$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/5VFnIlY5HBur8nP6h7fwol5iBJs.roa File: 5VFnIlY5HBur8nP6h7fwol5iBJs.roa (raw, json) Hash identifier: W290xiEDHcNvE0mAs7MHKb16xlS6Q3YgzhWhdC1suvc= Subject key identifier: E5:51:67:22:56:39:1C:1B:AB:F2:73:FA:87:B7:F0:A2:5E:62:04:9B Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: A6 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/5VFnIlY5HBur8nP6h7fwol5iBJs.roa Signing time: Tue 31 Mar 2026 07:50:49 +0000 ROA not before: Tue 31 Mar 2026 07:50:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18144 IP address blocks: 223.223.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Mar 31 07:50:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E551672256391C1BABF273FA87B7F0A25E62049B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:3a:b6:a5:fc:b3:b9:d9:a0:a6:fd:64:cf: 69:f5:1b:01:36:ff:ba:8c:40:7a:f5:3a:be:16:4c: 81:37:82:52:3f:a7:6c:f7:0b:20:59:f2:8d:f2:21: 7a:42:09:11:1f:9a:ca:76:4a:27:bd:dc:b6:5b:3e: 96:d8:e8:ec:ba:2a:c8:3b:a6:3e:51:a0:91:be:9f: 8b:8a:bc:61:7d:b7:ff:16:fa:e5:30:52:e3:60:4c: ee:bd:cc:9b:99:9e:f6:92:3c:c6:ca:6e:2b:c2:c7: 40:71:13:cb:d9:39:d1:3f:81:d8:4b:c2:ab:6f:38: 54:b6:68:07:7c:6b:16:9e:9a:ec:c2:35:e5:84:1c: a4:99:67:c4:dc:d2:ff:57:6a:78:98:a4:32:e0:63: 06:54:6b:ac:67:1d:35:ff:b0:42:2e:14:da:b9:b9: 27:51:3a:20:9b:e1:2b:d4:e8:c2:6e:8a:f4:f1:f2: 95:46:fd:3a:f9:da:67:35:e5:77:94:6d:a9:00:8f: 89:2d:d3:72:5a:ac:f8:b9:5b:90:35:21:af:da:a9: f2:e0:5e:79:85:f5:06:30:40:ba:8e:5c:ca:27:3f: 66:dd:b9:48:df:23:43:f8:b0:fe:a8:35:86:3d:a0: 21:0a:71:88:ab:ba:bf:5a:56:01:b6:8c:f0:02:52: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:67:22:56:39:1C:1B:AB:F2:73:FA:87:B7:F0:A2:5E:62:04:9B X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/5VFnIlY5HBur8nP6h7fwol5iBJs.roa sbgp-ipAddrBlock: critical IPv4: 223.223.0.0/17 Signature Algorithm: sha256WithRSAEncryption ab:97:39:46:84:aa:f3:6d:b8:41:ce:11:44:b1:e4:1c:9a:f7: 79:33:f5:d0:42:6d:41:e4:d3:e3:ea:83:65:a1:db:f9:2c:25: 51:f8:df:63:4a:fc:e6:f7:83:fd:c5:36:72:72:7f:bd:0e:6a: 22:5d:5a:f8:8a:f2:f8:2e:aa:29:4c:d1:6e:77:30:90:a0:89: ca:f1:58:aa:4a:38:10:ef:e7:0c:b6:fb:1f:29:be:07:b2:7e: 03:c8:cd:39:93:f5:22:02:4c:bd:ef:c6:f4:3a:0e:f2:fd:79: 94:7d:59:83:6e:66:a1:f8:a8:30:0f:6a:24:aa:87:c7:6c:2c: a9:0d:9e:f4:e5:52:e0:4f:5d:67:7a:e2:f3:b8:d0:bb:9b:6e: f5:86:d6:db:57:ec:8c:dd:f2:5c:e8:76:55:85:1e:02:e8:92: ac:0a:3b:38:b4:f8:79:e2:4f:1c:ac:4a:29:8d:0d:ca:ed:1b: 20:00:74:83:61:66:a0:0e:97:40:e1:20:b7:f7:36:f8:95:fd: 2b:b1:c3:c1:64:5f:55:31:21:42:bb:f3:b0:16:af:5c:5b:fb: ca:e6:ac:15:46:fe:7f:cd:54:4e:48:8f:44:01:65:e7:96:bc: 4f:81:31:3d:23:20:86:70:c7:ae:b5:59:3a:88:e1:f8:c7:6f: ac:89:f6:78 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw NzUwNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1NTE2NzIyNTYzOTFD MUJBQkYyNzNGQTg3QjdGMEEyNUU2MjA0OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiWDq2pfyzudmgpv1kz2n1GwE2/7qMQHr1Or4WTIE3glI/p2z3 CyBZ8o3yIXpCCREfmsp2Sie93LZbPpbY6Oy6Ksg7pj5RoJG+n4uKvGF9t/8W+uUw UuNgTO69zJuZnvaSPMbKbivCx0BxE8vZOdE/gdhLwqtvOFS2aAd8axaemuzCNeWE HKSZZ8Tc0v9XaniYpDLgYwZUa6xnHTX/sEIuFNq5uSdROiCb4SvU6MJuivTx8pVG /Tr52mc15XeUbakAj4kt03JarPi5W5A1Ia/aqfLgXnmF9QYwQLqOXMonP2bduUjf I0P4sP6oNYY9oCEKcYirur9aVgG2jPACUrd1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU5VFnIlY5HBur8nP6h7fwol5iBJswHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNzgzLzVWRm5JbFk1SEJ1cjhuUDZoN2Z3b2w1aUJKcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAff3wAwDQYJKoZIhvcNAQELBQADggEB AKuXOUaEqvNtuEHOEUSx5Bya93kz9dBCbUHk0+Pqg2Wh2/ksJVH432NK/Ob3g/3F NnJyf70OaiJdWviK8vguqilM0W53MJCgicrxWKpKOBDv5wy2+x8pvgeyfgPIzTmT 9SICTL3vxvQ6DvL9eZR9WYNuZqH4qDAPaiSqh8dsLKkNnvTlUuBPXWd64vO40Lub bvWG1ttX7Izd8lzodlWFHgLokqwKOzi0+HniTxysSimNDcrtGyAAdINhZqAOl0Dh ILf3NviV/Suxw8FkX1UxIUK787AWr1xb+8rmrBVG/n/NVE5Ij0QBZeeWvE+BMT0j IIZwx661WTqI4fjHb6yJ9ng= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:14 2026 by rpki-client