$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa File: PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa (raw, json) Hash identifier: 5AbtuT315gTMW3qyuDWwe4kJmoqdq1tQXn1/W8xqzKA= Subject key identifier: 3D:12:8E:2C:14:BA:7E:17:9E:AD:DD:41:9F:C6:70:F9:7E:5F:17:24 Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 90 Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa Signing time: Tue 31 Mar 2026 07:31:49 +0000 ROA not before: Tue 31 Mar 2026 07:31:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 45680 IP address blocks: 101.78.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Mar 31 07:31:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3D128E2C14BA7E179EADDD419FC670F97E5F1724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:e3:09:6d:db:5a:6b:3c:20:96:9f:8c:fc: a6:9c:7a:5d:df:a2:f9:b9:ee:84:8c:49:84:03:c0: ed:2d:07:a9:98:33:9d:65:ab:1f:d1:8b:8f:b3:c0: cb:13:f6:b1:11:38:72:f6:8d:35:b8:a6:aa:2e:7d: 6f:2d:5d:2b:a8:32:0b:94:28:fe:0d:67:de:73:64: 07:ff:ff:88:02:f3:99:41:d1:e2:43:e5:d2:13:4f: 19:e7:43:f6:9c:ef:71:24:a4:18:f6:c8:30:61:5d: a4:0f:c7:ad:11:28:d8:eb:82:2d:a5:71:0d:3d:63: 80:d6:48:44:d0:ba:ee:e1:02:76:a3:9e:3f:80:e4: a0:7d:8a:2b:6d:fb:31:e0:a6:d5:24:56:f2:34:90: 57:0c:8c:3b:42:60:65:7e:b4:27:09:70:c7:ac:a1: 74:50:fd:26:11:19:a1:40:67:4c:40:d7:27:bd:53: 5b:63:76:ad:1f:63:99:1b:68:1c:17:87:9c:c0:64: 60:27:de:f2:ca:4a:cf:0c:ac:60:d9:a5:20:8d:41: 3f:b2:88:ee:0d:33:11:22:b4:b5:71:06:e3:9d:db: 90:b1:11:0e:c0:83:a1:22:a6:cc:8e:b3:6d:3d:8e: e4:9e:2b:d6:86:e5:a1:f3:ce:2e:6f:43:90:15:b0: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:12:8E:2C:14:BA:7E:17:9E:AD:DD:41:9F:C6:70:F9:7E:5F:17:24 X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PRKOLBS6fheerd1Bn8Zw-X5fFyQ.roa sbgp-ipAddrBlock: critical IPv4: 101.78.6.0/24 Signature Algorithm: sha256WithRSAEncryption a7:45:23:b7:6d:aa:69:80:df:3c:9d:27:ca:95:df:77:ae:3e: 60:38:c1:56:cd:47:eb:66:9b:f1:7f:5b:c8:f8:40:96:07:a5: 98:15:1b:98:66:05:5a:93:8e:ef:2d:2f:b4:f9:4c:50:1e:b4: e6:3b:03:0b:62:ce:5a:28:b1:a4:ff:8b:ca:56:35:60:1a:e1: fe:45:4d:1d:72:92:6b:9a:6f:d5:0e:6d:bc:63:9e:c5:70:5e: 64:c6:ec:c7:5b:6e:e2:30:1f:d6:ed:2e:08:2c:76:e5:be:47: 80:7f:cd:68:db:bf:c3:37:06:70:9d:66:52:ec:3d:18:a1:66: ff:0f:0f:f7:4d:95:4c:5f:84:07:f0:78:9b:77:07:70:17:05: 6f:ef:ff:30:b8:36:21:d0:30:70:85:fd:63:8e:cd:db:53:09: 2a:07:61:39:13:21:b4:48:7e:96:dd:0d:8c:74:30:d4:23:ca: 12:4b:e9:50:5e:04:41:84:22:23:6f:03:f5:67:51:96:bd:db: c3:fd:e7:f9:ca:7e:96:2c:8c:18:e4:b9:ae:d5:61:61:bf:a7: b9:61:0b:09:d6:f6:2b:c2:35:e4:67:df:9a:f7:1d:4b:00:a1: c6:33:2d:ef:83:36:29:84:3b:1f:10:e1:87:5f:64:af:34:47: 81:65:c9:1b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy NkUwRDE3RTMwRDhCRjU3MTRGNEJBOTJFRUVCMEQyMkREREIxRDAeFw0yNjAzMzEw NzMxNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNEMTI4RTJDMTRCQTdF MTc5RUFEREQ0MTlGQzY3MEY5N0U1RjE3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoveMJbdtaazwglp+M/Kacel3fovm57oSMSYQDwO0tB6mYM51l qx/Ri4+zwMsT9rEROHL2jTW4pqoufW8tXSuoMguUKP4NZ95zZAf//4gC85lB0eJD 5dITTxnnQ/ac73EkpBj2yDBhXaQPx60RKNjrgi2lcQ09Y4DWSETQuu7hAnajnj+A 5KB9iitt+zHgptUkVvI0kFcMjDtCYGV+tCcJcMesoXRQ/SYRGaFAZ0xA1ye9U1tj dq0fY5kbaBwXh5zAZGAn3vLKSs8MrGDZpSCNQT+yiO4NMxEitLVxBuOd25CxEQ7A g6EipsyOs209juSeK9aG5aHzzi5vQ5AVsNFbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUPRKOLBS6fheerd1Bn8Zw+X5fFyQwHwYDVR0jBBgwFoAUjSbg0X4w2L9XFPS6 ku7rDSLd2x0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk4OS9qU2JnMFg0dzJMOVhGUFM2a3U3ckRTTGQyeDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qU2JnMFg0dzJMOVhGUFM2a3U3ckRT TGQyeDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOTg5L1BSS09MQlM2ZmhlZXJkMUJuOFp3LVg1ZkZ5US5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABlTgYwDQYJKoZIhvcNAQELBQADggEB AKdFI7dtqmmA3zydJ8qV33euPmA4wVbNR+tmm/F/W8j4QJYHpZgVG5hmBVqTju8t L7T5TFAetOY7AwtizloosaT/i8pWNWAa4f5FTR1ykmuab9UObbxjnsVwXmTG7Mdb buIwH9btLggsduW+R4B/zWjbv8M3BnCdZlLsPRihZv8PD/dNlUxfhAfweJt3B3AX BW/v/zC4NiHQMHCF/WOOzdtTCSoHYTkTIbRIfpbdDYx0MNQjyhJL6VBeBEGEIiNv A/VnUZa928P95/nKfpYsjBjkua7VYWG/p7lhCwnW9ivCNeRn35r3HUsAocYzLe+D NimEOx8Q4YdfZK80R4FlyRs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:18 2026 by rpki-client