$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/DCjT-hgxcs2x5-262vcrX-CpLRQ.roa File: DCjT-hgxcs2x5-262vcrX-CpLRQ.roa (raw, json) Hash identifier: 5WorNaaM5Sxl8TCqXOgK0maco6xIsSHEGaQte0qFniQ= Subject key identifier: 0C:28:D3:FA:18:31:72:CD:B1:E7:ED:BA:DA:F7:2B:5F:E0:A9:2D:14 Certificate issuer: /CN=55F35A82A236BCED819088D4D90887E0B965C7CF Certificate serial: 2B Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/DCjT-hgxcs2x5-262vcrX-CpLRQ.roa Signing time: Tue 31 Mar 2026 08:39:22 +0000 ROA not before: Tue 31 Mar 2026 08:39:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23775 IP address blocks: 180.235.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Validity Not Before: Mar 31 08:39:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0C28D3FA183172CDB1E7EDBADAF72B5FE0A92D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:b4:5c:55:fa:fa:ff:15:ac:46:4e:90:84: 36:07:c1:cb:7b:94:3d:99:e0:3b:09:f0:41:bf:22: e7:3c:05:5e:b1:e0:ec:7a:dd:11:f9:3b:87:80:e6: ed:fd:71:f4:05:54:d6:93:bc:90:8f:f2:94:f2:75: 5b:31:16:c1:b4:66:df:a0:47:e1:6e:cf:af:14:31: 08:b2:af:bb:b0:99:b1:b2:a3:59:69:19:6c:01:00: 24:e4:0a:4f:07:b5:93:62:f3:f7:f9:29:3a:0c:cd: 60:dc:9e:3e:75:46:f3:fc:1b:a0:72:fb:ff:c4:08: f9:dc:a1:c1:e6:b0:07:d3:0c:62:fe:06:4e:db:9f: c0:f5:ab:6a:a7:f0:c5:b5:78:a7:b4:13:ac:34:20: 41:ba:7d:f7:88:03:81:f9:0c:32:db:d1:11:70:d2: 6b:17:f2:b5:1e:af:b5:d7:73:23:81:06:32:77:03: cf:fb:1b:63:8d:a1:fa:42:9e:96:57:1f:9b:22:7c: f0:c2:da:b0:04:be:ce:38:cc:ba:2c:92:4f:3b:67: d4:47:e8:1a:29:ac:7b:a9:28:42:93:db:99:c9:22: 40:eb:69:7c:d8:7f:c8:82:5e:9c:80:e9:26:0b:09: 66:1c:0a:50:66:8f:15:0d:ad:82:b4:52:13:ad:52: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:D3:FA:18:31:72:CD:B1:E7:ED:BA:DA:F7:2B:5F:E0:A9:2D:14 X509v3 Authority Key Identifier: keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/DCjT-hgxcs2x5-262vcrX-CpLRQ.roa sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:0e:00:53:68:4c:cf:ca:ca:21:71:cf:9f:be:8d:6e:4c:69: 77:01:86:24:bd:a1:2f:a0:72:92:31:91:40:4d:37:d9:d0:96: b8:41:35:0e:8d:8e:b8:9d:68:38:b3:44:94:4a:53:2d:eb:6b: a7:de:ce:b3:cf:a0:7d:36:04:27:04:b4:29:6c:57:b3:7a:81: 0b:4a:9b:21:e0:e2:b7:a8:c6:c1:3e:db:57:86:f8:18:d5:93: 45:e7:73:eb:72:d8:e1:a3:d5:f4:b1:08:fa:e5:9e:9e:ac:5c: b4:02:cc:e4:da:c5:1a:eb:15:e2:42:7e:51:28:0e:8a:85:c4: 20:ea:6b:39:b0:74:a7:b8:2d:42:15:49:00:b5:50:2f:e8:38: 14:66:4a:b6:ce:8e:db:de:51:08:e5:a6:0e:a0:30:65:ff:16: f3:28:fb:1c:81:cd:2d:04:dd:17:ef:dc:99:1d:8f:23:90:9e: f9:a1:0b:30:4d:7b:f1:43:b4:ab:42:2d:0b:fd:27:c8:47:dc: 52:b9:0c:df:3d:15:45:ac:3b:53:ad:27:95:e0:f0:3d:f7:b6: a9:74:7e:23:0d:cc:e5:7c:71:96:f4:ee:f0:f4:40:2c:f9:68: f7:d4:df:77:29:6d:25:a5:36:c2:36:ae:4a:a2:aa:be:73:a4: b8:d0:e7:9f -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NUYz NUE4MkEyMzZCQ0VEODE5MDg4RDREOTA4ODdFMEI5NjVDN0NGMB4XDTI2MDMzMTA4 MzkyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEMyOEQzRkExODMxNzJD REIxRTdFREJBREFGNzJCNUZFMEE5MkQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpHtFxV+vr/FaxGTpCENgfBy3uUPZngOwnwQb8i5zwFXrHg7Hrd Efk7h4Dm7f1x9AVU1pO8kI/ylPJ1WzEWwbRm36BH4W7PrxQxCLKvu7CZsbKjWWkZ bAEAJOQKTwe1k2Lz9/kpOgzNYNyePnVG8/wboHL7/8QI+dyhweawB9MMYv4GTtuf wPWraqfwxbV4p7QTrDQgQbp994gDgfkMMtvREXDSaxfytR6vtddzI4EGMncDz/sb Y42h+kKellcfmyJ88MLasAS+zjjMuiySTztn1EfoGimse6koQpPbmckiQOtpfNh/ yIJenIDpJgsJZhwKUGaPFQ2tgrRSE61SMx8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQMKNP6GDFyzbHn7bra9ytf4KktFDAfBgNVHSMEGDAWgBRV81qCoja87YGQiNTZ CIfguWXHzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQ4L1ZmTmFncUkydk8yQmtJalUyUWlINExsbHg4OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZmTmFncUkydk8yQmtJalUyUWlINExs bHg4OC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NDgvRENqVC1oZ3hjczJ4NS0yNjJ2Y3JYLUNwTFJRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArTrjDANBgkqhkiG9w0BAQsFAAOCAQEA Lg4AU2hMz8rKIXHPn76NbkxpdwGGJL2hL6BykjGRQE032dCWuEE1Do2OuJ1oOLNE lEpTLetrp97Os8+gfTYEJwS0KWxXs3qBC0qbIeDit6jGwT7bV4b4GNWTRedz63LY 4aPV9LEI+uWenqxctALM5NrFGusV4kJ+USgOioXEIOprObB0p7gtQhVJALVQL+g4 FGZKts6O295RCOWmDqAwZf8W8yj7HIHNLQTdF+/cmR2PI5Ce+aELME178UO0q0It C/0nyEfcUrkM3z0VRaw7U60nleDwPfe2qXR+Iw3M5XxxlvTu8PRALPlo99Tfdylt JaU2wjauSqKqvnOkuNDnnw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:43 2026 by rpki-client