$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/CxH5UGaNphEpp9aWAay11964XC8.roa File: CxH5UGaNphEpp9aWAay11964XC8.roa (raw, json) Hash identifier: SnqDRN/croDOXizJEHOBQqKF2FeLqOXWEFkYQOXPZ6c= Subject key identifier: 0B:11:F9:50:66:8D:A6:11:29:A7:D6:96:01:AC:B5:D7:DE:B8:5C:2F Certificate issuer: /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Certificate serial: 58 Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/CxH5UGaNphEpp9aWAay11964XC8.roa Signing time: Tue 31 Mar 2026 08:14:55 +0000 ROA not before: Tue 31 Mar 2026 08:14:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24271 IP address blocks: 202.177.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Validity Not Before: Mar 31 08:14:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0B11F950668DA61129A7D69601ACB5D7DEB85C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:58:11:03:8a:63:b4:75:26:af:40:b1:f6:88: 78:1f:51:63:b7:ac:44:3a:d2:ae:4f:25:16:4a:b5: a5:ce:fc:df:da:14:1e:9b:14:5e:9e:dc:62:d9:95: 65:2e:a3:eb:94:bd:a3:83:f4:49:73:f0:c7:e0:48: a4:bb:40:63:b4:f2:4c:ac:28:cf:de:f9:c8:76:70: 62:ba:cd:c7:3e:69:7b:c3:c1:2d:65:a1:5e:05:09: fd:90:7e:3e:0b:35:6e:95:cd:e1:cf:4f:62:ba:b6: 86:92:c2:2f:d0:2e:80:b3:2c:1e:47:68:b2:88:68: 3a:ef:ba:3b:c7:e5:3d:09:e3:e2:23:33:02:d0:11: 0f:2c:e6:08:d3:63:b6:8d:cd:e3:d7:6d:2a:b3:10: fd:d8:6c:af:5f:72:b1:a5:70:6a:ea:24:aa:88:4f: 3d:20:3b:78:92:20:84:90:f2:d3:24:a2:33:eb:28: 02:cb:45:83:4f:cb:80:99:25:ca:03:30:3b:37:04: d7:f4:13:24:ca:44:a6:16:d6:af:71:38:b0:ce:9f: 38:7d:2b:d6:a1:72:cd:5c:68:06:a0:c6:eb:17:63: d7:3e:5d:a6:31:68:97:0b:77:93:a7:1f:93:59:b6: 86:7a:12:4a:38:94:b8:e6:e5:1f:1d:e9:a4:03:2a: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:11:F9:50:66:8D:A6:11:29:A7:D6:96:01:AC:B5:D7:DE:B8:5C:2F X509v3 Authority Key Identifier: keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/CxH5UGaNphEpp9aWAay11964XC8.roa sbgp-ipAddrBlock: critical IPv4: 202.177.80.0/20 Signature Algorithm: sha256WithRSAEncryption 07:62:12:84:3f:63:08:aa:c1:e1:9e:50:f0:14:a2:9a:27:fc: f9:5b:f6:d0:42:a0:d0:b8:80:9e:85:38:c8:a7:af:e3:48:ac: 72:85:3a:ee:d0:12:50:ce:2c:35:74:31:53:ec:68:86:8f:64: 6d:bb:b8:54:1c:f3:35:66:23:63:8c:5e:eb:f5:6d:73:17:63: 4c:6a:43:b4:b5:cf:e0:24:75:90:d8:02:fd:6e:7c:00:99:5e: c5:bc:ff:0f:d1:9a:75:b1:a0:da:81:d5:fc:35:69:24:e6:73: c2:29:a0:91:75:50:58:47:4b:4a:7f:fd:f3:82:3a:eb:ef:6a: e5:d5:4e:1f:dd:0d:74:86:5f:8b:ab:4a:79:50:db:c5:34:11: bc:1f:f3:af:40:e8:97:11:b8:46:7d:d4:c4:1a:bd:0c:de:74: fa:3c:23:14:9a:c0:df:59:9b:18:7b:1a:ec:eb:7b:fb:e4:fb: 49:5b:66:c2:96:a6:94:ea:de:3e:b2:af:6b:25:fd:4a:c6:81: bc:45:50:f6:e7:78:1f:c0:24:54:da:72:23:3a:0d:f9:00:9c: c6:bc:91:57:20:7d:2c:b5:be:1e:f0:af:92:73:4a:65:9a:c5: aa:f4:42:28:ba:dc:9f:9e:1d:7d:d5:13:55:d5:da:c9:5f:14: 8c:74:f2:72 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5 NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI2MDMzMTA4 MTQ1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEIxMUY5NTA2NjhEQTYx MTI5QTdENjk2MDFBQ0I1RDdERUI4NUMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO1YEQOKY7R1Jq9AsfaIeB9RY7esRDrSrk8lFkq1pc7839oUHpsU Xp7cYtmVZS6j65S9o4P0SXPwx+BIpLtAY7TyTKwoz975yHZwYrrNxz5pe8PBLWWh XgUJ/ZB+Pgs1bpXN4c9PYrq2hpLCL9AugLMsHkdosohoOu+6O8flPQnj4iMzAtAR DyzmCNNjto3N49dtKrMQ/dhsr19ysaVwauokqohPPSA7eJIghJDy0ySiM+soAstF g0/LgJklygMwOzcE1/QTJMpEphbWr3E4sM6fOH0r1qFyzVxoBqDG6xdj1z5dpjFo lwt3k6cfk1m2hnoSSjiUuOblHx3ppAMqhksCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQLEflQZo2mESmn1pYBrLXX3rhcLzAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0 RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NjgvQ3hINVVHYU5waEVwcDlhV0FheTExOTY0WEM4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqxUDANBgkqhkiG9w0BAQsFAAOCAQEA B2IShD9jCKrB4Z5Q8BSimif8+Vv20EKg0LiAnoU4yKev40iscoU67tASUM4sNXQx U+xoho9kbbu4VBzzNWYjY4xe6/VtcxdjTGpDtLXP4CR1kNgC/W58AJlexbz/D9Ga dbGg2oHV/DVpJOZzwimgkXVQWEdLSn/984I66+9q5dVOH90NdIZfi6tKeVDbxTQR vB/zr0DolxG4Rn3UxBq9DN50+jwjFJrA31mbGHsa7Ot7++T7SVtmwpamlOrePrKv ayX9SsaBvEVQ9ud4H8AkVNpyIzoN+QCcxryRVyB9LLW+HvCvknNKZZrFqvRCKLrc n54dfdUTVdXayV8UjHTycg== -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:10 2026 by rpki-client