$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/hua4Y2dnHH1RTJ6MgLoGPf_U8EQ.roa File: hua4Y2dnHH1RTJ6MgLoGPf_U8EQ.roa (raw, json) Hash identifier: v/gZw9X9/NmickW4jZol0e1dVaNi0uKR8jLTJeoCFDc= Subject key identifier: 86:E6:B8:63:67:67:1C:7D:51:4C:9E:8C:80:BA:06:3D:FF:D4:F0:44 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 9C Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/hua4Y2dnHH1RTJ6MgLoGPf_U8EQ.roa Signing time: Tue 31 Mar 2026 07:50:46 +0000 ROA not before: Tue 31 Mar 2026 07:50:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18144 IP address blocks: 121.200.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Mar 31 07:50:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=86E6B86367671C7D514C9E8C80BA063DFFD4F044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:70:89:dc:f7:a6:78:2f:94:cc:3c:42:6f: 3a:e0:64:ae:1c:74:69:9d:ed:27:20:97:b1:88:ef: 1e:c4:ee:20:02:f1:6a:ee:d1:3a:bd:f7:76:3b:6f: 0e:11:65:ef:14:17:31:29:8f:c3:de:28:d6:21:b6: aa:85:53:22:50:83:d7:df:72:f7:ce:83:06:ee:e4: 82:06:5e:3e:ed:78:a7:9b:93:b0:61:b9:e8:9a:47: 1c:32:3a:6e:bd:e9:0f:3f:83:05:20:ad:db:9b:26: a6:ac:89:ad:69:e2:4a:0e:8a:76:4e:ef:e9:04:6a: 38:9d:2c:3d:14:e6:71:ea:b5:5c:03:bd:ed:6f:cb: 6a:4b:f2:11:e2:75:61:d8:80:0e:52:2b:58:63:e3: f8:d5:9b:e6:d4:3d:0d:7e:8a:1c:58:d4:de:5b:fb: 84:0a:92:62:bd:f9:ab:9d:4b:4f:b9:33:cc:97:80: 18:0c:1f:a6:80:fc:53:d3:75:7b:52:3b:fe:eb:8e: 4c:2c:60:05:26:1a:d8:52:f4:fd:12:f8:42:f2:2c: 1f:ae:87:03:59:77:a8:80:d9:b7:6e:43:ce:c3:fa: c2:41:a3:00:bb:85:9b:c0:9c:10:9d:84:29:24:77: 6c:7e:95:3b:6d:ae:66:af:25:76:36:dd:09:99:c9: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E6:B8:63:67:67:1C:7D:51:4C:9E:8C:80:BA:06:3D:FF:D4:F0:44 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/hua4Y2dnHH1RTJ6MgLoGPf_U8EQ.roa sbgp-ipAddrBlock: critical IPv4: 121.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 07:c1:81:24:81:1f:9f:66:2b:88:91:f8:3f:85:3e:54:a8:5c: c8:01:1d:fc:1e:5a:ac:af:e0:17:b7:2d:93:97:38:4f:59:a4: 9e:fb:a6:49:ec:57:88:59:d6:bf:01:d1:8a:6f:e7:16:b1:e0: 25:47:1d:12:1b:86:47:c5:7b:ab:cd:93:d3:67:82:ed:93:bb: 47:67:ba:d6:4e:bd:d1:dc:5e:aa:76:2d:76:73:99:2d:dd:44: 63:1e:dc:f4:71:69:15:b9:d9:a3:c9:28:49:48:5f:65:e8:de: 2b:cf:9b:6a:2d:85:fc:d8:07:12:69:f7:7a:ed:10:22:81:6f: d9:56:d5:34:ac:11:d2:a6:77:9e:a1:25:00:4c:25:81:e1:ab: 45:20:8c:76:d0:f8:dd:4c:3e:d8:ef:e7:bd:87:e7:be:5e:29: e5:f2:de:22:48:30:98:98:81:b2:80:e8:53:40:80:94:b4:23: d2:13:e3:5c:22:03:c2:f3:2b:e3:7c:09:e2:b6:bd:5c:51:fa: 54:f2:a1:71:ba:50:bc:d1:68:46:4f:ed:8d:72:7f:de:b0:81: e1:c4:61:3d:b4:76:10:c3:ce:b7:59:58:6b:98:47:ed:c9:1e: 4c:e7:91:d5:32:8c:2a:a1:c0:28:ea:b3:6c:fe:4d:71:a7:09: 2b:a8:c0:5b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw NzUwNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2RTZCODYzNjc2NzFD N0Q1MTRDOUU4QzgwQkEwNjNERkZENEYwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe+3CJ3PemeC+UzDxCbzrgZK4cdGmd7Scgl7GI7x7E7iAC8Wru 0Tq993Y7bw4RZe8UFzEpj8PeKNYhtqqFUyJQg9ffcvfOgwbu5IIGXj7teKebk7Bh ueiaRxwyOm696Q8/gwUgrdubJqasia1p4koOinZO7+kEajidLD0U5nHqtVwDve1v y2pL8hHidWHYgA5SK1hj4/jVm+bUPQ1+ihxY1N5b+4QKkmK9+audS0+5M8yXgBgM H6aA/FPTdXtSO/7rjkwsYAUmGthS9P0S+ELyLB+uhwNZd6iA2bduQ87D+sJBowC7 hZvAnBCdhCkkd2x+lTttrmavJXY23QmZyXD3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhua4Y2dnHH1RTJ6MgLoGPf/U8EQwHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNzgzL2h1YTRZMmRuSEgxUlRKNk1nTG9HUGZfVThFUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ5yIAwDQYJKoZIhvcNAQELBQADggEB AAfBgSSBH59mK4iR+D+FPlSoXMgBHfweWqyv4Be3LZOXOE9ZpJ77pknsV4hZ1r8B 0Ypv5xax4CVHHRIbhkfFe6vNk9Nngu2Tu0dnutZOvdHcXqp2LXZzmS3dRGMe3PRx aRW52aPJKElIX2Xo3ivPm2othfzYBxJp93rtECKBb9lW1TSsEdKmd56hJQBMJYHh q0UgjHbQ+N1MPtjv572H575eKeXy3iJIMJiYgbKA6FNAgJS0I9IT41wiA8LzK+N8 CeK2vVxR+lTyoXG6ULzRaEZP7Y1yf96wgeHEYT20dhDDzrdZWGuYR+3JHkznkdUy jCqhwCjqs2z+TXGnCSuowFs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:34 2026 by rpki-client