$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/3cKQiEjgBPEWkoEiKdz8te9BLPc.roa File: 3cKQiEjgBPEWkoEiKdz8te9BLPc.roa (raw, json) Hash identifier: Ian9QgVe8qyhe/MbsC0veyUNXnXGf4mmbswOenR8f28= Subject key identifier: DD:C2:90:88:48:E0:04:F1:16:92:81:22:29:DC:FC:B5:EF:41:2C:F7 Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Certificate serial: 87 Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/3cKQiEjgBPEWkoEiKdz8te9BLPc.roa Signing time: Thu 25 Jun 2026 13:02:44 +0000 ROA not before: Thu 25 Jun 2026 13:02:44 +0000 ROA not after: Tue 15 Jun 2027 01:30:02 +0000 asID: 18071 IP address blocks: 133.183.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D Validity Not Before: Jun 25 13:02:44 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=DDC2908848E004F11692812229DCFCB5EF412CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:52:65:70:a2:9c:f0:09:7a:6b:4f:95:7e: 5d:ba:db:a5:99:59:09:b3:ed:fb:65:61:e6:0d:a4: 1c:c1:d4:c6:a6:65:4d:54:41:c9:d8:41:06:4c:34: 2d:df:6a:ee:c9:00:67:2e:ba:41:18:03:b1:ed:8c: 60:e6:de:b7:aa:c8:2a:e0:e2:4a:08:f1:83:7f:b2: c9:8e:f9:36:cb:f0:06:ab:b7:fc:51:37:c2:b4:08: c8:7b:5c:ed:69:be:70:f8:c4:af:c7:e9:15:b3:e8: a6:b9:26:24:ad:bd:8e:b0:07:dc:2a:64:c3:06:b2: 46:7c:21:ab:fc:41:7b:08:a4:c9:31:3f:6f:ef:73: 20:25:51:e7:f0:f3:af:42:7a:b1:56:a6:d3:94:61: 2c:e9:52:04:24:35:3d:45:fb:16:d9:bf:27:a3:d4: ae:ad:ff:75:6d:90:76:ca:11:a5:61:0c:aa:4f:3d: 7a:92:00:ea:04:b6:8a:85:e5:ef:82:bf:ec:cf:b2: e9:f9:8f:f2:d2:85:04:e6:7c:ea:93:dd:7e:0c:de: 52:4a:3e:f2:4c:da:8b:ed:07:7c:32:d5:3f:9d:8a: d6:a3:1c:24:ea:b2:19:4a:76:b9:f7:e0:f6:e6:d0: 80:c5:7c:b9:2f:52:cb:6e:29:47:36:94:b4:03:7b: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:90:88:48:E0:04:F1:16:92:81:22:29:DC:FC:B5:EF:41:2C:F7 X509v3 Authority Key Identifier: keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/3cKQiEjgBPEWkoEiKdz8te9BLPc.roa sbgp-ipAddrBlock: critical IPv4: 133.183.108.0/22 Signature Algorithm: sha256WithRSAEncryption cf:f2:25:86:1f:41:be:5f:ee:31:22:34:35:ee:f5:90:1a:fa: f8:99:09:f3:1e:25:f3:da:ab:f2:16:75:e9:5c:46:dd:91:fd: f7:8e:29:02:b1:be:7f:aa:89:49:7d:de:d7:a8:78:d5:3f:87: 91:46:da:9b:ae:1c:fb:e0:6f:25:47:01:d3:5e:08:5d:c9:d7: fe:31:80:7d:96:26:98:a2:76:56:5a:c5:ca:cd:67:5b:1b:94: 4d:77:47:81:f8:99:d8:36:25:4a:7c:ed:73:8b:63:e9:2c:71: 9c:54:c9:f1:ce:46:47:f2:b5:a5:de:fc:3f:fa:40:0d:16:83: a7:81:16:65:2a:23:15:04:be:4f:71:ba:14:c2:c4:a5:e5:84: c2:5d:75:8f:e8:f3:95:4c:a8:18:79:ad:37:fb:55:c2:b2:34: 70:ef:ba:ae:34:d6:d7:89:a0:48:da:6f:53:bc:59:5f:04:ff: df:ca:fc:11:01:8c:7f:a2:0c:12:e1:e3:23:d3:7a:6a:0d:f1: a6:6e:30:05:0b:e0:18:94:f1:f5:b4:3f:a6:ab:b0:80:11:86: dc:de:77:ea:bc:11:e0:da:de:ec:67:55:ce:9a:f3:e6:b0:d9: 5b:d3:bd:e3:ce:d5:45:11:5a:b1:91:37:20:12:d9:44:9b:5c: 93:42:1c:89 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzYw MDc2RkMyOEYwNERFQjk4MTdBMzQ4MjIyNjk0MkNCRUYxRjgwRDAeFw0yNjA2MjUx MzAyNDRaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREQzI5MDg4NDhFMDA0 RjExNjkyODEyMjI5RENGQ0I1RUY0MTJDRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOvVJlcKKc8Al6a0+Vfl2626WZWQmz7ftlYeYNpBzB1MamZU1U QcnYQQZMNC3fau7JAGcuukEYA7HtjGDm3reqyCrg4koI8YN/ssmO+TbL8Aart/xR N8K0CMh7XO1pvnD4xK/H6RWz6Ka5JiStvY6wB9wqZMMGskZ8Iav8QXsIpMkxP2/v cyAlUefw869CerFWptOUYSzpUgQkNT1F+xbZvyej1K6t/3VtkHbKEaVhDKpPPXqS AOoEtoqF5e+Cv+zPsun5j/LShQTmfOqT3X4M3lJKPvJM2ovtB3wy1T+ditajHCTq shlKdrn34Pbm0IDFfLkvUstuKUc2lLQDew+5AgMBAAGjggHbMIIB1zAdBgNVHQ4E FgQU3cKQiEjgBPEWkoEiKdz8te9BLPcwHwYDVR0jBBgwFoAUxgB2/CjwTeuYF6NI IiaULL7x+A0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MzcveGdCMl9DandUZXVZRjZOSUlpYVVMTDd4LUEwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGdCMl9DandUZXVZRjZOSUlpYVVM TDd4LUEwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcgYIKwYBBQUHAQsEZjBkMGIGCCsG AQUFBzALhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzE5MzcvM2NLUWlFamdCUEVXa29FaUtkejh0ZTlCTFBjLnJvYTAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoW3bDANBgkqhkiG9w0BAQsFAAOC AQEAz/Ilhh9Bvl/uMSI0Ne71kBr6+JkJ8x4l89qr8hZ16VxG3ZH9944pArG+f6qJ SX3e16h41T+HkUbam64c++BvJUcB014IXcnX/jGAfZYmmKJ2VlrFys1nWxuUTXdH gfiZ2DYlSnztc4tj6SxxnFTJ8c5GR/K1pd78P/pADRaDp4EWZSojFQS+T3G6FMLE peWEwl11j+jzlUyoGHmtN/tVwrI0cO+6rjTW14mgSNpvU7xZXwT/38r8EQGMf6IM EuHjI9N6ag3xpm4wBQvgGJTx9bQ/pquwgBGG3N536rwR4Nre7GdVzprz5rDZW9O9 487VRRFasZE3IBLZRJtck0IciQ== -----END CERTIFICATE-----Generated at Tue Jul 7 13:43:57 2026 by rpki-client