$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/He85qg10oEz3mLu6LDxupGxn0rI.roa File: He85qg10oEz3mLu6LDxupGxn0rI.roa (raw, json) Hash identifier: NV4SyEnsbb+xvuyDp9/CnPRBDofbyD8hXBzm5SJTvFA= Subject key identifier: 1D:EF:39:AA:0D:74:A0:4C:F7:98:BB:BA:2C:3C:6E:A4:6C:67:D2:B2 Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 5D Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/He85qg10oEz3mLu6LDxupGxn0rI.roa Signing time: Tue 31 Mar 2026 08:24:10 +0000 ROA not before: Tue 31 Mar 2026 08:24:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 38628 IP address blocks: 61.245.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 14:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Mar 31 08:24:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1DEF39AA0D74A04CF798BBBA2C3C6EA46C67D2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:4d:be:12:0e:21:b3:8a:b6:bd:9e:6b:60: 83:2a:26:e9:fe:b7:14:cb:da:6d:84:4a:2c:46:f0: 15:f1:38:64:a6:60:6c:98:64:1f:de:76:14:53:49: 70:96:00:c9:bd:0b:f7:f7:39:d0:1c:ce:24:94:a1: 70:03:8a:ee:ed:53:63:cb:bc:38:8c:24:bf:7f:96: 7c:72:d3:0a:f3:9e:ae:2b:ee:2e:83:f4:a8:d4:c2: 0c:bf:5b:1f:cd:78:20:46:c6:93:28:6b:ab:7e:5b: 66:eb:b4:64:06:f7:00:37:6f:5d:ce:6a:2a:b6:39: 91:87:75:42:0d:cc:e7:2b:a8:8c:30:53:86:5f:ce: 3b:f9:5c:20:71:bd:62:01:7a:58:60:0a:12:93:4e: 27:1f:68:82:42:e0:61:09:58:13:b7:f2:73:f3:49: a9:9e:af:5f:0d:97:71:f0:b9:db:28:3f:03:89:57: 2e:09:4d:1b:91:41:31:ff:ec:c0:cd:b4:ac:e6:9f: 26:c5:7c:44:02:a6:94:4f:b3:78:b4:f5:6b:93:44: d3:16:ee:f8:01:7b:d7:4c:2a:a6:81:1f:e0:5b:b4: 62:3e:f8:f1:3b:c6:a1:c0:65:62:1d:c0:95:fa:ec: 85:31:21:53:99:70:09:58:30:2e:9f:16:e1:e8:b6: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:39:AA:0D:74:A0:4C:F7:98:BB:BA:2C:3C:6E:A4:6C:67:D2:B2 X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/He85qg10oEz3mLu6LDxupGxn0rI.roa sbgp-ipAddrBlock: critical IPv4: 61.245.32.0/19 Signature Algorithm: sha256WithRSAEncryption a6:ce:87:26:f5:20:be:6a:c7:1c:76:e5:ea:8d:57:cb:a8:2d: 88:79:e5:b9:69:2e:4e:e6:3b:3c:81:9d:e6:35:1f:30:95:b6: f8:96:dd:24:2e:f0:94:80:83:a9:cf:11:3f:5b:e8:a9:cc:4a: 01:40:d0:52:9c:8a:7c:e7:5b:34:86:4a:8e:cc:cd:54:4a:59: 4c:32:1f:76:69:94:36:e2:b0:ea:43:d6:09:d5:d3:0b:13:b3: c2:d4:fa:66:3e:b9:9d:d7:a9:f9:c3:97:d2:05:ad:51:f8:4f: d6:02:2c:96:b3:15:03:80:b7:51:16:a5:05:e6:4d:2a:bd:62: dc:2d:77:1c:46:99:9b:15:4f:83:e3:81:2b:93:0e:1e:9c:2e: 10:c0:1f:8b:c8:a0:2d:90:76:12:28:b0:86:54:f6:67:47:8e: 19:df:74:b6:9c:a7:85:33:e0:51:82:cf:db:d4:43:0b:fc:54: 4d:0b:0a:ad:a4:16:af:98:94:dd:b4:1d:14:e3:1d:40:91:77: 4f:75:6d:85:8e:6f:fa:5d:e7:f1:41:51:0e:74:3e:4c:96:5d: a8:08:43:8d:3f:45:8e:fe:3d:8f:53:93:b5:2a:61:22:71:69: f6:bc:41:44:0a:07:82:50:f3:f4:2e:a3:02:ff:04:6d:ff:35: b7:6f:2a:c9 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI2MDMzMTA4 MjQxMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMURFRjM5QUEwRDc0QTA0 Q0Y3OThCQkJBMkMzQzZFQTQ2QzY3RDJCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMeTb4SDiGzira9nmtggyom6f63FMvabYRKLEbwFfE4ZKZgbJhk H952FFNJcJYAyb0L9/c50BzOJJShcAOK7u1TY8u8OIwkv3+WfHLTCvOerivuLoP0 qNTCDL9bH814IEbGkyhrq35bZuu0ZAb3ADdvXc5qKrY5kYd1Qg3M5yuojDBThl/O O/lcIHG9YgF6WGAKEpNOJx9ogkLgYQlYE7fyc/NJqZ6vXw2XcfC52yg/A4lXLglN G5FBMf/swM20rOafJsV8RAKmlE+zeLT1a5NE0xbu+AF710wqpoEf4Fu0Yj748TvG ocBlYh3AlfrshTEhU5lwCVgwLp8W4ei2IfMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQd7zmqDXSgTPeYu7osPG6kbGfSsjAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NDgvSGU4NXFnMTBvRXozbUx1NkxEeHVwR3huMHJJLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT31IDANBgkqhkiG9w0BAQsFAAOCAQEA ps6HJvUgvmrHHHbl6o1Xy6gtiHnluWkuTuY7PIGd5jUfMJW2+JbdJC7wlICDqc8R P1voqcxKAUDQUpyKfOdbNIZKjszNVEpZTDIfdmmUNuKw6kPWCdXTCxOzwtT6Zj65 ndep+cOX0gWtUfhP1gIslrMVA4C3URalBeZNKr1i3C13HEaZmxVPg+OBK5MOHpwu EMAfi8igLZB2EiiwhlT2Z0eOGd90tpynhTPgUYLP29RDC/xUTQsKraQWr5iU3bQd FOMdQJF3T3VthY5v+l3n8UFRDnQ+TJZdqAhDjT9Fjv49j1OTtSphInFp9rxBRAoH glDz9C6jAv8Ebf81t28qyQ== -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:50 2026 by rpki-client