$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/WEQ1vGhDfgb05Oc-116F6VY47a4.roa File: WEQ1vGhDfgb05Oc-116F6VY47a4.roa (raw, json) Hash identifier: dWf13deNX99XEqYCgTqbDaurCMkYi8mTpjvbWCD4sNg= Subject key identifier: 58:44:35:BC:68:43:7E:06:F4:E4:E7:3E:D7:5E:85:E9:56:38:ED:AE Certificate issuer: /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E Certificate serial: 36 Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/WEQ1vGhDfgb05Oc-116F6VY47a4.roa Signing time: Tue 31 Mar 2026 08:39:47 +0000 ROA not before: Tue 31 Mar 2026 08:39:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17931 IP address blocks: 103.238.236.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E Validity Not Before: Mar 31 08:39:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=584435BC68437E06F4E4E73ED75E85E95638EDAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:c0:0c:55:09:a8:f8:92:46:cc:ea:24:89: 3b:c6:92:35:24:cb:aa:0b:9d:ed:f1:dd:85:c7:81: 07:1e:0f:bd:d2:57:1a:d7:e4:2d:0e:12:15:e7:2c: 59:a4:70:d1:e2:2e:61:9b:05:3e:e5:5f:ba:d7:bd: 8a:60:9c:26:b0:30:d0:42:d4:ed:da:33:77:4a:d0: 48:4f:90:e3:b1:1c:48:6a:14:8e:f8:ae:f7:e6:17: 0f:54:f6:59:39:7f:24:b2:d8:e7:05:1c:64:b5:6c: 2c:67:d1:b2:fb:7d:e9:fe:77:dd:8a:04:f4:74:d8: f4:7c:1e:37:11:a9:7e:28:03:cd:fa:42:5a:2a:39: c9:d0:e5:1b:6a:fa:b0:f6:5c:66:07:af:d8:84:18: 47:6e:86:83:cb:39:5a:fa:20:f2:9e:cf:0a:c4:b9: 81:44:9e:fc:6e:b9:0a:0d:7a:2a:e6:45:98:b9:8e: af:d3:c6:91:f4:17:49:cb:64:65:10:25:94:4f:7a: a8:89:fd:40:f2:2b:a3:13:e7:56:08:d0:8f:54:23: 21:e9:fc:9f:60:eb:e2:e6:6f:3a:de:55:72:44:8b: d9:b5:3f:3a:35:e8:9f:6c:52:a3:f5:a7:45:32:55: 01:93:aa:bb:5d:e0:2e:9c:a4:2c:d8:96:aa:5b:fd: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:44:35:BC:68:43:7E:06:F4:E4:E7:3E:D7:5E:85:E9:56:38:ED:AE X509v3 Authority Key Identifier: keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/WEQ1vGhDfgb05Oc-116F6VY47a4.roa sbgp-ipAddrBlock: critical IPv4: 103.238.236.0/22 Signature Algorithm: sha256WithRSAEncryption a8:23:7b:ca:de:16:eb:68:80:66:e8:6b:d8:02:0d:1b:16:67: de:e4:38:74:23:4d:89:18:34:87:ef:59:e7:c6:fc:e5:9c:f6: b0:4e:3b:dd:80:b7:44:7d:7c:57:7a:f2:d1:5f:07:63:8c:ae: e8:2a:28:32:4e:d4:ed:56:45:7a:d9:b7:5b:98:39:88:6e:6e: 1e:26:f5:f2:37:c5:af:18:20:80:e1:08:64:d6:55:21:b0:03: b9:07:48:8d:dc:ec:d4:3e:56:2e:26:28:71:ba:b1:e0:69:8e: 86:07:5e:88:b9:e8:36:86:1e:05:af:85:81:6b:95:fe:f0:e3: 7c:ef:75:34:6b:f3:e9:cc:cc:85:ba:3f:62:03:bd:f3:e8:ea: 7b:45:9d:7f:b1:6d:d6:13:95:6f:78:d0:4c:c4:b0:c4:d1:07: a7:20:ff:6b:25:2f:ca:0e:05:1a:6c:9d:f8:fc:59:74:c3:4c: 78:8e:67:66:d3:c7:76:cb:64:e3:30:4e:1e:47:b9:50:fb:55: 8f:c1:0a:18:4f:33:68:21:54:88:62:e1:bd:99:2e:90:b4:34: ac:c4:16:0d:d9:df:fe:95:a6:85:20:7c:7c:bf:8b:e5:7d:1f: f9:78:63:92:96:ae:2a:50:d9:f4:4d:7f:65:67:ca:db:a4:60: 80:c6:f2:8b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTVD NEY3NzM3N0Q3RjUwNzVDNjRCQTRCNTc5OThCQzc5MzI2QzVFMB4XDTI2MDMzMTA4 Mzk0N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTg0NDM1QkM2ODQzN0Uw NkY0RTRFNzNFRDc1RTg1RTk1NjM4RURBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMyswAxVCaj4kkbM6iSJO8aSNSTLqgud7fHdhceBBx4PvdJXGtfk LQ4SFecsWaRw0eIuYZsFPuVfute9imCcJrAw0ELU7dozd0rQSE+Q47EcSGoUjviu 9+YXD1T2WTl/JLLY5wUcZLVsLGfRsvt96f533YoE9HTY9HweNxGpfigDzfpCWio5 ydDlG2r6sPZcZgev2IQYR26Gg8s5Wvog8p7PCsS5gUSe/G65Cg16KuZFmLmOr9PG kfQXSctkZRAllE96qIn9QPIroxPnVgjQj1QjIen8n2Dr4uZvOt5VckSL2bU/OjXo n2xSo/WnRTJVAZOqu13gLpykLNiWqlv9YgECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRYRDW8aEN+BvTk5z7XXoXpVjjtrjAfBgNVHSMEGDAWgBTuXE93N31/UHXGS6S1 eZi8eTJsXjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjUzLzdseFBkemQ5ZjFCMXhrdWt0WG1ZdkhreWJGNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdseFBkemQ5ZjFCMXhrdWt0WG1Zdkhr eWJGNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82NTMvV0VRMXZHaERmZ2IwNU9jLTExNkY2Vlk0N2E0LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfu7DANBgkqhkiG9w0BAQsFAAOCAQEA qCN7yt4W62iAZuhr2AINGxZn3uQ4dCNNiRg0h+9Z58b85Zz2sE473YC3RH18V3ry 0V8HY4yu6CooMk7U7VZFetm3W5g5iG5uHib18jfFrxgggOEIZNZVIbADuQdIjdzs 1D5WLiYocbqx4GmOhgdeiLnoNoYeBa+FgWuV/vDjfO91NGvz6czMhbo/YgO98+jq e0Wdf7Ft1hOVb3jQTMSwxNEHpyD/ayUvyg4FGmyd+PxZdMNMeI5nZtPHdstk4zBO Hke5UPtVj8EKGE8zaCFUiGLhvZkukLQ0rMQWDdnf/pWmhSB8fL+L5X0f+Xhjkpau KlDZ9E1/ZWfK26RggMbyiw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:11 2026 by rpki-client