$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/DnClWZ1qPetSWiWERjWUvdVG8L0.roa File: DnClWZ1qPetSWiWERjWUvdVG8L0.roa (raw, json) Hash identifier: 8BBLV9rd1r66dC/7Lq2RmFWk8jBy5a+LcpWVUXB0NBQ= Subject key identifier: 0E:70:A5:59:9D:6A:3D:EB:52:5A:25:84:46:35:94:BD:D5:46:F0:BD Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Certificate serial: 35 Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/DnClWZ1qPetSWiWERjWUvdVG8L0.roa Signing time: Tue 31 Mar 2026 08:34:49 +0000 ROA not before: Tue 31 Mar 2026 08:34:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4695 IP address blocks: 202.231.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Validity Not Before: Mar 31 08:34:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0E70A5599D6A3DEB525A2584463594BDD546F0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:16:3b:21:10:09:d9:ea:8e:fb:25:80:40: 24:b0:88:d3:17:cc:87:76:1b:8f:7f:c2:bb:75:d5: b7:44:b7:e1:98:2d:f3:0b:cd:6a:46:ff:33:2c:4a: 62:e7:a4:8f:51:ee:74:e6:8c:17:7a:63:be:44:31: d7:23:1b:3a:15:83:bf:23:4f:39:bd:7a:9e:cb:14: 90:39:42:ba:d6:94:33:27:f5:9d:69:b3:27:67:d2: 14:fb:ae:e3:32:5d:26:52:5a:20:e9:a4:e3:c4:15: 99:6f:dd:73:c7:0e:38:6a:9e:9e:17:ea:b7:57:6a: 8f:27:19:c2:cf:83:cf:2d:4f:a6:0f:28:81:23:56: dd:dd:6b:75:ae:76:06:8f:c2:05:5b:f3:25:95:9c: 1d:29:94:59:68:06:ff:f6:22:1b:d6:eb:0d:20:e6: eb:e8:41:c9:fb:ce:87:21:42:5b:c5:e2:29:16:9f: 68:ac:0f:7d:61:b6:ec:2c:5f:dc:18:5a:7a:a5:2e: 70:db:32:92:96:b7:a5:12:62:4d:75:be:1b:b8:2f: cf:53:92:a5:59:82:1a:a9:8c:2f:4c:6a:9d:25:5e: d3:aa:7e:e3:7e:ef:08:64:cd:24:61:90:5b:ca:60: 9b:bf:23:d0:6a:2d:b2:f0:d2:4c:0f:32:ee:72:4a: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:A5:59:9D:6A:3D:EB:52:5A:25:84:46:35:94:BD:D5:46:F0:BD X509v3 Authority Key Identifier: keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/DnClWZ1qPetSWiWERjWUvdVG8L0.roa sbgp-ipAddrBlock: critical IPv4: 202.231.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:9b:30:d0:cf:bb:26:d6:44:bd:ff:52:6f:bf:03:c7:e4:5b: 2c:84:0b:96:3a:00:e3:b9:be:68:4c:b5:14:72:1c:61:6b:4e: 88:9c:f5:97:70:68:01:81:59:95:15:c1:cf:16:ab:78:d3:fc: f9:05:9b:60:fe:ef:7e:96:2c:57:34:e6:2b:b1:7b:87:36:6e: f2:b2:ab:8c:84:6b:7d:33:86:6e:8f:b4:98:f5:8c:17:99:bc: ee:58:27:6e:ae:4e:a5:21:be:61:0c:0b:31:18:f7:63:f3:ed: 5e:55:9a:f9:d4:6f:2a:2b:7a:60:80:8d:0f:b8:bc:e5:13:ae: f5:b9:ee:5c:53:48:44:12:72:99:78:f7:bb:dc:e4:39:bd:c4: af:71:ac:4e:94:22:cb:9b:31:d9:be:df:fb:e1:68:86:e6:14: 2e:de:12:d8:db:4a:4b:fa:a3:a4:04:1b:f7:6f:09:60:c7:ca: 93:79:ce:3d:ed:29:18:ba:29:d8:32:d5:0e:04:bd:0f:11:e9: f8:60:ed:96:81:1d:50:26:5a:ef:a8:f4:c2:27:2c:22:a7:c3: 12:0c:a9:74:bd:13:3a:a3:31:ec:07:40:b9:8a:62:a0:d5:2f: e6:71:e5:19:b6:39:3d:5a:45:d3:2f:87:1c:f9:f7:22:d3:07: f0:e0:09:a3 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI2MDMzMTA4 MzQ0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEU3MEE1NTk5RDZBM0RF QjUyNUEyNTg0NDYzNTk0QkRENTQ2RjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKm+FjshEAnZ6o77JYBAJLCI0xfMh3Ybj3/Cu3XVt0S34Zgt8wvN akb/MyxKYuekj1HudOaMF3pjvkQx1yMbOhWDvyNPOb16nssUkDlCutaUMyf1nWmz J2fSFPuu4zJdJlJaIOmk48QVmW/dc8cOOGqenhfqt1dqjycZws+Dzy1Ppg8ogSNW 3d1rda52Bo/CBVvzJZWcHSmUWWgG//YiG9brDSDm6+hByfvOhyFCW8XiKRafaKwP fWG27Cxf3BhaeqUucNsykpa3pRJiTXW+G7gvz1OSpVmCGqmML0xqnSVe06p+437v CGTNJGGQW8pgm78j0GotsvDSTA8y7nJKT0sCAwEAAaOCAdcwggHTMB0GA1UdDgQW BBQOcKVZnWo961JaJYRGNZS91UbwvTAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1 TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0 eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0L0RuQ2xXWjFxUGV0U1dpV0VSaldVdmRWRzhMMC5yb2EwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAXK54AwDQYJKoZIhvcNAQELBQADggEBAEyb MNDPuybWRL3/Um+/A8fkWyyEC5Y6AOO5vmhMtRRyHGFrToic9ZdwaAGBWZUVwc8W q3jT/PkFm2D+736WLFc05iuxe4c2bvKyq4yEa30zhm6PtJj1jBeZvO5YJ26uTqUh vmEMCzEY92Pz7V5VmvnUbyoremCAjQ+4vOUTrvW57lxTSEQScpl497vc5Dm9xK9x rE6UIsubMdm+3/vhaIbmFC7eEtjbSkv6o6QEG/dvCWDHypN5zj3tKRi6Kdgy1Q4E vQ8R6fhg7ZaBHVAmWu+o9MInLCKnwxIMqXS9EzqjMewHQLmKYqDVL+Zx5Rm2OT1a RdMvhxz59yLTB/DgCaM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:36 2026 by rpki-client