$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/SEI1vzMZw7KA_m54fnHmQuowqjQ.roa File: SEI1vzMZw7KA_m54fnHmQuowqjQ.roa (raw, json) Hash identifier: Tit545l6LXMYSs12NYVnYDkjKggd2fzUoF+ZQcuTHDE= Subject key identifier: 48:42:35:BF:33:19:C3:B2:80:FE:6E:78:7E:71:E6:42:EA:30:AA:34 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 65 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/SEI1vzMZw7KA_m54fnHmQuowqjQ.roa Signing time: Tue 31 Mar 2026 07:50:35 +0000 ROA not before: Tue 31 Mar 2026 07:50:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23805 IP address blocks: 27.100.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Mar 31 07:50:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=484235BF3319C3B280FE6E787E71E642EA30AA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:c6:85:2b:f9:c8:d7:ff:76:d2:b7:65:cb: 8f:c5:3f:2c:b9:9a:e1:0d:b4:f1:8b:c5:b2:18:a7: e6:98:72:e3:9e:cc:e9:db:23:b2:8d:89:8c:b8:ba: 59:5d:dc:f6:c6:b8:c8:e8:95:19:5a:a7:85:b3:7b: 15:92:c7:a4:a3:05:62:ea:95:55:4b:13:29:c4:1f: 67:8c:2b:87:8b:dd:e0:2f:0e:27:d5:fd:a7:22:14: 63:8f:4b:64:b6:ea:f3:26:ba:93:88:5f:2d:63:dd: 11:a5:fe:f6:be:8a:76:7d:f7:80:36:75:15:d2:0c: fb:df:64:67:58:23:b8:00:9c:cd:09:ba:f8:15:ae: e2:a8:89:34:64:aa:65:2c:03:76:8f:87:2b:e2:83: 58:b7:f7:c5:10:39:44:9e:ff:50:e6:ea:29:43:f0: e1:35:81:68:90:3c:76:25:b9:a2:8d:69:96:39:26: 33:62:db:67:cc:e3:ac:1b:d7:37:44:e4:81:ad:8a: 01:31:f2:a2:25:3e:01:a2:91:1d:3d:33:49:77:50: 66:2f:b7:30:95:a4:ac:37:6d:94:5d:9d:34:47:2f: bb:3a:fd:f2:b2:d2:08:85:e5:f0:7e:1b:c1:2c:9e: ab:09:16:9b:12:cf:e5:f8:a4:e7:52:82:8c:5c:27: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:35:BF:33:19:C3:B2:80:FE:6E:78:7E:71:E6:42:EA:30:AA:34 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/SEI1vzMZw7KA_m54fnHmQuowqjQ.roa sbgp-ipAddrBlock: critical IPv4: 27.100.48.0/20 Signature Algorithm: sha256WithRSAEncryption 58:97:23:3e:53:5c:9e:c1:6c:54:8b:da:51:81:37:9a:01:be: 16:b0:52:fa:37:f7:94:4f:ed:8b:e1:0a:d1:db:85:3b:ba:92: 91:d5:3b:f6:a9:8b:b8:7d:5d:7b:91:11:52:3a:c6:b8:a1:e9: 0f:06:93:b4:68:12:ef:f7:1b:2b:d4:4a:d5:15:f9:69:a4:1f: 32:20:0a:3d:f9:2d:66:27:6c:3b:6c:4a:94:96:c5:b2:aa:d4: 5c:b7:cc:29:ff:9f:10:5f:91:33:97:e7:21:5f:0d:c7:b2:b1: 2a:7a:11:64:d8:d7:39:a8:50:af:9b:b1:21:68:ac:b5:e6:a6: f6:21:8c:59:c9:53:cc:dd:8c:e7:09:66:39:79:cc:aa:d6:99: 4a:d2:0d:2c:08:ae:c9:7b:90:f1:2b:78:8d:7d:c0:2d:16:bf: 87:13:2e:3b:f1:7c:da:d1:8a:00:41:f4:8a:fb:04:a4:bd:a7: 79:f1:49:04:df:d0:b0:59:8d:c9:d9:f1:39:d3:d8:7f:5c:c8: 3b:30:1b:bb:05:e9:36:24:14:e6:b7:49:81:22:f3:f9:a4:b4: 68:99:11:20:ea:9f:70:12:0c:bc:38:d2:75:ef:46:73:48:90: 04:91:f6:c3:1f:68:ca:c5:45:ad:9b:3b:08:08:82:18:94:3d: 1c:f4:6a:b6 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI2MDMzMTA3 NTAzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDg0MjM1QkYzMzE5QzNC MjgwRkU2RTc4N0U3MUU2NDJFQTMwQUEzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL8+xoUr+cjX/3bSt2XLj8U/LLma4Q208YvFshin5phy457M6dsj so2JjLi6WV3c9sa4yOiVGVqnhbN7FZLHpKMFYuqVVUsTKcQfZ4wrh4vd4C8OJ9X9 pyIUY49LZLbq8ya6k4hfLWPdEaX+9r6Kdn33gDZ1FdIM+99kZ1gjuACczQm6+BWu 4qiJNGSqZSwDdo+HK+KDWLf3xRA5RJ7/UObqKUPw4TWBaJA8diW5oo1pljkmM2Lb Z8zjrBvXN0Tkga2KATHyoiU+AaKRHT0zSXdQZi+3MJWkrDdtlF2dNEcvuzr98rLS CIXl8H4bwSyeqwkWmxLP5fik51KCjFwnOGcCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRIQjW/MxnDsoD+bnh+ceZC6jCqNDAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84ODEvU0VJMXZ6TVp3N0tBX201NGZuSG1RdW93cWpRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBtkMDANBgkqhkiG9w0BAQsFAAOCAQEA WJcjPlNcnsFsVIvaUYE3mgG+FrBS+jf3lE/ti+EK0duFO7qSkdU79qmLuH1de5ER UjrGuKHpDwaTtGgS7/cbK9RK1RX5aaQfMiAKPfktZidsO2xKlJbFsqrUXLfMKf+f EF+RM5fnIV8Nx7KxKnoRZNjXOahQr5uxIWisteam9iGMWclTzN2M5wlmOXnMqtaZ StINLAiuyXuQ8St4jX3ALRa/hxMuO/F82tGKAEH0ivsEpL2nefFJBN/QsFmNydnx OdPYf1zIOzAbuwXpNiQU5rdJgSLz+aS0aJkRIOqfcBIMvDjSde9Gc0iQBJH2wx9o ysVFrZs7CAiCGJQ9HPRqtg== -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:39 2026 by rpki-client