$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/AgMMnxgcGp6Eyh_PepayBLGRsrQ.roa File: AgMMnxgcGp6Eyh_PepayBLGRsrQ.roa (raw, json) Hash identifier: ynAYqMohziKfXEyHUsYSynGl6ul1KZ239lhUbUyxRZs= Subject key identifier: 02:03:0C:9F:18:1C:1A:9E:84:CA:1F:CF:7A:96:B2:04:B1:91:B2:B4 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 4A Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/AgMMnxgcGp6Eyh_PepayBLGRsrQ.roa Signing time: Tue 31 Mar 2026 08:49:31 +0000 ROA not before: Tue 31 Mar 2026 08:49:31 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 219.75.128.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:31 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=02030C9F181C1A9E84CA1FCF7A96B204B191B2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:f3:6d:87:ba:d1:19:48:06:33:49:99:cd: f1:86:62:f5:53:6c:2f:5a:60:c5:e4:0b:03:25:e6: 77:3c:d9:ff:22:c0:0f:8d:c8:a9:48:6b:56:ac:bb: 46:cb:c8:0e:36:f0:0e:2a:3e:4a:52:9d:fe:ae:a7: d9:43:41:e1:25:d3:44:34:d6:a3:ec:63:07:3a:e0: 78:60:81:1c:91:fb:6f:9b:0a:cb:a9:c1:37:17:ed: 1a:7f:1f:c0:f5:bd:0b:8e:be:f2:0b:29:02:92:08: 99:89:4e:0f:97:85:18:68:76:a8:5b:0a:ee:ae:bf: ba:d0:00:c0:6b:a8:06:9d:8a:2c:7b:db:c9:2b:e6: 36:17:f5:e1:ac:b9:ba:e3:42:00:b9:69:81:67:1b: a9:4a:df:b2:02:a5:9d:8b:3f:cd:2d:21:9d:21:a4: 29:53:40:0b:8e:c0:12:28:08:5a:cf:ff:61:4c:fe: c0:67:d9:b5:e4:4b:64:c6:c0:21:22:26:5c:39:57: 29:8f:b7:3a:61:f3:88:da:16:36:6b:5d:bf:cd:57: c6:a5:8f:49:f3:c9:e0:8f:32:ae:bb:b9:84:93:7f: 69:47:ea:18:3e:a4:35:42:87:00:fd:ba:a5:0c:94: f7:24:00:72:b4:bb:54:e4:d7:c0:f1:87:f8:46:b3: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:0C:9F:18:1C:1A:9E:84:CA:1F:CF:7A:96:B2:04:B1:91:B2:B4 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/AgMMnxgcGp6Eyh_PepayBLGRsrQ.roa sbgp-ipAddrBlock: critical IPv4: 219.75.128.0/17 Signature Algorithm: sha256WithRSAEncryption 72:1d:99:a5:0c:b3:be:ce:cc:d3:d8:88:40:fa:9d:ce:ed:28: aa:68:8e:f4:11:c0:b0:06:4c:cf:87:e5:41:65:34:29:58:69: da:8b:e9:bd:02:c5:2c:31:48:83:25:ab:a2:1a:e1:92:97:63: e5:38:8f:41:d1:5a:b5:6c:39:e6:2d:66:82:07:a2:13:d2:8e: 15:1a:af:05:93:91:86:f4:b1:97:8e:78:f4:63:ab:3a:29:56: 97:b9:b6:1c:a0:36:01:91:b5:a1:91:00:c5:7e:81:99:4b:b0: a7:b3:96:2e:c0:fe:d7:7a:f4:b3:ff:d9:b8:85:82:39:dd:4b: 70:d3:62:5d:66:4d:e1:19:4b:32:d0:2a:5f:04:8e:3b:77:40: 44:c0:4b:06:32:a6:63:76:d7:10:72:80:9c:91:b3:00:32:2b: 2c:df:51:27:4e:34:e2:8a:11:22:0f:ea:98:14:35:bc:81:50: 09:a9:81:bc:68:10:84:d8:b9:c3:68:22:35:04:f8:4d:7d:f6: 06:18:49:fa:76:1f:90:76:cd:43:e7:fc:b4:49:7c:e7:91:84: 80:cd:f9:ce:34:c1:f5:76:ea:3f:e8:c5:a1:06:9f:86:30:db: 2f:1f:92:77:40:b4:6d:db:05:81:a5:93:1f:8d:e4:7d:25:14: 5b:d2:44:15 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkzMVoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoMDIwMzBDOUYxODFDMUE5 RTg0Q0ExRkNGN0E5NkIyMDRCMTkxQjJCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK0M822HutEZSAYzSZnN8YZi9VNsL1pgxeQLAyXmdzzZ/yLAD43I qUhrVqy7RsvIDjbwDio+SlKd/q6n2UNB4SXTRDTWo+xjBzrgeGCBHJH7b5sKy6nB NxftGn8fwPW9C46+8gspApIImYlOD5eFGGh2qFsK7q6/utAAwGuoBp2KLHvbySvm Nhf14ay5uuNCALlpgWcbqUrfsgKlnYs/zS0hnSGkKVNAC47AEigIWs//YUz+wGfZ teRLZMbAISImXDlXKY+3OmHziNoWNmtdv81XxqWPSfPJ4I8yrru5hJN/aUfqGD6k NUKHAP26pQyU9yQAcrS7VOTXwPGH+EazFJ0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQCAwyfGBwanoTKH896lrIEsZGytDAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvQWdNTW54Z2NHcDZFeWhfUGVwYXlCTEdSc3JRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9tLgDANBgkqhkiG9w0BAQsFAAOCAQEA ch2ZpQyzvs7M09iIQPqdzu0oqmiO9BHAsAZMz4flQWU0KVhp2ovpvQLFLDFIgyWr ohrhkpdj5TiPQdFatWw55i1mggeiE9KOFRqvBZORhvSxl4549GOrOilWl7m2HKA2 AZG1oZEAxX6BmUuwp7OWLsD+13r0s//ZuIWCOd1LcNNiXWZN4RlLMtAqXwSOO3dA RMBLBjKmY3bXEHKAnJGzADIrLN9RJ0404ooRIg/qmBQ1vIFQCamBvGgQhNi5w2gi NQT4TX32BhhJ+nYfkHbNQ+f8tEl855GEgM35zjTB9XbqP+jFoQafhjDbLx+Sd0C0 bdsFgaWTH43kfSUUW9JEFQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:54 2026 by rpki-client