$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/TEwvIcPECPVUNSZOYciPcr5_hXk.roa File: TEwvIcPECPVUNSZOYciPcr5_hXk.roa (raw, json) Hash identifier: BWKr+kDXODk6tk+2nrHsqvpNEhPALRhCUcbGVvIq6N0= Subject key identifier: 4C:4C:2F:21:C3:C4:08:F5:54:35:26:4E:61:C8:8F:72:BE:7F:85:79 Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Certificate serial: 5E Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/TEwvIcPECPVUNSZOYciPcr5_hXk.roa Signing time: Tue 31 Mar 2026 08:16:11 +0000 ROA not before: Tue 31 Mar 2026 08:16:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37908 IP address blocks: 118.103.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Validity Not Before: Mar 31 08:16:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4C4C2F21C3C408F55435264E61C88F72BE7F8579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:11:a8:f1:d5:8d:43:14:c9:4f:a6:fd:8b: 79:d8:5a:92:9d:8e:f8:ea:c7:fe:98:96:34:24:02: 7b:8a:3e:4b:35:05:c3:82:fe:67:c3:f3:b9:1a:61: c2:06:9e:9d:62:0d:28:37:19:3c:5f:66:f7:56:42: f9:3d:96:ad:01:37:1d:10:02:ce:0d:ca:cb:e4:a5: 79:82:7f:2d:13:3b:1d:56:4b:1a:8b:a5:a0:03:b7: c5:7b:ce:e0:8b:95:24:f0:30:97:be:9f:d9:5f:69: 12:7e:71:1d:8d:c3:54:32:4b:bb:13:45:ac:78:f4: 68:d0:a1:ef:5f:ad:ea:14:42:6c:fb:5a:10:a9:7e: 20:3e:be:eb:1b:8d:9a:27:eb:5e:3e:8a:58:26:55: e6:3f:78:66:9f:22:45:3d:93:10:6e:f6:bf:b3:d2: 8f:d1:76:1e:2d:40:b9:da:5e:3e:15:39:d0:fe:bd: 35:16:b1:b0:47:18:19:bb:b3:a2:8d:a7:fe:99:b0: 5f:0b:ea:51:a0:61:d2:0f:81:a8:bb:0d:9c:70:4e: 5a:27:ca:3c:35:ee:da:e5:22:c9:10:a7:0c:3a:5c: bc:ed:45:f5:e9:01:90:7e:ed:75:84:1e:88:bf:48: 53:aa:4b:06:ff:11:26:06:a2:b0:71:21:45:d2:53: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:2F:21:C3:C4:08:F5:54:35:26:4E:61:C8:8F:72:BE:7F:85:79 X509v3 Authority Key Identifier: keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/TEwvIcPECPVUNSZOYciPcr5_hXk.roa sbgp-ipAddrBlock: critical IPv4: 118.103.128.0/21 Signature Algorithm: sha256WithRSAEncryption c9:26:f2:36:d0:43:18:9e:ec:8e:2e:3f:35:06:a1:d5:1c:a1: a6:83:41:cb:fb:e8:28:82:0c:6a:1e:aa:57:19:d4:1f:25:a8: 76:3a:cd:d5:f6:58:ac:75:8e:bf:d1:68:be:15:32:b1:f9:36: f7:3d:17:8a:95:1e:da:4a:a4:82:43:d3:ed:c0:12:42:2a:86: df:86:1b:13:16:1b:12:5a:6d:6b:44:99:73:22:a9:01:f5:2d: 1c:77:b4:bc:d6:ef:20:c2:bb:69:27:3e:08:a1:4d:e2:7a:d8: 6c:f1:18:b1:8a:b7:33:cb:23:e4:48:25:57:fa:ad:c3:27:31: 62:58:9f:c0:53:c5:fa:7e:bd:d1:2b:c8:c9:2c:ae:50:14:18: 9f:68:31:df:14:99:e1:2b:69:77:18:bc:ee:18:61:51:20:ae: 7b:1d:53:18:42:87:0b:b7:9e:b1:59:9b:c5:17:aa:cf:30:59: 25:b0:e1:65:ba:89:f8:db:26:ea:10:dd:c2:90:14:1a:c5:96: 90:c2:2f:34:b5:eb:56:97:2e:b8:a0:ea:a0:e3:38:d6:5b:6e: cf:08:94:81:11:6f:11:d1:90:95:1d:5d:80:73:37:d3:c3:0a: 44:c8:0d:cf:fe:da:22:1b:4f:f5:20:b2:da:bb:fc:56:21:a4: 73:3a:4d:25 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI2MDMzMTA4 MTYxMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEM0QzJGMjFDM0M0MDhG NTU0MzUyNjRFNjFDODhGNzJCRTdGODU3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL1aEajx1Y1DFMlPpv2Ledhakp2O+OrH/piWNCQCe4o+SzUFw4L+ Z8PzuRphwgaenWINKDcZPF9m91ZC+T2WrQE3HRACzg3Ky+SleYJ/LRM7HVZLGoul oAO3xXvO4IuVJPAwl76f2V9pEn5xHY3DVDJLuxNFrHj0aNCh71+t6hRCbPtaEKl+ ID6+6xuNmifrXj6KWCZV5j94Zp8iRT2TEG72v7PSj9F2Hi1AudpePhU50P69NRax sEcYGbuzoo2n/pmwXwvqUaBh0g+BqLsNnHBOWifKPDXu2uUiyRCnDDpcvO1F9ekB kH7tdYQeiL9IU6pLBv8RJgaisHEhRdJTLycCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRMTC8hw8QI9VQ1Jk5hyI9yvn+FeTAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDIvVEV3dkljUEVDUFZVTlNaT1ljaVBjcjVfaFhrLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3ZngDANBgkqhkiG9w0BAQsFAAOCAQEA ySbyNtBDGJ7sji4/NQah1RyhpoNBy/voKIIMah6qVxnUHyWodjrN1fZYrHWOv9Fo vhUysfk29z0XipUe2kqkgkPT7cASQiqG34YbExYbElpta0SZcyKpAfUtHHe0vNbv IMK7aSc+CKFN4nrYbPEYsYq3M8sj5EglV/qtwycxYlifwFPF+n690SvIySyuUBQY n2gx3xSZ4Stpdxi87hhhUSCuex1TGEKHC7eesVmbxReqzzBZJbDhZbqJ+Nsm6hDd wpAUGsWWkMIvNLXrVpcuuKDqoOM41ltuzwiUgRFvEdGQlR1dgHM308MKRMgNz/7a IhtP9SCy2rv8ViGkczpNJQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:24 2026 by rpki-client