$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/HUZJ_4JEPE8-2JCIguDSSCOhvkw.roa File: HUZJ_4JEPE8-2JCIguDSSCOhvkw.roa (raw, json) Hash identifier: +uZ1+3THyGmm2dH2qh1Oh8jJGwhYjqs6LBdNlcww/QE= Subject key identifier: 1D:46:49:FF:82:44:3C:4F:3E:D8:90:88:82:E0:D2:48:23:A1:BE:4C Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 90 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/HUZJ_4JEPE8-2JCIguDSSCOhvkw.roa Signing time: Tue 31 Mar 2026 07:47:23 +0000 ROA not before: Tue 31 Mar 2026 07:47:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10019 IP address blocks: 61.115.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 31 07:47:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D4649FF82443C4F3ED8908882E0D24823A1BE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:7e:61:28:96:2e:c8:f8:2a:d7:04:e8:6b: 5d:05:e7:4f:64:2e:a8:ae:9e:dd:ab:48:4a:ec:29: 9f:ea:92:23:31:29:92:de:fa:fc:80:07:b3:7a:3a: 75:ca:fd:77:2c:c8:8a:75:4d:f4:67:bd:97:a8:c4: 30:09:95:98:43:8d:66:38:2b:cb:f8:ca:31:f3:40: 44:16:40:7a:8d:27:11:17:76:ee:6f:05:fc:10:3f: 67:70:5c:3e:b7:62:b5:dc:a8:55:7a:bf:2e:4f:d1: ec:05:23:15:a1:94:77:30:21:a7:22:e1:d8:25:7f: 46:5b:be:6e:f3:6c:fa:e0:af:0e:1d:16:c4:00:92: 0d:27:0e:f4:c0:94:57:19:72:50:a8:e0:d6:0d:14: 13:a6:46:09:95:10:d9:b6:3d:7f:2a:a1:82:62:bc: 7b:ab:df:19:2f:eb:23:42:f5:69:d4:79:30:d0:3d: 26:1d:48:ae:d3:2a:ea:75:cb:55:75:e1:cd:62:99: 16:eb:cd:3f:c8:d7:6c:e5:b4:78:31:11:cb:3e:66: f9:39:20:9f:3d:94:af:3e:52:e0:c7:2e:b1:cd:44: b5:ff:39:85:67:af:2c:cf:89:f3:65:3e:41:e6:00: 39:4f:12:f9:ab:02:3b:e3:4e:92:6c:d8:6d:f1:02: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:49:FF:82:44:3C:4F:3E:D8:90:88:82:E0:D2:48:23:A1:BE:4C X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/HUZJ_4JEPE8-2JCIguDSSCOhvkw.roa sbgp-ipAddrBlock: critical IPv4: 61.115.240.0/20 Signature Algorithm: sha256WithRSAEncryption 74:62:09:2f:8b:ea:9d:89:45:b8:6c:33:a7:df:0b:ce:81:01: 67:48:29:18:3d:ae:03:0e:85:f1:27:bf:f8:93:e8:02:a5:99: d1:38:47:92:d1:13:4b:67:76:7d:40:47:0c:e4:57:5c:f3:34: 61:d5:76:5c:65:31:cb:39:65:9e:24:be:94:4a:c5:99:11:8d: 7d:ed:4f:d2:8d:50:79:a2:1a:85:81:f2:40:4c:4f:6f:c5:ab: fe:2a:af:27:fd:ba:68:14:20:a5:dc:ee:a7:da:01:90:26:14: 40:85:3c:3a:17:4c:fd:dd:7a:a4:72:7a:26:c4:dd:bb:10:35: 04:ea:87:43:3c:a8:f3:13:0a:e6:d2:48:da:f7:5b:40:3b:b6: 91:53:10:cf:83:0f:bf:1b:dd:90:4d:c0:d4:be:7f:64:34:8b: 4c:15:74:7f:e0:e2:67:45:1b:fd:4c:3d:fc:71:9d:03:9d:ba: 8d:99:16:b1:a7:c1:ce:e2:4e:24:ac:95:64:a2:aa:b9:4c:39: 38:e3:d9:c7:7e:da:3d:5d:68:48:c8:a7:c2:0b:b6:86:f5:a9: 6a:0b:c6:40:73:ad:4d:51:35:73:c6:ac:ad:6c:d6:c4:72:c5: 4c:9f:5d:fc:9c:90:22:43:fe:15:1e:0c:3d:d5:e3:dd:c9:15: f4:c4:e3:62 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5 MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAzMzEw NzQ3MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENDY0OUZGODI0NDND NEYzRUQ4OTA4ODgyRTBEMjQ4MjNBMUJFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGZH5hKJYuyPgq1wToa10F509kLqiunt2rSErsKZ/qkiMxKZLe +vyAB7N6OnXK/XcsyIp1TfRnvZeoxDAJlZhDjWY4K8v4yjHzQEQWQHqNJxEXdu5v BfwQP2dwXD63YrXcqFV6vy5P0ewFIxWhlHcwIaci4dglf0Zbvm7zbPrgrw4dFsQA kg0nDvTAlFcZclCo4NYNFBOmRgmVENm2PX8qoYJivHur3xkv6yNC9WnUeTDQPSYd SK7TKup1y1V14c1imRbrzT/I12zltHgxEcs+Zvk5IJ89lK8+UuDHLrHNRLX/OYVn ryzPifNlPkHmADlPEvmrAjvjTpJs2G3xAtaJAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHUZJ/4JEPE8+2JCIguDSSCOhvkwwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A +koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDYyL0hVWkpfNEpFUEU4LTJKQ0lndURTU0NPaHZrdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9c/AwDQYJKoZIhvcNAQELBQADggEB AHRiCS+L6p2JRbhsM6ffC86BAWdIKRg9rgMOhfEnv/iT6AKlmdE4R5LRE0tndn1A RwzkV1zzNGHVdlxlMcs5ZZ4kvpRKxZkRjX3tT9KNUHmiGoWB8kBMT2/Fq/4qryf9 umgUIKXc7qfaAZAmFECFPDoXTP3deqRyeibE3bsQNQTqh0M8qPMTCubSSNr3W0A7 tpFTEM+DD78b3ZBNwNS+f2Q0i0wVdH/g4mdFG/1MPfxxnQOduo2ZFrGnwc7iTiSs lWSiqrlMOTjj2cd+2j1daEjIp8ILtob1qWoLxkBzrU1RNXPGrK1s1sRyxUyfXfyc kCJD/hUeDD3V493JFfTE42I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:42 2026 by rpki-client