$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/nhdRqXrVo2qi5r1bs4f6G_5JL6Y.roa File: nhdRqXrVo2qi5r1bs4f6G_5JL6Y.roa (raw, json) Hash identifier: KRKuBcbgB71ZQ4A0ztIty5+sn913K/Db38eDrdHN0IU= Subject key identifier: 9E:17:51:A9:7A:D5:A3:6A:A2:E6:BD:5B:B3:87:FA:1B:FE:49:2F:A6 Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Certificate serial: 4B Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/nhdRqXrVo2qi5r1bs4f6G_5JL6Y.roa Signing time: Tue 31 Mar 2026 08:35:40 +0000 ROA not before: Tue 31 Mar 2026 08:35:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18278 IP address blocks: 219.100.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Validity Not Before: Mar 31 08:35:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9E1751A97AD5A36AA2E6BD5BB387FA1BFE492FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:78:c9:e6:92:ee:bb:5f:b7:e8:05:60:6f: 74:6c:d3:fa:7d:88:ff:b7:a9:22:0f:03:62:4c:82: 44:69:ca:16:f6:18:a7:7b:b8:21:dd:ce:cd:6f:58: c3:f0:b4:86:9a:0a:05:11:63:57:fa:f6:82:94:90: 16:36:7e:f9:9c:0a:af:c8:8c:bb:59:e2:3d:33:62: 69:24:1f:61:7f:61:50:20:85:dc:c2:26:fa:a4:11: 26:df:d6:0a:1f:1a:e1:ab:d5:cf:20:bc:87:8a:2b: 13:89:4f:7e:4e:db:3f:63:c1:04:62:39:6f:58:3a: d9:78:89:3c:86:b2:f6:99:af:cb:10:fc:6b:ee:77: 12:05:3e:64:54:1a:a2:a5:67:cd:ef:b4:4d:57:a6: 82:9d:46:bb:6c:e4:4b:20:dc:75:bc:7a:6e:8c:42: 44:84:15:db:61:6f:41:a5:74:86:fa:67:6e:b2:af: 51:58:f8:d5:c2:3d:49:5e:00:a1:9b:c5:02:01:87: 59:c4:e1:ad:a8:27:fa:78:33:a0:f0:7d:07:1a:0e: 5f:9f:0d:c3:fd:d6:4e:1a:01:7a:92:62:53:ee:df: 19:f5:b1:35:10:39:65:91:db:c9:0a:8b:e2:cc:32: 3d:79:2e:1d:f0:d7:56:6f:5e:34:d8:31:4d:48:ba: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:17:51:A9:7A:D5:A3:6A:A2:E6:BD:5B:B3:87:FA:1B:FE:49:2F:A6 X509v3 Authority Key Identifier: keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/nhdRqXrVo2qi5r1bs4f6G_5JL6Y.roa sbgp-ipAddrBlock: critical IPv4: 219.100.108.0/22 Signature Algorithm: sha256WithRSAEncryption 39:b4:5e:4e:6f:9e:67:09:c0:90:35:75:c6:76:17:0e:e8:f5: 69:fe:ea:59:43:c8:e0:05:a7:4b:bc:a6:b1:55:77:b8:ef:a6: c0:70:57:51:af:22:80:37:d6:d5:2b:bd:03:10:a1:17:d4:78: dd:e6:d7:36:ec:55:1e:60:97:f1:cf:22:e0:c8:63:0c:2c:78: 17:23:bf:39:7d:1d:e3:6e:15:e0:59:69:63:68:89:c1:82:c3: f8:26:7a:c7:31:dc:4f:7f:c9:21:be:f1:9b:3a:50:c5:52:2a: 05:7a:c6:18:0e:5a:9e:7f:5e:f3:86:07:5c:b6:8f:83:56:4a: e2:da:6b:55:1b:0e:79:2f:0e:1b:99:04:90:b0:55:42:85:56: b9:d3:d9:d7:a9:d8:ca:97:91:20:b2:ab:a5:e7:e8:c1:6d:b7: 5d:be:a8:96:5f:b3:bf:45:85:d3:2e:ee:8d:95:21:f5:f4:37: fa:b1:f9:37:54:ac:f7:ad:4d:1b:0b:61:98:9f:b2:6a:4c:48: b3:49:8b:b4:85:ad:46:62:6b:8b:15:66:e0:ca:25:3e:68:a6: 68:58:f6:97:84:70:82:ee:74:91:44:48:76:b6:4b:2e:a5:ee: 15:d3:12:9a:33:b7:44:5f:c8:6f:1b:07:90:91:46:c1:32:92: 5e:1e:50:f2 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI2MDMzMTA4 MzU0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUUxNzUxQTk3QUQ1QTM2 QUEyRTZCRDVCQjM4N0ZBMUJGRTQ5MkZBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6weMnmku67X7foBWBvdGzT+n2I/7epIg8DYkyCRGnKFvYYp3u4 Id3OzW9Yw/C0hpoKBRFjV/r2gpSQFjZ++ZwKr8iMu1niPTNiaSQfYX9hUCCF3MIm +qQRJt/WCh8a4avVzyC8h4orE4lPfk7bP2PBBGI5b1g62XiJPIay9pmvyxD8a+53 EgU+ZFQaoqVnze+0TVemgp1Gu2zkSyDcdbx6boxCRIQV22FvQaV0hvpnbrKvUVj4 1cI9SV4AoZvFAgGHWcThragn+ngzoPB9BxoOX58Nw/3WThoBepJiU+7fGfWxNRA5 ZZHbyQqL4swyPXkuHfDXVm9eNNgxTUi6X9cCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSeF1GpetWjaqLmvVuzh/ob/kkvpjAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy 24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDAvbmhkUnFYclZvMnFpNXIxYnM0ZjZHXzVKTDZZLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkbDANBgkqhkiG9w0BAQsFAAOCAQEA ObReTm+eZwnAkDV1xnYXDuj1af7qWUPI4AWnS7ymsVV3uO+mwHBXUa8igDfW1Su9 AxChF9R43ebXNuxVHmCX8c8i4MhjDCx4FyO/OX0d424V4FlpY2iJwYLD+CZ6xzHc T3/JIb7xmzpQxVIqBXrGGA5ann9e84YHXLaPg1ZK4tprVRsOeS8OG5kEkLBVQoVW udPZ16nYypeRILKrpefowW23Xb6oll+zv0WF0y7ujZUh9fQ3+rH5N1Ss961NGwth mJ+yakxIs0mLtIWtRmJrixVm4MolPmimaFj2l4Rwgu50kURIdrZLLqXuFdMSmjO3 RF/IbxsHkJFGwTKSXh5Q8g== -----END CERTIFICATE-----Generated at Tue Apr 7 19:35:04 2026 by rpki-client