$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/CDkflWETMSjzYXo8JVpgKx4hJoc.roa File: CDkflWETMSjzYXo8JVpgKx4hJoc.roa (raw, json) Hash identifier: WvmO4c57dEqVn0sehcvXfPk4Vo2eB8UcpvrFS9KOTDk= Subject key identifier: 08:39:1F:95:61:13:31:28:F3:61:7A:3C:25:5A:60:2B:1E:21:26:87 Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 58 Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/CDkflWETMSjzYXo8JVpgKx4hJoc.roa Signing time: Tue 31 Mar 2026 08:24:07 +0000 ROA not before: Tue 31 Mar 2026 08:24:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 38628 IP address blocks: 116.193.96.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Mar 31 08:24:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=08391F9561133128F3617A3C255A602B1E212687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:6e:a8:ce:70:10:c8:8e:01:d2:a5:94:b2: f9:16:62:25:96:1b:dc:c5:7d:07:e6:ad:4a:d5:50: 37:d8:ad:f5:a7:ee:bf:61:ed:5e:ce:3f:8e:26:91: 89:d9:af:46:c8:c6:2f:c3:2b:96:40:57:a5:64:3b: d6:aa:4e:07:f8:d1:6e:f3:af:8e:9f:b0:9e:16:e9: 9c:42:64:79:af:38:b5:2d:1e:79:0a:74:3f:63:64: 94:6c:ff:95:6a:3b:ae:c5:84:72:c6:5c:4c:fb:b2: b9:d5:39:bd:84:c9:21:9f:91:27:9c:39:e9:0a:21: ac:eb:0a:24:76:5e:6d:c5:ca:62:62:8b:96:63:e6: ef:49:f1:51:92:5c:81:b1:fe:16:d7:a7:c4:89:74: 25:1c:fc:84:0e:20:c6:1b:37:29:f5:99:24:44:61: 65:a8:cd:b1:1d:e1:60:36:10:43:e8:0c:74:b2:29: 6c:31:60:75:88:43:cc:ee:25:23:ef:6a:d0:41:4f: de:6d:c6:5b:69:80:02:18:73:c4:29:f2:56:6b:e5: 3e:25:30:ad:d2:88:1f:7d:06:b3:54:2a:28:aa:0e: bc:af:6d:a7:50:c4:3b:ed:d0:af:48:cf:08:1d:00: 5f:df:37:1d:a0:66:8b:83:46:84:1d:4e:0c:12:f2: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:1F:95:61:13:31:28:F3:61:7A:3C:25:5A:60:2B:1E:21:26:87 X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/CDkflWETMSjzYXo8JVpgKx4hJoc.roa sbgp-ipAddrBlock: critical IPv4: 116.193.96.0/19 Signature Algorithm: sha256WithRSAEncryption 18:7b:e5:ac:bd:e0:0a:6a:aa:24:4e:f9:5e:c0:dd:fc:e7:20: e6:d8:29:3d:92:9b:69:3b:1e:72:73:8f:54:dc:e4:4c:9b:9f: ce:03:82:60:85:2c:e3:ef:75:e6:cb:70:86:ab:c4:19:b6:9b: 7c:44:18:b8:c8:b2:04:87:2b:b2:c3:3a:f4:9e:c7:98:78:22: 6f:da:da:40:a1:3a:56:9f:b6:c5:a3:df:24:2d:37:76:68:a8: 81:c5:db:7e:a0:5e:59:92:16:b4:2f:57:6d:d9:23:a8:9d:1b: 95:b8:0c:5e:f6:83:62:d0:e4:71:59:5a:94:85:1a:50:7c:3f: 5e:ef:a1:da:06:d0:2e:83:81:f8:d1:0e:fc:31:03:6b:ca:ae: cc:23:6f:9b:39:48:0c:45:c3:68:0d:26:da:87:ec:a9:8e:74: f0:00:c5:e7:63:cc:b3:18:af:82:a2:4a:8f:f7:45:70:ba:42: a9:07:cc:cb:ca:62:0e:d4:c1:5e:bb:da:33:5d:8c:db:8a:db: c1:c8:38:ac:8c:9c:63:5c:78:49:88:56:51:a4:4d:0b:d1:61: c8:5e:aa:4f:f5:99:e1:23:fa:30:6f:3a:fe:d4:d9:1c:35:6b: a6:35:16:fb:a4:ba:49:dd:56:56:dc:df:31:6f:18:ad:0f:2a: 91:bd:63:d1 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI2MDMzMTA4 MjQwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDgzOTFGOTU2MTEzMzEy OEYzNjE3QTNDMjU1QTYwMkIxRTIxMjY4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALVfbqjOcBDIjgHSpZSy+RZiJZYb3MV9B+atStVQN9it9afuv2Ht Xs4/jiaRidmvRsjGL8MrlkBXpWQ71qpOB/jRbvOvjp+wnhbpnEJkea84tS0eeQp0 P2NklGz/lWo7rsWEcsZcTPuyudU5vYTJIZ+RJ5w56QohrOsKJHZebcXKYmKLlmPm 70nxUZJcgbH+FtenxIl0JRz8hA4gxhs3KfWZJERhZajNsR3hYDYQQ+gMdLIpbDFg dYhDzO4lI+9q0EFP3m3GW2mAAhhzxCnyVmvlPiUwrdKIH30Gs1QqKKoOvK9tp1DE O+3Qr0jPCB0AX983HaBmi4NGhB1ODBLyfb0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQIOR+VYRMxKPNhejwlWmArHiEmhzAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDgvQ0RrZmxXRVRNU2p6WVhvOEpWcGdLeDRoSm9jLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXTBYDANBgkqhkiG9w0BAQsFAAOCAQEA GHvlrL3gCmqqJE75XsDd/Ocg5tgpPZKbaTsecnOPVNzkTJufzgOCYIUs4+915stw hqvEGbabfEQYuMiyBIcrssM69J7HmHgib9raQKE6Vp+2xaPfJC03dmiogcXbfqBe WZIWtC9XbdkjqJ0blbgMXvaDYtDkcVlalIUaUHw/Xu+h2gbQLoOB+NEO/DEDa8qu zCNvmzlIDEXDaA0m2ofsqY508ADF52PMsxivgqJKj/dFcLpCqQfMy8piDtTBXrva M12M24rbwcg4rIycY1x4SYhWUaRNC9FhyF6qT/WZ4SP6MG86/tTZHDVrpjUW+6S6 Sd1WVtzfMW8YrQ8qkb1j0Q== -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:01 2026 by rpki-client