$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa File: WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa (raw, json) Hash identifier: xNwv/t3ZhrBuwnOEPs1cLgFUpEM9FhAeFNEugYAPzBk= Subject key identifier: 5A:B3:1F:B7:97:B8:3E:73:E0:31:8E:CD:E9:C3:19:05:A5:0C:67:87 Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6 Certificate serial: 40 Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa Signing time: Tue 31 Mar 2026 08:33:21 +0000 ROA not before: Tue 31 Mar 2026 08:33:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23791 IP address blocks: 124.246.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6 Validity Not Before: Mar 31 08:33:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5AB31FB797B83E73E0318ECDE9C31905A50C6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:66:1e:31:21:f5:62:a7:a2:fe:fb:be:42: 90:6e:96:65:72:c8:09:cf:40:c2:89:85:05:09:2c: b0:a3:c4:b5:d2:bc:90:e9:b3:f0:4c:6d:53:7b:69: 3e:5b:ec:5d:5a:07:2c:82:3c:48:46:ec:a0:42:35: 2c:82:34:8a:3f:44:04:fd:44:4e:24:45:fa:a6:d1: 10:96:6a:c9:c8:e5:5d:3b:37:d7:2c:7e:7c:f4:a8: 2d:ac:2d:b6:6a:8f:00:11:f4:92:4a:6e:f9:0a:34: 95:df:f2:ed:0a:27:1b:21:65:73:04:9c:6f:c7:5c: 01:24:c0:88:61:3b:b7:a0:3a:c9:b6:ff:a4:e3:dd: 95:f0:ae:d5:be:8f:0b:b3:bf:c0:e8:6b:e0:2b:f1: 50:f6:d6:c0:64:94:44:a1:05:15:d6:90:ff:95:38: 35:f6:79:5d:cd:58:e8:4d:36:16:a5:b8:ba:4e:1d: a8:69:da:ee:7e:a1:44:e4:ee:36:84:62:86:f3:f5: ef:4c:c0:8b:25:8f:67:ac:ef:7c:ba:ad:33:d5:2d: 61:32:3b:e7:f1:8f:6c:02:3d:c5:f7:71:a5:c9:b6: 67:f3:c7:4f:95:26:e3:a9:6d:60:ec:42:ec:c8:c5: 5c:12:20:29:7d:34:16:65:83:0a:7e:44:d2:26:a4: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:1F:B7:97:B8:3E:73:E0:31:8E:CD:E9:C3:19:05:A5:0C:67:87 X509v3 Authority Key Identifier: keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/WrMft5e4PnPgMY7N6cMZBaUMZ4c.roa sbgp-ipAddrBlock: critical IPv4: 124.246.128.0/17 Signature Algorithm: sha256WithRSAEncryption ae:95:91:67:7e:ac:47:cf:2b:90:cd:45:15:14:f0:72:50:2d: 24:c8:b5:dd:ef:d8:d0:d0:42:5e:cc:19:4f:f5:52:86:33:f2: bd:aa:68:5f:70:f4:c4:a2:74:85:cb:24:a5:92:f4:96:05:04: fa:97:02:a1:64:01:7b:23:20:e0:57:01:da:5d:e7:e6:ef:64: 26:2f:3c:85:02:f5:86:6d:3c:73:8b:42:b3:6d:14:5a:c2:a3: 50:9c:f1:fa:13:5b:35:12:24:92:89:4d:4e:19:c1:c8:5c:ba: d6:36:9b:10:26:f9:96:73:27:7b:04:fc:41:20:48:4c:6f:7d: f7:12:71:cb:9f:d7:46:61:44:7f:64:c8:e3:f2:ac:cb:c2:39: 8b:ce:6d:fb:f7:09:70:1a:f4:89:b1:cf:32:21:74:46:f5:49: 8f:fc:da:4d:a3:45:45:3d:eb:9b:63:e3:5b:97:4d:e9:09:a6: ff:3b:8f:62:85:6a:bf:52:71:c8:7c:4d:8f:1c:ed:29:b0:30: 93:18:af:0a:82:54:51:c5:bd:96:c8:8b:28:14:a9:9b:b2:a2: 82:32:73:01:1f:55:5d:3b:86:64:b0:b0:23:b2:0f:a0:b4:94: fe:a5:b9:60:4b:a0:48:e6:27:db:ba:cb:7a:b5:e9:6f:67:c1: e9:f8:8c:01 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzYy QjJFM0U0NzhEQ0JBRDZGNDJBNDUxMTI5MENGQzM3M0MyNEM2MB4XDTI2MDMzMTA4 MzMyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUFCMzFGQjc5N0I4M0U3 M0UwMzE4RUNERTlDMzE5MDVBNTBDNjc4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKw6Zh4xIfVip6L++75CkG6WZXLICc9AwomFBQkssKPEtdK8kOmz 8ExtU3tpPlvsXVoHLII8SEbsoEI1LII0ij9EBP1ETiRF+qbREJZqycjlXTs31yx+ fPSoLawttmqPABH0kkpu+Qo0ld/y7QonGyFlcwScb8dcASTAiGE7t6A6ybb/pOPd lfCu1b6PC7O/wOhr4CvxUPbWwGSURKEFFdaQ/5U4NfZ5Xc1Y6E02FqW4uk4dqGna 7n6hROTuNoRihvP170zAiyWPZ6zvfLqtM9UtYTI75/GPbAI9xfdxpcm2Z/PHT5Um 46ltYOxC7MjFXBIgKX00FmWDCn5E0iakGa0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRasx+3l7g+c+Axjs3pwxkFpQxnhzAfBgNVHSMEGDAWgBQjYrLj5Hjcutb0KkUR KQz8NzwkxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAyL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0RjOEpNWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0Rj OEpNWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDIvV3JNZnQ1ZTRQblBnTVk3TjZjTVpCYVVNWjRjLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3z2gDANBgkqhkiG9w0BAQsFAAOCAQEA rpWRZ36sR88rkM1FFRTwclAtJMi13e/Y0NBCXswZT/VShjPyvapoX3D0xKJ0hcsk pZL0lgUE+pcCoWQBeyMg4FcB2l3n5u9kJi88hQL1hm08c4tCs20UWsKjUJzx+hNb NRIkkolNThnByFy61jabECb5lnMnewT8QSBITG999xJxy5/XRmFEf2TI4/Ksy8I5 i85t+/cJcBr0ibHPMiF0RvVJj/zaTaNFRT3rm2PjW5dN6Qmm/zuPYoVqv1JxyHxN jxztKbAwkxivCoJUUcW9lsiLKBSpm7KigjJzAR9VXTuGZLCwI7IPoLSU/qW5YEug SOYn27rLerXpb2fB6fiMAQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:51 2026 by rpki-client