$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/52jYiT46Msq_m5cR8Ve3SehuOTQ.roa File: 52jYiT46Msq_m5cR8Ve3SehuOTQ.roa (raw, json) Hash identifier: MMkNAe7NQK36MTfTk4ETiff+VkRl++ePeNg00PTwgNk= Subject key identifier: E7:68:D8:89:3E:3A:32:CA:BF:9B:97:11:F1:57:B7:49:E8:6E:39:34 Certificate issuer: /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Certificate serial: 09 Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/52jYiT46Msq_m5cR8Ve3SehuOTQ.roa Signing time: Tue 31 Mar 2026 08:48:19 +0000 ROA not before: Tue 31 Mar 2026 08:48:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24278 IP address blocks: 118.238.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2 Validity Not Before: Mar 31 08:48:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E768D8893E3A32CABF9B9711F157B749E86E3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:72:f2:bf:9a:02:50:80:b1:5a:9f:b7:19: 0b:6e:80:72:38:24:29:e0:bd:23:e3:94:b6:eb:b8: 54:d7:39:e8:f1:5e:f2:2c:6f:ac:70:8f:1c:a7:7a: ba:fd:8b:e3:7a:7d:a2:2b:be:fa:2b:32:7b:ba:9a: b9:c6:3c:9a:56:c6:cc:d2:88:63:0b:e7:17:d9:6e: 5b:2a:f0:d8:df:a7:07:fc:77:53:2f:cf:84:26:da: 86:79:b2:08:8d:d7:83:26:51:6f:40:f4:19:bb:93: 27:e6:c0:0d:fc:2c:ed:84:69:b7:eb:13:32:05:36: d8:d9:61:71:6a:2d:d9:15:9e:63:c7:a6:00:c6:0b: 78:bd:38:1c:fd:a6:aa:ab:10:ff:bf:1d:fd:cd:e4: fb:c0:1e:c1:22:be:a3:76:45:24:11:d8:14:bf:8a: 55:c1:f7:13:97:db:df:fd:7d:24:b0:cd:2e:82:6a: 07:33:e0:cf:1b:9c:42:38:f2:fd:99:87:88:10:55: bd:26:d6:20:d1:4d:5e:bf:18:d9:42:00:a9:e4:97: d4:e0:85:18:db:a1:8a:c5:33:9f:21:27:95:1f:55: 14:dc:33:d1:55:53:6d:e4:0c:7a:2b:84:19:b0:2d: 0e:f3:21:c9:e7:4b:98:25:15:39:58:b4:60:bf:f1: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:68:D8:89:3E:3A:32:CA:BF:9B:97:11:F1:57:B7:49:E8:6E:39:34 X509v3 Authority Key Identifier: keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/52jYiT46Msq_m5cR8Ve3SehuOTQ.roa sbgp-ipAddrBlock: critical IPv4: 118.238.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:f5:d2:39:62:c9:1f:33:bd:ac:a7:43:21:43:7d:55:ad:97: d4:55:11:49:7d:f1:e0:cc:f8:5b:e0:f4:1c:33:7a:8e:55:7f: 4e:e7:b6:b9:6b:82:62:20:58:0a:cb:6a:5a:9b:9d:5c:65:31: f1:e3:ed:b1:ca:35:2e:4e:56:76:ec:d3:ec:a8:15:03:50:f3: 44:52:6a:e6:f5:2a:48:ad:d2:c6:1c:50:8c:c3:84:ac:7f:07: 14:a5:c7:3c:a3:e8:b1:aa:78:7f:42:6d:04:42:77:02:37:67: b4:9f:9a:58:1c:71:75:0e:83:0a:f9:3c:a6:bd:06:b6:ef:1c: 19:fb:07:db:2d:5b:3f:bd:8f:48:33:46:c5:ce:b4:37:43:7e: 84:6a:66:22:57:26:99:ff:bd:fc:c2:a2:e0:eb:36:b0:8f:8a: 64:0f:0a:56:54:87:1b:61:cc:d4:9d:0a:64:41:11:fb:d5:d4: 49:ee:3b:2f:1f:54:5c:0b:5e:e5:4b:00:6a:a6:60:66:4c:b0: 3b:d9:8d:3f:45:08:27:2a:6c:7d:57:d5:52:ab:f2:bb:aa:c7: 31:e0:52:e1:17:90:38:cc:4b:99:39:f4:c2:d6:8c:58:46:eb: 3f:89:a7:d3:48:26:a3:ae:42:fd:07:f6:12:01:66:5e:6e:ca: 12:94:85:5b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REJC Qjg4NUMzRDI5MzlEMUQ5N0IyNEVBRDhCRDA2NzE3MUFEMkIyMB4XDTI2MDMzMTA4 NDgxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTc2OEQ4ODkzRTNBMzJD QUJGOUI5NzExRjE1N0I3NDlFODZFMzkzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMl3cvK/mgJQgLFan7cZC26AcjgkKeC9I+OUtuu4VNc56PFe8ixv rHCPHKd6uv2L43p9oiu++isye7qaucY8mlbGzNKIYwvnF9luWyrw2N+nB/x3Uy/P hCbahnmyCI3XgyZRb0D0GbuTJ+bADfws7YRpt+sTMgU22NlhcWot2RWeY8emAMYL eL04HP2mqqsQ/78d/c3k+8AewSK+o3ZFJBHYFL+KVcH3E5fb3/19JLDNLoJqBzPg zxucQjjy/ZmHiBBVvSbWINFNXr8Y2UIAqeSX1OCFGNuhisUznyEnlR9VFNwz0VVT beQMeiuEGbAtDvMhyedLmCUVOVi0YL/xet0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTnaNiJPjoyyr+blxHxV7dJ6G45NDAfBgNVHSMEGDAWgBSdu7iFw9KTnR2Xsk6t i9BnFxrSsjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ2L25idTRoY1BTazUwZGw3Sk9yWXZRWnhjYTBySS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25idTRoY1BTazUwZGw3Sk9yWXZRWnhj YTBySS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDYvNTJqWWlUNDZNc3FfbTVjUjhWZTNTZWh1T1RRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnbugDANBgkqhkiG9w0BAQsFAAOCAQEA nvXSOWLJHzO9rKdDIUN9Va2X1FURSX3x4Mz4W+D0HDN6jlV/Tue2uWuCYiBYCstq WpudXGUx8ePtsco1Lk5WduzT7KgVA1DzRFJq5vUqSK3SxhxQjMOErH8HFKXHPKPo sap4f0JtBEJ3AjdntJ+aWBxxdQ6DCvk8pr0Gtu8cGfsH2y1bP72PSDNGxc60N0N+ hGpmIlcmmf+9/MKi4Os2sI+KZA8KVlSHG2HM1J0KZEER+9XUSe47Lx9UXAte5UsA aqZgZkywO9mNP0UIJypsfVfVUqvyu6rHMeBS4ReQOMxLmTn0wtaMWEbrP4mn00gm o65C/Qf2EgFmXm7KEpSFWw== -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:20 2026 by rpki-client