$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/4cMVGji_CSDiEOzTcLmS_JCE_gk.roa File: 4cMVGji_CSDiEOzTcLmS_JCE_gk.roa (raw, json) Hash identifier: 9izGyHYj87UaEt95xXEoxpz7ULHLu3vBEEUsDKyw/aA= Subject key identifier: E1:C3:15:1A:38:BF:09:20:E2:10:EC:D3:70:B9:92:FC:90:84:FE:09 Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Certificate serial: 5B Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/4cMVGji_CSDiEOzTcLmS_JCE_gk.roa Signing time: Tue 31 Mar 2026 08:16:10 +0000 ROA not before: Tue 31 Mar 2026 08:16:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37908 IP address blocks: 202.254.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Validity Not Before: Mar 31 08:16:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E1C3151A38BF0920E210ECD370B992FC9084FE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:47:2a:33:d6:d4:53:d1:8a:91:22:fd:0e: 41:19:c6:36:ff:21:e7:92:b5:bb:89:36:3c:84:4d: 82:fb:4c:d4:dd:7c:6d:57:e5:30:29:97:c0:54:bc: 76:26:bf:bb:aa:6c:bb:51:9a:a7:30:b9:b1:99:cd: 0e:86:93:ea:7f:3e:ef:71:57:bb:04:d7:1d:b9:47: e7:e3:d4:9e:ea:a5:ea:94:64:5e:5e:75:84:52:c9: 12:c4:67:00:72:99:1e:33:3e:19:35:8e:f5:2b:7c: c3:ce:a0:e1:bf:3b:65:bb:4b:0b:ad:cb:5a:61:17: e0:ec:87:52:9e:1b:d9:bd:f2:98:ea:63:e3:70:8c: ff:9d:66:ad:db:88:6e:93:b1:5a:78:34:94:a6:25: e0:12:38:f0:93:a9:6b:5f:c7:ce:90:2f:d1:ed:88: ff:59:d2:94:c4:b0:ac:8a:6b:e7:f0:ce:5f:04:c4: 40:78:4d:73:ef:7f:14:1d:bc:7e:57:d4:71:cf:28: 3d:b2:14:fc:19:c3:9d:ed:ca:4d:e9:bd:7a:66:1f: d7:f7:3a:4e:d0:e5:41:f9:09:63:0f:f3:56:b3:54: 6e:39:9c:7b:b6:dc:84:62:e8:88:f8:48:2e:e5:47: 6f:79:f7:84:6c:21:68:f5:ed:71:ed:fd:a0:bd:3e: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C3:15:1A:38:BF:09:20:E2:10:EC:D3:70:B9:92:FC:90:84:FE:09 X509v3 Authority Key Identifier: keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/4cMVGji_CSDiEOzTcLmS_JCE_gk.roa sbgp-ipAddrBlock: critical IPv4: 202.254.111.0/24 Signature Algorithm: sha256WithRSAEncryption 82:74:fc:07:58:c5:bd:02:28:52:85:57:49:14:e0:56:d9:df: 80:b9:56:94:b1:7b:11:9c:78:27:fd:00:7b:8a:66:16:82:13: 63:97:f7:1c:ed:27:7f:ac:30:c6:0a:7c:07:c2:45:cc:4b:5e: de:5c:3c:c0:3f:e9:5d:d6:9c:48:f0:30:7f:00:24:76:fb:9d: d1:40:a6:97:a6:60:28:1b:77:c2:35:59:15:d0:9c:e0:db:97: 23:86:fa:cd:b2:2c:1e:ae:c1:82:bb:64:75:24:96:a7:41:1c: 05:89:9e:15:a8:d8:db:74:b8:ba:84:5e:fe:3d:d5:05:56:63: c2:02:01:c6:6c:da:33:76:91:ca:a3:d5:ad:33:02:d6:ed:d3: 39:87:b6:67:69:5c:7e:63:fe:97:b7:b3:47:b4:1a:f6:f6:ac: 33:45:d8:16:7a:17:32:82:a6:b8:b9:1b:5d:a7:08:59:75:99: 7f:c3:3a:8e:20:61:75:21:69:cb:d4:3e:60:4e:85:a9:02:83: 25:2e:f7:f1:05:54:a1:29:bd:3d:0b:c8:05:a9:b4:4c:d2:f6: cf:d9:2f:4c:17:39:2d:27:5b:79:ff:e1:fb:1e:32:9d:07:cb: 1b:ac:52:5f:1c:61:ab:61:c6:95:a0:91:c4:59:4a:0c:6c:18: 4a:a0:a9:6b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDMzMTA4 MTYxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTFDMzE1MUEzOEJGMDky MEUyMTBFQ0QzNzBCOTkyRkM5MDg0RkUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDQRyoz1tRT0YqRIv0OQRnGNv8h55K1u4k2PIRNgvtM1N18bVfl MCmXwFS8dia/u6psu1GapzC5sZnNDoaT6n8+73FXuwTXHblH5+PUnuql6pRkXl51 hFLJEsRnAHKZHjM+GTWO9St8w86g4b87ZbtLC63LWmEX4OyHUp4b2b3ymOpj43CM /51mrduIbpOxWng0lKYl4BI48JOpa1/HzpAv0e2I/1nSlMSwrIpr5/DOXwTEQHhN c+9/FB28flfUcc8oPbIU/BnDne3KTem9emYf1/c6TtDlQfkJYw/zVrNUbjmce7bc hGLoiPhILuVHb3n3hGwhaPXtce39oL0+tfUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBThwxUaOL8JIOIQ7NNwuZL8kIT+CTAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDIvNGNNVkdqaV9DU0RpRU96VGNMbVNfSkNFX2drLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMr+bzANBgkqhkiG9w0BAQsFAAOCAQEA gnT8B1jFvQIoUoVXSRTgVtnfgLlWlLF7EZx4J/0Ae4pmFoITY5f3HO0nf6wwxgp8 B8JFzEte3lw8wD/pXdacSPAwfwAkdvud0UCml6ZgKBt3wjVZFdCc4NuXI4b6zbIs Hq7BgrtkdSSWp0EcBYmeFajY23S4uoRe/j3VBVZjwgIBxmzaM3aRyqPVrTMC1u3T OYe2Z2lcfmP+l7ezR7Qa9vasM0XYFnoXMoKmuLkbXacIWXWZf8M6jiBhdSFpy9Q+ YE6FqQKDJS738QVUoSm9PQvIBam0TNL2z9kvTBc5LSdbef/h+x4ynQfLG6xSXxxh q2HGlaCRxFlKDGwYSqCpaw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:18 2026 by rpki-client