$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/HEUHh21q1KzhK-iVujl4MuZPoH0.roa File: HEUHh21q1KzhK-iVujl4MuZPoH0.roa (raw, json) Hash identifier: fMhpQEv43XSTsPfOnrI+YrGKlTN4OLPULeYiqqQ9E9c= Subject key identifier: 1C:45:07:87:6D:6A:D4:AC:E1:2B:E8:95:BA:39:78:32:E6:4F:A0:7D Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Certificate serial: 38 Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/HEUHh21q1KzhK-iVujl4MuZPoH0.roa Signing time: Tue 31 Mar 2026 08:34:50 +0000 ROA not before: Tue 31 Mar 2026 08:34:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4695 IP address blocks: 210.156.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Validity Not Before: Mar 31 08:34:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1C4507876D6AD4ACE12BE895BA397832E64FA07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:a4:8e:59:cc:d8:33:53:8c:2b:4c:62:1f: cb:8f:35:fb:98:c6:a5:76:91:3d:3f:a0:05:22:be: 8a:fd:da:1d:15:ef:f5:50:2e:f4:cc:56:33:53:b8: ea:39:7a:85:79:c7:5b:29:d5:56:67:d7:95:6b:2b: 1f:74:1a:4d:3c:0c:9a:2d:86:b6:2d:90:98:4c:6a: 31:e4:df:61:09:38:55:3e:f6:cf:2f:44:e2:6f:f2: 3c:f7:5b:a0:16:c8:12:93:f5:54:61:73:d8:f2:16: 6d:f0:2c:54:8c:62:ad:a8:7f:3a:c7:d3:01:99:31: 66:84:42:68:d7:3c:ca:b6:cf:d8:c4:9c:b9:3d:95: ff:91:a9:f2:53:a3:e5:93:e2:46:64:73:4c:64:31: c2:24:5a:fd:50:80:e0:fb:a8:70:c7:04:f8:5f:27: 48:2a:76:50:b2:df:f2:38:42:f3:51:97:e5:92:c5: 3f:c2:17:12:24:33:6a:19:7d:66:7d:d0:85:bf:f3: 38:26:6a:0b:0e:99:2c:ee:51:59:6d:f0:50:a8:2a: b5:f5:2f:35:08:6e:76:a5:90:82:98:37:3c:55:0f: 7d:c2:ab:69:ca:1c:aa:5a:3a:f4:1c:8a:6a:06:6f: 70:4d:af:e9:97:ef:cf:ef:0c:93:23:77:df:82:16: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:07:87:6D:6A:D4:AC:E1:2B:E8:95:BA:39:78:32:E6:4F:A0:7D X509v3 Authority Key Identifier: keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/HEUHh21q1KzhK-iVujl4MuZPoH0.roa sbgp-ipAddrBlock: critical IPv4: 210.156.128.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:01:f5:86:ef:20:e2:74:1d:f2:6d:b4:c6:04:ef:92:d5:b2: 70:02:ca:d2:97:f2:e9:ef:9d:8c:b9:4a:67:55:d4:3d:e5:fd: 49:0f:1c:5d:30:81:9c:be:4c:8d:05:84:c0:41:65:43:39:9c: 18:d7:2a:8b:f8:3a:22:19:8e:b8:de:1d:07:e2:7f:12:89:55: 09:54:99:5e:ff:5f:db:84:e5:d5:fc:48:72:04:e4:e3:8c:83: 18:2e:e1:e4:1a:2c:d5:61:fc:ca:fb:9b:68:00:e9:da:db:a1: ca:39:f8:37:7b:bb:7c:0e:3e:cf:84:19:07:98:02:dc:2f:b7: c2:4c:1a:85:0d:fd:5d:df:3c:b6:51:52:07:06:72:71:00:a5: 36:ae:9e:26:d9:aa:50:d4:93:bc:e9:76:0c:cc:56:c8:82:bc: d7:68:06:62:e6:a2:89:b9:bb:95:66:93:15:95:ef:1f:5e:67: 3b:6d:50:82:a5:d5:00:cd:62:a1:01:d1:a0:19:68:ec:fa:10: a7:d9:65:a3:d5:24:57:17:86:7e:10:48:5e:23:8f:6e:55:f0: 37:38:c8:d5:c3:e8:f1:55:70:aa:48:2d:4d:f9:da:75:c7:e7: 49:d1:da:ea:d8:67:07:04:0c:80:b7:76:f5:fd:9d:3f:20:08: fa:1a:67:52 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI2MDMzMTA4 MzQ1MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUM0NTA3ODc2RDZBRDRB Q0UxMkJFODk1QkEzOTc4MzJFNjRGQTA3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjPpI5ZzNgzU4wrTGIfy481+5jGpXaRPT+gBSK+iv3aHRXv9VAu 9MxWM1O46jl6hXnHWynVVmfXlWsrH3QaTTwMmi2Gti2QmExqMeTfYQk4VT72zy9E 4m/yPPdboBbIEpP1VGFz2PIWbfAsVIxirah/OsfTAZkxZoRCaNc8yrbP2MScuT2V /5Gp8lOj5ZPiRmRzTGQxwiRa/VCA4PuocMcE+F8nSCp2ULLf8jhC81GX5ZLFP8IX EiQzahl9Zn3Qhb/zOCZqCw6ZLO5RWW3wUKgqtfUvNQhudqWQgpg3PFUPfcKracoc qlo69ByKagZvcE2v6Zfvz+8MkyN334IW8tkCAwEAAaOCAdcwggHTMB0GA1UdDgQW BBQcRQeHbWrUrOEr6JW6OXgy5k+gfTAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1 TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0 eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0L0hFVUhoMjFxMUt6aEstaVZ1amw0TXVaUG9IMC5yb2EwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBATSnIAwDQYJKoZIhvcNAQELBQADggEBAIwB 9YbvIOJ0HfJttMYE75LVsnACytKX8unvnYy5SmdV1D3l/UkPHF0wgZy+TI0FhMBB ZUM5nBjXKov4OiIZjrjeHQfifxKJVQlUmV7/X9uE5dX8SHIE5OOMgxgu4eQaLNVh /Mr7m2gA6drboco5+Dd7u3wOPs+EGQeYAtwvt8JMGoUN/V3fPLZRUgcGcnEApTau nibZqlDUk7zpdgzMVsiCvNdoBmLmoom5u5VmkxWV7x9eZzttUIKl1QDNYqEB0aAZ aOz6EKfZZaPVJFcXhn4QSF4jj25V8Dc4yNXD6PFVcKpILU352nXH50nR2urYZwcE DIC3dvX9nT8gCPoaZ1I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:36 2026 by rpki-client