$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/h-UKsrHjVzkF8E1mHx4piGHTZsE.roa File: h-UKsrHjVzkF8E1mHx4piGHTZsE.roa (raw, json) Hash identifier: qQot26Nr+8cAMsVUrDeWq02ydhLOpit3YZndMLIO5L4= Subject key identifier: 87:E5:0A:B2:B1:E3:57:39:05:F0:4D:66:1F:1E:29:88:61:D3:66:C1 Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Certificate serial: 40 Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/h-UKsrHjVzkF8E1mHx4piGHTZsE.roa Signing time: Tue 31 Mar 2026 08:32:38 +0000 ROA not before: Tue 31 Mar 2026 08:32:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18283 IP address blocks: 202.213.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Validity Not Before: Mar 31 08:32:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=87E50AB2B1E3573905F04D661F1E298861D366C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5f:19:87:1b:da:74:90:6b:d2:bb:68:5c:f0: 1b:e0:d1:02:fa:ed:e4:54:24:5d:e5:91:e5:ce:4b: a3:a3:2c:7a:da:1e:8f:76:3a:ea:1e:ef:63:eb:28: 0a:1f:87:dd:24:7d:a6:a6:f3:1b:e3:66:f0:48:16: 7d:53:db:5a:2c:5a:6a:0f:d3:3a:b1:46:06:51:37: 0d:4e:71:4e:d7:36:e0:8b:31:75:6c:a0:c5:08:61: ae:ea:71:c2:c7:09:cb:88:fd:a3:5f:0a:2f:49:82: 09:d0:76:b5:fd:0e:f3:af:1e:39:ee:74:6e:86:c6: 8d:08:3a:d9:96:2a:5b:78:74:2b:0d:ad:8a:4d:d5: 43:b0:f6:41:d3:9b:0e:6f:72:fe:e9:e2:b6:9f:97: ff:06:2d:1d:18:eb:c3:69:e7:1e:85:64:6f:58:ca: 48:19:ef:1f:b9:a1:54:12:d6:25:91:19:83:11:16: 16:48:57:c6:c1:9c:14:0f:a3:4e:6b:01:98:48:e0: ad:9d:c6:06:75:8f:7d:18:f1:dc:a4:09:47:88:4a: 2c:be:ee:f8:99:a1:d6:d4:09:08:fb:68:dd:11:cb: c4:df:c3:21:80:3b:79:ee:10:89:53:e5:cd:ff:ff: 45:4f:35:31:b3:6d:e0:fe:4d:03:50:37:f6:aa:aa: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:0A:B2:B1:E3:57:39:05:F0:4D:66:1F:1E:29:88:61:D3:66:C1 X509v3 Authority Key Identifier: keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/h-UKsrHjVzkF8E1mHx4piGHTZsE.roa sbgp-ipAddrBlock: critical IPv4: 202.213.177.0/24 Signature Algorithm: sha256WithRSAEncryption 87:95:1a:db:a9:7c:6b:bf:68:cb:19:27:b8:f6:33:4f:fb:78: d8:88:74:e7:a2:76:f9:02:db:60:40:30:0a:de:d4:72:b8:75: 36:79:c1:c5:72:24:f0:d0:fa:f5:a4:72:08:67:95:6e:9e:0c: 0f:41:fa:4f:c5:63:ba:c4:09:7c:a8:6b:43:96:f6:d9:cc:28: 3e:f8:b0:41:e9:fb:ed:2e:3c:7d:42:97:a0:44:87:da:b7:e8: e1:32:ff:2c:70:45:ce:8a:d7:b8:7f:68:d1:f7:ce:d3:d2:bb: fe:70:0c:2d:bb:29:86:a1:31:a8:9c:88:75:48:61:76:83:41: 07:41:26:b7:db:5b:f0:b2:49:d2:cf:db:ca:2d:c0:0c:ad:c5: 9c:db:21:29:f9:87:86:47:c6:68:f7:b8:1f:4f:4a:66:aa:e1: f9:74:f6:24:85:16:54:c2:71:2f:ef:a5:33:2f:c6:7c:91:d4: a2:34:c2:8b:e5:b1:59:dc:6f:c1:a2:44:9a:89:d3:7f:a5:ca: 64:41:8f:b8:52:1f:3a:b2:a3:7b:89:5a:4e:54:4b:61:bd:f5: 05:c5:6a:7b:a0:a2:fc:71:fd:05:fe:8b:ce:b2:8e:fa:78:8f: 7e:3f:54:58:30:38:52:2b:c0:fe:21:0f:f9:db:8c:6b:35:4f: 77:b1:55:2f -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMzMTA4 MzIzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODdFNTBBQjJCMUUzNTcz OTA1RjA0RDY2MUYxRTI5ODg2MUQzNjZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOlfGYcb2nSQa9K7aFzwG+DRAvrt5FQkXeWR5c5Lo6Msetoej3Y6 6h7vY+soCh+H3SR9pqbzG+Nm8EgWfVPbWixaag/TOrFGBlE3DU5xTtc24IsxdWyg xQhhrupxwscJy4j9o18KL0mCCdB2tf0O868eOe50bobGjQg62ZYqW3h0Kw2tik3V Q7D2QdObDm9y/unitp+X/wYtHRjrw2nnHoVkb1jKSBnvH7mhVBLWJZEZgxEWFkhX xsGcFA+jTmsBmEjgrZ3GBnWPfRjx3KQJR4hKLL7u+Jmh1tQJCPto3RHLxN/DIYA7 ee4QiVPlzf//RU81MbNt4P5NA1A39qqqXIsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSH5QqyseNXOQXwTWYfHimIYdNmwTAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9 n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4 TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDcvaC1VS3NySGpWemtGOEUxbUh4NHBpR0hUWnNFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMrVsTANBgkqhkiG9w0BAQsFAAOCAQEA h5Ua26l8a79oyxknuPYzT/t42Ih056J2+QLbYEAwCt7Ucrh1NnnBxXIk8ND69aRy CGeVbp4MD0H6T8VjusQJfKhrQ5b22cwoPviwQen77S48fUKXoESH2rfo4TL/LHBF zorXuH9o0ffO09K7/nAMLbsphqExqJyIdUhhdoNBB0Emt9tb8LJJ0s/byi3ADK3F nNshKfmHhkfGaPe4H09KZqrh+XT2JIUWVMJxL++lMy/GfJHUojTCi+WxWdxvwaJE monTf6XKZEGPuFIfOrKje4laTlRLYb31BcVqe6Ci/HH9Bf6LzrKO+niPfj9UWDA4 UivA/iEP+duMazVPd7FVLw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:56 2026 by rpki-client