$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/WGs3QQ3bDnJj3zhGw9oBMiesTHc.roa File: WGs3QQ3bDnJj3zhGw9oBMiesTHc.roa (raw, json) Hash identifier: fY8GddP13TK9afDCvdQJNV55OlSZ7B2ekkcLjkdpyzE= Subject key identifier: 58:6B:37:41:0D:DB:0E:72:63:DF:38:46:C3:DA:01:32:27:AC:4C:77 Certificate issuer: /CN=70124EAB896039E137736AA7022F934D797F5684 Certificate serial: 5A Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/WGs3QQ3bDnJj3zhGw9oBMiesTHc.roa Signing time: Tue 31 Mar 2026 08:16:00 +0000 ROA not before: Tue 31 Mar 2026 08:16:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18094 IP address blocks: 219.118.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70124EAB896039E137736AA7022F934D797F5684 Validity Not Before: Mar 31 08:16:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=586B37410DDB0E7263DF3846C3DA013227AC4C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:c8:05:d1:e6:c2:40:4f:d6:59:af:c1:c8: 51:32:1c:94:22:46:dc:29:2e:d9:0e:f4:0a:6e:78: 1b:21:bc:31:96:01:de:58:87:e7:92:58:22:95:c8: de:7b:9a:80:47:6e:b9:64:02:ad:3a:d5:c9:83:4f: 72:b3:51:69:f1:12:bc:83:7c:6f:58:4a:6b:13:23: 1f:11:17:69:c6:aa:ce:9e:2b:85:dd:a0:a9:12:75: 8b:fc:47:17:00:33:78:07:eb:a7:4d:23:85:12:08: 6b:24:31:83:f1:0d:82:65:68:b7:13:70:f6:00:c8: 00:3b:23:f5:6e:ef:be:df:25:4c:df:2b:9f:96:c5: ff:53:a3:04:a6:13:2c:54:d8:2d:e0:98:fd:fa:74: cb:5e:73:66:7b:43:03:fc:85:14:9e:79:eb:8d:94: 33:ba:8b:7f:df:5f:a8:79:6d:d4:46:5b:db:ab:59: 01:94:ca:ff:4d:f4:6e:b2:60:31:77:5c:8c:35:06: 31:33:4c:fe:b1:96:85:4b:77:18:62:49:79:f8:41: c9:a1:eb:ef:09:f7:ea:5d:09:e6:65:c4:20:2c:fd: ec:ac:86:ef:1c:9f:d8:9d:47:46:0f:2c:4b:59:15: 7c:56:4e:38:8a:3d:52:82:8a:67:36:1d:72:ac:19: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:37:41:0D:DB:0E:72:63:DF:38:46:C3:DA:01:32:27:AC:4C:77 X509v3 Authority Key Identifier: keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/WGs3QQ3bDnJj3zhGw9oBMiesTHc.roa sbgp-ipAddrBlock: critical IPv4: 219.118.112.0/20 Signature Algorithm: sha256WithRSAEncryption 71:0a:fa:0a:3d:3f:db:a5:85:a3:ba:5f:89:b8:24:05:52:6e: c6:cb:a6:1c:bd:99:90:b3:3e:eb:f4:a8:65:c8:0f:86:58:ec: 1a:f0:ad:12:b1:3e:54:db:2c:cf:56:0d:65:fa:f2:5c:8d:9c: 2b:17:4f:83:61:e3:c9:a7:6e:db:c0:cb:16:a9:d3:f9:e2:eb: 9e:a8:08:3b:a8:ac:ba:51:dc:a5:24:5a:78:02:24:4a:79:af: 68:43:21:8c:ee:74:5d:7e:7d:36:bc:ff:36:bf:f0:96:e6:1d: b2:31:3d:34:59:e3:09:b8:21:6a:3a:a0:ed:61:19:4a:91:14: d0:0f:62:26:60:1c:a5:93:44:e0:f2:4c:36:c3:ec:da:42:1d: 78:c5:69:b1:ed:08:d4:7c:01:31:e1:df:4c:f7:77:3b:8a:20: 48:b8:04:bb:c3:74:13:88:a8:ff:6f:78:35:28:05:05:f4:eb: ef:5b:b9:34:41:fd:6c:8a:57:7b:c6:d5:1a:4d:37:e5:b4:dc: cb:73:62:7c:41:fd:82:0c:fa:40:28:b5:62:50:47:db:57:ff: ab:04:b3:f5:9b:27:85:12:fb:4f:f3:d5:44:6e:0e:c2:31:2f: e9:5a:6c:38:fe:15:90:7f:f6:ca:8a:e7:76:40:78:88:e9:c3: 70:f3:b3:f2 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MDEy NEVBQjg5NjAzOUUxMzc3MzZBQTcwMjJGOTM0RDc5N0Y1Njg0MB4XDTI2MDMzMTA4 MTYwMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTg2QjM3NDEwRERCMEU3 MjYzREYzODQ2QzNEQTAxMzIyN0FDNEM3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ19yAXR5sJAT9ZZr8HIUTIclCJG3Cku2Q70Cm54GyG8MZYB3liH 55JYIpXI3nuagEduuWQCrTrVyYNPcrNRafESvIN8b1hKaxMjHxEXacaqzp4rhd2g qRJ1i/xHFwAzeAfrp00jhRIIayQxg/ENgmVotxNw9gDIADsj9W7vvt8lTN8rn5bF /1OjBKYTLFTYLeCY/fp0y15zZntDA/yFFJ55642UM7qLf99fqHlt1EZb26tZAZTK /030brJgMXdcjDUGMTNM/rGWhUt3GGJJefhByaHr7wn36l0J5mXEICz97KyG7xyf 2J1HRg8sS1kVfFZOOIo9UoKKZzYdcqwZ8H8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRYazdBDdsOcmPfOEbD2gEyJ6xMdzAfBgNVHSMEGDAWgBRwEk6riWA54TdzaqcC L5NNeX9WhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzE4L2NCSk9xNGxnT2VFM2MycW5BaS1UVFhsX1ZvUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NCSk9xNGxnT2VFM2MycW5BaS1UVFhs X1ZvUS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC83MTgvV0dzM1FRM2JEbkpqM3poR3c5b0JNaWVzVEhjLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNt2cDANBgkqhkiG9w0BAQsFAAOCAQEA cQr6Cj0/26WFo7pfibgkBVJuxsumHL2ZkLM+6/SoZcgPhljsGvCtErE+VNssz1YN ZfryXI2cKxdPg2Hjyadu28DLFqnT+eLrnqgIO6isulHcpSRaeAIkSnmvaEMhjO50 XX59Nrz/Nr/wluYdsjE9NFnjCbghajqg7WEZSpEU0A9iJmAcpZNE4PJMNsPs2kId eMVpse0I1HwBMeHfTPd3O4ogSLgEu8N0E4io/294NSgFBfTr71u5NEH9bIpXe8bV Gk035bTcy3NifEH9ggz6QCi1YlBH21f/qwSz9ZsnhRL7T/PVRG4OwjEv6VpsOP4V kH/2yorndkB4iOnDcPOz8g== -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:38 2026 by rpki-client