$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/W9EIbUE-TbdOtn0xt9kSbrtd1Hs.roa File: W9EIbUE-TbdOtn0xt9kSbrtd1Hs.roa (raw, json) Hash identifier: k2Xhy18UESwtqwZRSNG3gcIgcOrkCGJ612eueQlbJPY= Subject key identifier: 5B:D1:08:6D:41:3E:4D:B7:4E:B6:7D:31:B7:D9:12:6E:BB:5D:D4:7B Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 97 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/W9EIbUE-TbdOtn0xt9kSbrtd1Hs.roa Signing time: Tue 31 Mar 2026 07:47:26 +0000 ROA not before: Tue 31 Mar 2026 07:47:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10019 IP address blocks: 211.125.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 31 07:47:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5BD1086D413E4DB74EB67D31B7D9126EBB5DD47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:a8:f7:47:d6:19:52:56:00:ac:e4:e8:33: c1:b3:3a:85:73:90:86:cd:85:e4:1c:46:d8:08:62: d0:1c:c6:9f:23:17:e1:bf:4d:52:2f:a4:74:bd:8a: c5:54:1b:b2:3e:22:77:52:41:2a:20:dc:e9:82:0b: e2:dd:27:60:de:f8:62:63:11:37:4e:4e:1f:8d:fc: 6c:da:bf:13:a4:51:5d:43:a0:47:6a:02:ef:da:8c: cd:e6:bf:35:77:b4:42:5e:0b:75:32:47:32:00:90: fd:47:d8:d7:73:db:1e:82:f2:c7:2d:db:ab:e3:4c: 2f:73:63:6e:c0:e3:77:6f:3c:39:42:bc:1a:73:b8: 72:c4:ef:77:20:3b:af:69:b1:ec:b1:62:98:95:7e: e8:27:19:0e:38:40:b4:7c:9f:19:d3:b3:48:12:24: 53:c0:bb:c0:98:b5:95:4e:07:c0:4e:f7:60:18:1d: 04:5f:0d:fa:a5:35:d6:ee:1f:74:94:35:cf:c9:04: d1:66:1f:5f:d2:e5:89:93:41:8c:e2:61:21:e0:ac: cd:2c:21:dd:3a:07:a9:28:78:77:84:ea:e7:b3:54: 58:53:f6:69:87:0c:2e:ca:09:7c:c1:d7:67:07:d4: 7c:c2:02:bd:90:b1:c5:67:6e:b1:2d:77:22:1f:b8: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:08:6D:41:3E:4D:B7:4E:B6:7D:31:B7:D9:12:6E:BB:5D:D4:7B X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/W9EIbUE-TbdOtn0xt9kSbrtd1Hs.roa sbgp-ipAddrBlock: critical IPv4: 211.125.144.0/20 Signature Algorithm: sha256WithRSAEncryption 31:53:8b:ff:c9:c1:08:40:2a:9c:d4:dd:7e:9f:b7:8e:95:20: 3a:04:25:90:c9:c2:db:b1:a9:e5:15:47:3d:74:b1:6f:52:44: bb:63:18:88:1d:9b:80:24:bb:b3:5c:ea:65:de:df:5d:10:a2: 3d:74:ed:35:5d:39:33:14:44:e6:7c:d0:86:f2:ad:32:0c:5f: b2:64:19:fa:3f:9c:6f:eb:8c:56:62:21:8a:d8:4b:a0:c6:d7: 4e:66:21:37:64:dd:96:3d:8e:79:78:f1:79:f3:62:1e:8d:6d: 5e:5a:f7:fd:d2:08:39:6c:52:f1:3b:34:c5:67:dc:85:ae:87: 68:c4:b3:72:bc:ab:4f:95:35:b1:12:04:3d:72:ea:e1:b3:e8: e4:c2:00:bd:3f:a0:ae:31:e9:a2:2b:64:74:da:4b:73:7f:4c: f8:57:19:1e:ab:ff:a7:a7:ce:5f:bc:20:a4:2c:ce:a7:0b:81: 22:22:58:a0:3e:8e:40:5e:4e:b1:1d:a3:5e:34:d1:85:c0:1f: 91:f8:27:c8:bf:30:2c:fb:64:c3:64:f4:03:ff:25:8f:b7:b6: 55:52:93:b9:9e:2c:7d:da:46:41:ec:f2:19:97:51:c8:dc:b0: 62:70:83:e7:9b:9c:be:8f:11:3c:8e:96:1d:6f:47:18:de:63: e3:fa:33:ed -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5 MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAzMzEw NzQ3MjZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVCRDEwODZENDEzRTRE Qjc0RUI2N0QzMUI3RDkxMjZFQkI1REQ0N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgTKj3R9YZUlYArOToM8GzOoVzkIbNheQcRtgIYtAcxp8jF+G/ TVIvpHS9isVUG7I+IndSQSog3OmCC+LdJ2De+GJjETdOTh+N/GzavxOkUV1DoEdq Au/ajM3mvzV3tEJeC3UyRzIAkP1H2Ndz2x6C8sct26vjTC9zY27A43dvPDlCvBpz uHLE73cgO69pseyxYpiVfugnGQ44QLR8nxnTs0gSJFPAu8CYtZVOB8BO92AYHQRf DfqlNdbuH3SUNc/JBNFmH1/S5YmTQYziYSHgrM0sId06B6koeHeE6uezVFhT9mmH DC7KCXzB12cH1HzCAr2QscVnbrEtdyIfuG0tAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUW9EIbUE+TbdOtn0xt9kSbrtd1HswHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A +koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDYyL1c5RUliVUUtVGJkT3RuMHh0OWtTYnJ0ZDFIcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATTfZAwDQYJKoZIhvcNAQELBQADggEB ADFTi//JwQhAKpzU3X6ft46VIDoEJZDJwtuxqeUVRz10sW9SRLtjGIgdm4Aku7Nc 6mXe310Qoj107TVdOTMUROZ80IbyrTIMX7JkGfo/nG/rjFZiIYrYS6DG105mITdk 3ZY9jnl48XnzYh6NbV5a9/3SCDlsUvE7NMVn3IWuh2jEs3K8q0+VNbESBD1y6uGz 6OTCAL0/oK4x6aIrZHTaS3N/TPhXGR6r/6enzl+8IKQszqcLgSIiWKA+jkBeTrEd o1400YXAH5H4J8i/MCz7ZMNk9AP/JY+3tlVSk7meLH3aRkHs8hmXUcjcsGJwg+eb nL6PETyOlh1vRxjeY+P6M+0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:47 2026 by rpki-client