$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/lJzpxzojGBfAnP-rmTyfP4BRA-I.roa File: lJzpxzojGBfAnP-rmTyfP4BRA-I.roa (raw, json) Hash identifier: ZZj7UgYof6pxfMyL1AM13a92E5rqo6+3UAU8ok+kHig= Subject key identifier: 94:9C:E9:C7:3A:23:18:17:C0:9C:FF:AB:99:3C:9F:3F:80:51:03:E2 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 32 Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/lJzpxzojGBfAnP-rmTyfP4BRA-I.roa Signing time: Tue 31 Mar 2026 08:35:28 +0000 ROA not before: Tue 31 Mar 2026 08:35:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 59127 IP address blocks: 122.200.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: Mar 31 08:35:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=949CE9C73A231817C09CFFAB993C9F3F805103E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:a4:04:a3:23:09:90:94:51:91:11:cd:af: 49:7f:43:f8:88:77:bd:ff:c9:b2:d4:9a:ed:95:24: 1b:f5:28:31:68:8d:a4:45:03:ba:4e:bf:5c:65:a5: ae:5d:c4:38:39:5c:9a:66:fa:3d:8a:51:14:b7:15: 16:75:00:d5:84:4a:39:f4:d1:af:c5:e5:ee:57:83: aa:c3:67:55:f0:c0:75:23:28:78:c9:7d:30:da:7b: b7:8a:f1:74:7a:75:15:95:73:aa:b5:bb:03:44:8c: 5e:c5:66:a3:ce:b3:c1:53:23:d7:ae:4b:0a:a8:16: a6:fe:d6:88:3c:64:42:9a:94:c8:23:53:5d:cc:7c: 86:7c:5f:e9:3b:25:74:20:45:7a:5f:ed:6e:03:13: bd:78:df:d6:1f:af:f0:18:2f:c9:cc:79:7b:cc:70: eb:f7:9f:ab:85:b3:bf:26:c9:42:ce:fe:dd:3d:58: 75:9f:95:c1:f8:1c:60:53:10:48:7d:7a:c0:1a:4a: d3:d8:c4:97:1f:9c:ac:ad:da:5c:33:40:97:2b:d4: 47:81:9c:e1:2c:c1:bb:89:82:6c:4c:27:6f:3b:2d: 30:1b:4c:8a:87:ee:af:b5:75:9b:cf:fe:33:6c:78: a4:9d:5d:d8:c5:da:5f:51:ab:0c:65:be:71:a7:15: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9C:E9:C7:3A:23:18:17:C0:9C:FF:AB:99:3C:9F:3F:80:51:03:E2 X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/lJzpxzojGBfAnP-rmTyfP4BRA-I.roa sbgp-ipAddrBlock: critical IPv4: 122.200.136.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:eb:19:26:c2:2c:ff:75:21:be:a0:2e:f2:72:85:aa:b7:68: bd:34:2c:73:1c:64:b1:98:a1:3a:76:28:60:87:6e:cb:7c:67: 70:87:22:02:7c:3d:20:27:f2:fa:88:18:c1:8d:e4:fb:af:d6: 6c:13:b7:c8:25:26:3a:45:20:1c:fa:93:76:df:12:ea:82:06: 02:0d:a9:b6:ca:40:a2:4e:80:92:7b:d1:35:a9:4d:2a:d4:d0: 8c:b9:fd:21:6e:e8:5d:0c:bd:70:b9:d8:b3:5b:9f:0e:24:cb: bd:79:18:8c:69:78:41:b2:2b:10:8b:31:59:6e:fe:ea:07:94: d7:f6:0c:9f:79:b0:3c:3d:bd:fb:19:7f:40:33:d3:af:22:85: 6a:f1:64:e2:13:c9:1d:83:99:04:7b:0f:f6:ce:bd:11:90:d1: ac:30:8b:f2:de:03:03:b4:02:f2:92:10:e9:b7:07:36:47:70: c3:63:8f:16:7c:71:b9:02:aa:1b:b0:b1:cb:dc:65:32:50:d1: 7d:7c:eb:04:0f:6c:24:50:7d:af:08:d8:c2:76:a0:e7:ab:53: 6e:b0:9a:7f:12:fd:0a:5e:e5:3c:c4:5a:af:d6:92:ea:a8:67: 82:f1:bd:d6:67:25:73:aa:c5:ba:8f:9c:a7:d3:3a:71:42:cf: c6:88:29:1e -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI2MDMzMTA4 MzUyOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTQ5Q0U5QzczQTIzMTgx N0MwOUNGRkFCOTkzQzlGM0Y4MDUxMDNFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+ApASjIwmQlFGREc2vSX9D+Ih3vf/JstSa7ZUkG/UoMWiNpEUD uk6/XGWlrl3EODlcmmb6PYpRFLcVFnUA1YRKOfTRr8Xl7leDqsNnVfDAdSMoeMl9 MNp7t4rxdHp1FZVzqrW7A0SMXsVmo86zwVMj165LCqgWpv7WiDxkQpqUyCNTXcx8 hnxf6TsldCBFel/tbgMTvXjf1h+v8Bgvycx5e8xw6/efq4WzvybJQs7+3T1YdZ+V wfgcYFMQSH16wBpK09jElx+crK3aXDNAlyvUR4Gc4SzBu4mCbEwnbzstMBtMiofu r7V1m8/+M2x4pJ1d2MXaX1GrDGW+cacVyxsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSUnOnHOiMYF8Cc/6uZPJ8/gFED4jAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NjUvbEp6cHh6b2pHQmZBblAtcm1UeWZQNEJSQS1JLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3rIiDANBgkqhkiG9w0BAQsFAAOCAQEA XesZJsIs/3UhvqAu8nKFqrdovTQscxxksZihOnYoYIduy3xncIciAnw9ICfy+ogY wY3k+6/WbBO3yCUmOkUgHPqTdt8S6oIGAg2ptspAok6AknvRNalNKtTQjLn9IW7o XQy9cLnYs1ufDiTLvXkYjGl4QbIrEIsxWW7+6geU1/YMn3mwPD29+xl/QDPTryKF avFk4hPJHYOZBHsP9s69EZDRrDCL8t4DA7QC8pIQ6bcHNkdww2OPFnxxuQKqG7Cx y9xlMlDRfXzrBA9sJFB9rwjYwnag56tTbrCafxL9Cl7lPMRar9aS6qhngvG91mcl c6rFuo+cp9M6cULPxogpHg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:53 2026 by rpki-client