$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/krMlvIT_c-86fJPI4l3TNzx_x3E.roa File: krMlvIT_c-86fJPI4l3TNzx_x3E.roa (raw, json) Hash identifier: jjx/XOQRNKrw6mKBUCz02Br6WtoXdkghW/nWxirORfA= Subject key identifier: 92:B3:25:BC:84:FF:73:EF:3A:7C:93:C8:E2:5D:D3:37:3C:7F:C7:71 Certificate issuer: /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Certificate serial: 5B Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/krMlvIT_c-86fJPI4l3TNzx_x3E.roa Signing time: Tue 31 Mar 2026 08:14:57 +0000 ROA not before: Tue 31 Mar 2026 08:14:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24271 IP address blocks: 218.231.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46 Validity Not Before: Mar 31 08:14:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=92B325BC84FF73EF3A7C93C8E25DD3373C7FC771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:cc:af:64:b5:91:e3:91:db:0d:10:8b:08: 21:d2:8d:4c:25:57:39:85:ff:e8:8e:88:be:5c:71: 84:27:9b:4c:89:62:de:f4:1b:6d:da:6b:3c:b2:70: 60:3a:27:5c:19:22:4b:d7:71:75:55:62:b5:dd:fc: e3:90:3a:31:f4:07:b1:bf:81:c2:61:7b:52:3e:78: 60:6d:59:e3:5c:82:a5:03:4d:42:f5:ef:a7:ef:31: dd:33:c5:5a:64:e6:7c:ca:6d:58:18:6a:9c:7b:da: 1b:00:31:1a:14:0d:78:fd:30:8e:a5:0f:14:29:96: b2:83:ac:26:86:d4:3e:a7:9e:fa:ae:9e:d7:d9:1b: 18:10:8d:dc:3b:91:15:a1:5b:b4:b5:5f:c4:52:db: c4:a9:f7:d9:e4:9d:a6:89:47:e8:20:4d:92:fc:2e: 5c:e2:63:9d:27:6c:ea:ef:59:de:91:46:fe:7e:3b: 10:e7:b5:37:d7:39:e2:0d:f2:23:23:17:19:ee:f5: 98:1d:38:28:a7:03:f3:d2:a9:20:9e:fb:79:16:7f: 5e:76:99:ab:68:57:f4:30:ac:a5:2e:27:74:67:93: fd:c3:b3:1b:21:a4:c8:13:33:26:3b:6b:ec:b9:5c: 86:ab:b9:12:05:c1:8d:c8:70:5e:a1:c5:19:49:49: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B3:25:BC:84:FF:73:EF:3A:7C:93:C8:E2:5D:D3:37:3C:7F:C7:71 X509v3 Authority Key Identifier: keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/krMlvIT_c-86fJPI4l3TNzx_x3E.roa sbgp-ipAddrBlock: critical IPv4: 218.231.216.0/21 Signature Algorithm: sha256WithRSAEncryption b3:59:36:9a:1a:6d:bf:c3:1a:f5:75:55:f3:49:16:41:8e:6d: 84:b4:0c:29:f2:d0:9d:e3:f8:aa:41:ab:f5:e8:08:ee:57:c9: 2e:17:30:28:c4:ff:97:39:c2:7b:bd:19:0c:9f:37:ff:5c:0d: a6:a2:09:88:5d:ac:de:92:96:e6:40:dc:6c:ed:a1:8b:d6:e5: 88:5f:55:50:5c:61:f5:cf:87:c4:c4:63:0a:66:fc:36:c9:58: d2:c9:47:20:a2:a4:d0:c9:5c:40:de:e9:e4:04:d8:c1:f2:e4: 30:fd:c6:a8:4f:62:fc:cb:4c:8a:1b:81:da:66:61:4f:98:83: 74:38:a7:72:74:d5:d8:db:98:54:a9:44:e4:9d:9b:61:45:d2: 35:6f:35:4e:47:c8:64:bc:b2:b5:ee:cf:be:0c:2f:01:b9:27: 70:67:bf:ea:35:c3:fe:d1:67:dd:31:2d:0c:e9:4b:74:d9:c4: c2:7f:34:59:c1:00:59:15:a2:ed:a4:66:db:b1:49:a8:21:48: 89:33:e0:6c:f9:cb:44:38:90:5a:e8:e5:4f:8e:98:22:90:71: 29:b6:4d:3e:22:78:57:5a:22:c4:90:7f:4e:a2:43:98:f5:27: a7:e8:83:b8:58:af:a9:c5:be:16:89:fd:9b:6c:d1:7c:59:71: 45:32:a0:7d -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5 NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI2MDMzMTA4 MTQ1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTJCMzI1QkM4NEZGNzNF RjNBN0M5M0M4RTI1REQzMzczQzdGQzc3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANrazK9ktZHjkdsNEIsIIdKNTCVXOYX/6I6IvlxxhCebTIli3vQb bdprPLJwYDonXBkiS9dxdVVitd3845A6MfQHsb+BwmF7Uj54YG1Z41yCpQNNQvXv p+8x3TPFWmTmfMptWBhqnHvaGwAxGhQNeP0wjqUPFCmWsoOsJobUPqee+q6e19kb GBCN3DuRFaFbtLVfxFLbxKn32eSdpolH6CBNkvwuXOJjnSds6u9Z3pFG/n47EOe1 N9c54g3yIyMXGe71mB04KKcD89KpIJ77eRZ/XnaZq2hX9DCspS4ndGeT/cOzGyGk yBMzJjtr7Llchqu5EgXBjchwXqHFGUlJeu0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSSsyW8hP9z7zp8k8jiXdM3PH/HcTAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0 RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84Njgva3JNbHZJVF9jLTg2ZkpQSTRsM1ROenhfeDNFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9rn2DANBgkqhkiG9w0BAQsFAAOCAQEA s1k2mhptv8Ma9XVV80kWQY5thLQMKfLQneP4qkGr9egI7lfJLhcwKMT/lznCe70Z DJ83/1wNpqIJiF2s3pKW5kDcbO2hi9bliF9VUFxh9c+HxMRjCmb8NslY0slHIKKk 0MlcQN7p5ATYwfLkMP3GqE9i/MtMihuB2mZhT5iDdDincnTV2NuYVKlE5J2bYUXS NW81TkfIZLyyte7PvgwvAbkncGe/6jXD/tFn3TEtDOlLdNnEwn80WcEAWRWi7aRm 27FJqCFIiTPgbPnLRDiQWujlT46YIpBxKbZNPiJ4V1oixJB/TqJDmPUnp+iDuFiv qcW+Fon9m2zRfFlxRTKgfQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:04 2026 by rpki-client