$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/TVrjNpMOIA1hCRFVAav-04cVVrY.roa File: TVrjNpMOIA1hCRFVAav-04cVVrY.roa (raw, json) Hash identifier: Hsdxvjtgec1aaf5x994lqVWR6QxnyjnZofovcgHA0gs= Subject key identifier: 4D:5A:E3:36:93:0E:20:0D:61:09:11:55:01:AB:FE:D3:87:15:56:B6 Certificate issuer: /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Certificate serial: 3A Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/TVrjNpMOIA1hCRFVAav-04cVVrY.roa Signing time: Tue 31 Mar 2026 08:34:26 +0000 ROA not before: Tue 31 Mar 2026 08:34:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23784 IP address blocks: 124.150.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Validity Not Before: Mar 31 08:34:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4D5AE336930E200D6109115501ABFED3871556B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:9a:ba:54:81:8e:3d:95:39:8c:b4:c8:f6: b8:74:1f:c3:8d:e1:49:4b:56:c0:82:cf:2c:24:62: 7d:37:c7:6a:fb:9c:a3:ed:64:18:3b:e8:a2:9c:53: 72:a5:cb:aa:6e:5c:b4:9e:75:1d:84:67:54:f4:73: f6:a5:d4:5f:e3:4c:d9:d1:e8:d7:e9:54:b8:f6:bc: 91:40:0e:e2:ab:7f:db:9d:1b:5e:dc:29:85:08:b0: 8c:34:d0:29:71:63:d7:1f:67:11:e8:22:28:24:fc: 43:43:91:52:ab:dd:3a:4d:e2:fc:3c:60:51:34:fb: 10:a2:e2:6d:1f:8e:41:0e:8c:e1:a0:1b:98:b9:11: 5e:be:ce:fa:98:3e:e0:b0:7a:a7:0f:14:0d:a4:ce: 05:15:cb:0b:08:23:99:ce:19:45:26:b0:9f:9e:1c: 21:a0:8c:8c:11:8b:b1:f8:e3:13:2d:3a:51:c0:0f: 62:0d:f2:29:ef:77:ee:92:7d:c2:1b:3e:cc:79:90: 6c:88:b2:f0:a2:5e:94:9d:53:fa:3d:77:e3:b9:4f: 82:ca:0a:2f:d3:92:15:30:df:f5:11:0d:61:c6:1b: ee:d6:be:ec:43:8b:90:55:51:ec:d5:61:8e:4c:4a: 40:49:bb:cc:ca:f0:17:f4:6d:bd:e9:f6:a3:0d:01: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:E3:36:93:0E:20:0D:61:09:11:55:01:AB:FE:D3:87:15:56:B6 X509v3 Authority Key Identifier: keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/TVrjNpMOIA1hCRFVAav-04cVVrY.roa sbgp-ipAddrBlock: critical IPv4: 124.150.152.0/21 Signature Algorithm: sha256WithRSAEncryption 38:7a:bf:43:ec:29:43:87:81:3c:e3:77:54:70:5b:67:ea:02: 2b:d7:f9:a8:e2:00:45:6a:7d:b1:4c:66:17:93:be:30:9a:7d: 56:8c:76:20:7b:8c:91:00:44:ff:e1:dc:07:07:51:93:43:eb: 54:e2:14:6c:03:4c:7d:5d:e0:30:f3:0e:6f:8f:85:ad:4b:c8: d7:2b:3f:b3:85:18:59:ca:17:4e:63:50:d6:20:45:20:5d:54: b8:c1:a2:90:51:ef:58:b2:8b:ca:d3:24:ec:72:0b:16:e0:de: 11:d2:4a:00:d8:19:62:1f:a2:11:b8:7a:b2:a9:cc:9c:19:28: 5a:78:98:6f:09:89:e3:4c:8f:59:a9:15:65:89:9f:97:53:61: 39:b5:42:1e:2b:37:23:6d:65:07:2e:81:9e:da:32:a6:63:6c: b2:0a:7e:e6:c2:46:2e:3f:4e:bb:fa:79:79:c5:ae:df:d8:d2: f4:ec:67:b8:12:95:97:9d:07:a1:cb:22:73:df:a0:3b:0a:e5: 8c:c2:f0:60:29:17:a9:e5:30:90:4c:19:8a:fc:d1:ed:e2:d4: fd:55:60:7b:2c:21:4c:ec:6d:84:03:99:b0:18:93:bb:ca:e9: 36:e2:6f:ee:2b:ca:ae:7f:51:73:86:e3:4d:9f:fb:7b:da:fc: c7:97:c7:6f -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5 MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTI2MDMzMTA4 MzQyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEQ1QUUzMzY5MzBFMjAw RDYxMDkxMTU1MDFBQkZFRDM4NzE1NTZCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMEhmrpUgY49lTmMtMj2uHQfw43hSUtWwILPLCRifTfHavuco+1k GDvoopxTcqXLqm5ctJ51HYRnVPRz9qXUX+NM2dHo1+lUuPa8kUAO4qt/250bXtwp hQiwjDTQKXFj1x9nEegiKCT8Q0ORUqvdOk3i/DxgUTT7EKLibR+OQQ6M4aAbmLkR Xr7O+pg+4LB6pw8UDaTOBRXLCwgjmc4ZRSawn54cIaCMjBGLsfjjEy06UcAPYg3y Ke937pJ9whs+zHmQbIiy8KJelJ1T+j1347lPgsoKL9OSFTDf9RENYcYb7ta+7EOL kFVR7NVhjkxKQEm7zMrwF/Rtven2ow0BUUsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRNWuM2kw4gDWEJEVUBq/7ThxVWtjAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6 5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NzcvVFZyak5wTU9JQTFoQ1JGVkFhdi0wNGNWVnJZLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yWmDANBgkqhkiG9w0BAQsFAAOCAQEA OHq/Q+wpQ4eBPON3VHBbZ+oCK9f5qOIARWp9sUxmF5O+MJp9Vox2IHuMkQBE/+Hc BwdRk0PrVOIUbANMfV3gMPMOb4+FrUvI1ys/s4UYWcoXTmNQ1iBFIF1UuMGikFHv WLKLytMk7HILFuDeEdJKANgZYh+iEbh6sqnMnBkoWniYbwmJ40yPWakVZYmfl1Nh ObVCHis3I21lBy6BntoypmNssgp+5sJGLj9Ou/p5ecWu39jS9OxnuBKVl50Hocsi c9+gOwrljMLwYCkXqeUwkEwZivzR7eLU/VVgeywhTOxthAOZsBiTu8rpNuJv7ivK rn9Rc4bjTZ/7e9r8x5fHbw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:35:35 2026 by rpki-client