba:ee:73:c2:de:df:54:de:63:34:3e:5b:f2:de:f8:b4:81:b6: f9:c9:c7:62:f8:02:fe:61:24:4b:9a:a0:b5:0f:0d:48:a7:5f: a5:51:d1:d6:a3:47:3e:31:d0:f4:d2:4a:d0:e4:93:5b:3c:9b: f9:7d:29:83:fe:5f:e4:a8:4c:6d:92:99:2d:20:3f:a4:4a:fc: 25:c2:bb:e4:c1:08:c6:9d:d0:ae:61:7d:64:65:af:a0:74:5b: 49:5a:d8:83:6f:dc:a3:bd:f8:02:97:1a:1a:17:4c:eb:50:cf: eb:3f:ba:29:bc:00:1d:08:56:03:f5:27:c2:4d:cd:93:8c:39: 55:d9:18:2a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5 MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAzMzEw NzQ3MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ2NDQ3QkM4RDQ5QkQ0 RjdFRDFBODlDMDQwRjg1REI4RUY1RUFENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg/hyyawj1/UGv2+WG5HZ8PULrMcbdGJ5RjtxUWvvTfb5fbY/k 2AZcJGt2KevFLl61vJvQY27JYtfmJTgeGOrXON04t6yCSiQEQwInBtm0I4kw1ZHn oDo/9cjhFFA4n4z4HdePIXrjPmxdhvCslhr+qluLoXF73NnBwwuasAu3/dMLipj4 UJXlu9AlJZnCpx1HlpM00+81zV70tYABfruwzDw38qVGNen7tShuKw9PepB/H3i2 96yPcLwChUvU3hmcWi8jCILPiYdhHeOmNJSRKsRBwW7Z0SuFQjS+y2yOziB5RS/q tSsyVeLtXMsSPv/44jJkutNmGSasTKAZRz8JAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU1kR7yNSb1PftGonAQPhduO9erVcwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A +koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDYyLzFrUjd5TlNiMVBmdEdvbkFRUGhkdU85ZXJWYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXCwWAwDQYJKoZIhvcNAQELBQADggEB AHgmy+b4T7FyxULNCca8DfFmKOaxVWGlKAec4riKyfdhVZSe6e+TFGa1b0O1w77Q awIjZgmZ6YAXzFDEycP5najdW1Gm99khBrx8nRisDum5CtFxfolubRQtJ0UtxcJt HLzi8krJUStsMcaeQ6plbPH90df8S+xyIVIUXbGv0bruc8Le31TeYzQ+W/Le+LSB tvnJx2L4Av5hJEuaoLUPDUinX6VR0dajRz4x0PTSStDkk1s8m/l9KYP+X+SoTG2S mS0gP6RK/CXCu+TBCMad0K5hfWRlr6B0W0la2INv3KO9+AKXGhoXTOtQz+s/uim8 AB0IVgP1J8JNzZOMOVXZGCo= -----END CERTIFICATE-----Generated at Tue Apr 7 20:44:39 2026 by rpki-client