$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/NtPUy9E9ESQdoTgoun7jTnrp9e0.roa File: NtPUy9E9ESQdoTgoun7jTnrp9e0.roa (raw, json) Hash identifier: rOhn/Xa2FnTGgBKyUyc7sfDTsub4/uoxjb1Xn/afJno= Subject key identifier: 36:D3:D4:CB:D1:3D:11:24:1D:A1:38:28:BA:7E:E3:4E:7A:E9:F5:ED Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Certificate serial: 21 Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/NtPUy9E9ESQdoTgoun7jTnrp9e0.roa Signing time: Tue 31 Mar 2026 08:44:54 +0000 ROA not before: Tue 31 Mar 2026 08:44:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24253 IP address blocks: 103.157.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Validity Not Before: Mar 31 08:44:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=36D3D4CBD13D11241DA13828BA7EE34E7AE9F5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:2e:9b:5b:41:21:43:9b:38:93:a6:7d:3d: 53:0d:df:db:5f:4b:6e:05:47:97:a2:05:d4:e5:89: 34:02:4f:37:b2:b2:6d:0c:2c:f7:14:ab:cf:3a:46: e6:57:81:c0:56:fc:6e:76:c1:ba:13:84:2e:ff:89: ca:87:08:7d:75:a2:7f:cb:72:b6:9b:4b:bf:82:5b: 4e:69:06:1c:50:07:6e:05:b1:f7:09:34:00:78:88: 20:2c:3c:1a:32:84:07:c5:de:29:86:50:95:f6:19: 8b:a9:20:8f:30:95:e0:86:fd:80:b4:42:79:cc:4d: 4c:25:b2:1b:57:bc:e0:02:cb:71:c6:3f:1f:0a:f9: 88:ae:73:a9:64:00:2a:7c:e0:02:d7:f1:66:9a:34: 39:30:39:0b:42:2e:2b:75:33:de:8e:01:b9:2b:8a: ab:01:db:e0:f7:eb:b5:3c:a3:00:8b:2e:0a:6c:eb: bd:34:39:1b:70:0a:e5:a9:e6:36:62:98:3a:f0:a3: 04:5b:b4:bc:df:82:4d:eb:cf:87:f7:a6:c9:6a:88: 94:bf:8c:62:72:6e:7d:c2:49:4c:f3:df:2f:2f:45: d8:45:f4:c9:93:04:4a:fa:f2:c0:b2:2c:00:e3:2e: 34:aa:a1:60:ca:6c:20:05:f9:c8:ef:2f:8c:1c:f5: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:D4:CB:D1:3D:11:24:1D:A1:38:28:BA:7E:E3:4E:7A:E9:F5:ED X509v3 Authority Key Identifier: keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/NtPUy9E9ESQdoTgoun7jTnrp9e0.roa sbgp-ipAddrBlock: critical IPv4: 103.157.156.0/24 Signature Algorithm: sha256WithRSAEncryption 66:07:43:08:af:49:73:1b:c3:10:1e:22:85:25:72:86:81:f3: ff:4b:c5:ad:40:b8:f4:94:10:f4:2c:db:ab:8f:7b:0e:9b:39: 1a:b0:40:de:e4:f7:f0:d0:07:a8:a6:39:1b:55:75:ff:cc:97: 76:84:6b:f0:20:ce:4c:e8:80:09:f6:19:f4:94:68:1c:81:f8: 74:0d:c1:9e:75:5c:12:91:4a:de:fc:5e:18:1a:9f:37:35:0c: 0a:87:5b:60:a7:e3:53:6f:2a:9b:7a:93:43:bc:62:69:d0:63: 03:60:eb:ad:67:1d:a5:db:4e:f0:88:9d:ea:f2:cb:a4:62:af: 6e:dc:c4:5e:6f:cd:b0:c0:1e:1a:8b:90:b9:26:0a:3b:4d:20: 0b:ff:4e:e7:33:8e:8a:27:eb:ba:99:e3:f5:54:5f:00:60:7d: 17:1f:81:36:a2:f7:7f:f6:93:57:f0:db:a4:6d:de:03:cd:3e: 4e:3a:9c:91:97:f7:d7:8b:f7:4a:8a:86:b6:f9:5e:0e:b1:97: a7:77:3f:80:58:b0:20:e9:af:a3:80:ee:98:f0:68:f8:22:0b: 66:78:c1:a3:31:d8:21:39:d8:72:f4:6a:62:33:2e:41:e7:f6: f2:04:71:f9:d9:80:97:fd:33:68:04:13:61:8e:8e:69:df:26: 4e:56:58:16 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEMy RjBCRTE4MDA4OUE3NTkzRDlFRDM3RDA0RTg1MkVENUEyNTlBMB4XDTI2MDMzMTA4 NDQ1NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzZEM0Q0Q0JEMTNEMTEy NDFEQTEzODI4QkE3RUUzNEU3QUU5RjVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0FLptbQSFDmziTpn09Uw3f219LbgVHl6IF1OWJNAJPN7KybQws 9xSrzzpG5leBwFb8bnbBuhOELv+JyocIfXWif8tytptLv4JbTmkGHFAHbgWx9wk0 AHiIICw8GjKEB8XeKYZQlfYZi6kgjzCV4Ib9gLRCecxNTCWyG1e84ALLccY/Hwr5 iK5zqWQAKnzgAtfxZpo0OTA5C0IuK3Uz3o4BuSuKqwHb4PfrtTyjAIsuCmzrvTQ5 G3AK5anmNmKYOvCjBFu0vN+CTevPh/emyWqIlL+MYnJufcJJTPPfLy9F2EX0yZME SvrywLIsAOMuNKqhYMpsIAX5yO8vjBz1Os8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQ209TL0T0RJB2hOCi6fuNOeun17TAfBgNVHSMEGDAWgBSUwvC+GACJp1k9ntN9 BOhS7VolmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTAzL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUxYUpaby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUx YUpaby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDMvTnRQVXk5RTlFU1Fkb1Rnb3VuN2pUbnJwOWUwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGednDANBgkqhkiG9w0BAQsFAAOCAQEA ZgdDCK9JcxvDEB4ihSVyhoHz/0vFrUC49JQQ9Czbq497Dps5GrBA3uT38NAHqKY5 G1V1/8yXdoRr8CDOTOiACfYZ9JRoHIH4dA3BnnVcEpFK3vxeGBqfNzUMCodbYKfj U28qm3qTQ7xiadBjA2DrrWcdpdtO8Iid6vLLpGKvbtzEXm/NsMAeGouQuSYKO00g C/9O5zOOiifrupnj9VRfAGB9Fx+BNqL3f/aTV/DbpG3eA80+TjqckZf314v3SoqG tvleDrGXp3c/gFiwIOmvo4DumPBo+CILZnjBozHYITnYcvRqYjMuQef28gRx+dmA l/0zaAQTYY6Oad8mTlZYFg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:09 2026 by rpki-client