$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/wxgCGickS9eZo_6O3UkbRLjrig4.roa File: wxgCGickS9eZo_6O3UkbRLjrig4.roa (raw, json) Hash identifier: cuQt5XYaW+ZLRI89NDpXM8aMaymH4hQBOFMLhR3SfI8= Subject key identifier: C3:18:02:1A:27:24:4B:D7:99:A3:FE:8E:DD:49:1B:44:B8:EB:8A:0E Certificate issuer: /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Certificate serial: 55 Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/wxgCGickS9eZo_6O3UkbRLjrig4.roa Signing time: Tue 31 Mar 2026 07:49:54 +0000 ROA not before: Tue 31 Mar 2026 07:49:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23780 IP address blocks: 49.128.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Validity Not Before: Mar 31 07:49:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C318021A27244BD799A3FE8EDD491B44B8EB8A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:d0:be:02:24:cd:ea:79:78:cc:f7:cf:8c: c3:9a:13:e0:ee:c2:f8:80:99:1d:2f:18:36:a6:7c: 48:93:61:57:67:11:d6:c3:43:44:ea:b7:f4:db:ae: 2e:5c:5d:17:64:1c:6d:df:25:2c:38:5e:1a:7c:a1: 3d:b4:61:13:14:ee:20:94:e4:68:0b:72:08:ca:17: ed:1b:76:24:2b:4d:45:fc:ee:55:ee:eb:5f:2f:03: c5:54:e7:18:01:9c:2e:dc:e1:e1:35:92:5e:e5:70: da:b6:dd:65:97:6b:c3:a2:f7:f1:af:7c:b9:4d:95: 92:c9:dc:b4:d2:32:90:66:ee:47:17:1b:16:0d:cc: 8e:ad:7e:e7:d6:d3:30:81:4c:82:24:4e:3e:e9:d9: 9a:3e:5f:49:b8:e7:6c:eb:f4:ef:07:31:b5:e2:da: e0:0f:fb:24:3c:85:41:c9:57:7f:fb:31:e6:6a:29: 0e:6a:e2:16:db:9a:6d:51:4c:da:8d:41:8e:6d:f3: f9:d3:5b:7a:af:c8:b9:8a:68:3b:50:73:fc:06:c1: 21:a8:82:09:d0:12:e6:c0:63:99:0b:ed:69:ea:61: 4f:ab:e5:96:d1:e8:9b:c9:ea:b5:52:ba:1f:0a:b7: d7:97:b1:1d:99:b7:18:91:41:1f:0b:0b:34:73:b4: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:02:1A:27:24:4B:D7:99:A3:FE:8E:DD:49:1B:44:B8:EB:8A:0E X509v3 Authority Key Identifier: keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/wxgCGickS9eZo_6O3UkbRLjrig4.roa sbgp-ipAddrBlock: critical IPv4: 49.128.96.0/22 Signature Algorithm: sha256WithRSAEncryption c5:a0:57:e0:45:92:51:41:5c:5b:58:58:d4:d5:7d:0c:d2:34: 5f:ef:f5:da:c9:40:1d:ef:4b:28:f8:d3:59:09:83:10:77:80: 04:be:20:2f:a3:9e:ce:d1:5d:66:1d:ef:70:c5:8b:74:37:41: 3f:46:2e:51:94:49:0f:a1:81:ab:d0:4c:ee:62:96:65:8f:45: 5d:32:50:f7:f7:45:a1:4a:10:bd:c1:5e:3f:29:d3:46:48:bf: a2:88:fb:40:fc:3a:7b:e8:a0:26:38:ee:9e:3a:38:a5:9e:b9: b7:45:a6:c7:9a:ea:6a:34:5e:a0:04:0e:7d:c4:37:cf:08:6c: 9a:3a:a8:cc:b7:5f:85:56:9d:8f:4d:f4:14:47:1a:34:81:13: 59:7f:13:07:b4:83:79:a9:5d:30:8e:a3:5d:4f:d9:3c:f4:ce: 02:26:32:0c:83:97:52:e0:39:4e:5e:0c:41:1d:51:0f:03:92: 88:7f:b8:ae:90:16:3c:35:c3:7a:b7:38:9a:b8:95:99:d4:93: be:b6:89:a8:24:40:c7:b6:92:74:7d:b1:e6:87:18:d0:5b:cc: 03:67:d3:d5:b0:8c:f7:8c:f3:33:8f:42:ed:6b:d0:d2:2a:ae: 3d:bb:b8:c4:29:72:ce:68:b5:99:4d:1c:d7:67:da:9f:90:ed: 0c:53:84:ed -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOURF N0MxMzM4MTIzN0M1Qjg5OEQ1QTI0RjJDOUE2Q0IzQzE5NzFCMB4XDTI2MDMzMTA3 NDk1NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzMxODAyMUEyNzI0NEJE Nzk5QTNGRThFREQ0OTFCNDRCOEVCOEEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6s0L4CJM3qeXjM98+Mw5oT4O7C+ICZHS8YNqZ8SJNhV2cR1sND ROq39NuuLlxdF2Qcbd8lLDheGnyhPbRhExTuIJTkaAtyCMoX7Rt2JCtNRfzuVe7r Xy8DxVTnGAGcLtzh4TWSXuVw2rbdZZdrw6L38a98uU2VksnctNIykGbuRxcbFg3M jq1+59bTMIFMgiROPunZmj5fSbjnbOv07wcxteLa4A/7JDyFQclXf/sx5mopDmri FtuabVFM2o1Bjm3z+dNbeq/IuYpoO1Bz/AbBIaiCCdAS5sBjmQvtaephT6vlltHo m8nqtVK6Hwq315exHZm3GJFBHwsLNHO0EiECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTDGAIaJyRL15mj/o7dSRtEuOuKDjAfBgNVHSMEGDAWgBSp3nwTOBI3xbiY1aJP LJpss8GXGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU3L3FkNThFemdTTjhXNG1OV2lUeXlhYkxQQmx4cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FkNThFemdTTjhXNG1OV2lUeXlhYkxQ Qmx4cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTcvd3hnQ0dpY2tTOWVab182TzNVa2JSTGpyaWc0LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjGAYDANBgkqhkiG9w0BAQsFAAOCAQEA xaBX4EWSUUFcW1hY1NV9DNI0X+/12slAHe9LKPjTWQmDEHeABL4gL6OeztFdZh3v cMWLdDdBP0YuUZRJD6GBq9BM7mKWZY9FXTJQ9/dFoUoQvcFePynTRki/ooj7QPw6 e+igJjjunjo4pZ65t0Wmx5rqajReoAQOfcQ3zwhsmjqozLdfhVadj030FEcaNIET WX8TB7SDealdMI6jXU/ZPPTOAiYyDIOXUuA5Tl4MQR1RDwOSiH+4rpAWPDXDerc4 mriVmdSTvraJqCRAx7aSdH2x5ocY0FvMA2fT1bCM94zzM49C7WvQ0iquPbu4xCly zmi1mU0c12fan5DtDFOE7Q== -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:56 2026 by rpki-client