$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/C4Ts52uuoMIxpL-9zy0dsVcpGaU.roa File: C4Ts52uuoMIxpL-9zy0dsVcpGaU.roa (raw, json) Hash identifier: iRRRVebnNNbYP2+v71PiSFSDHBD7ji6HtHzVyD3Z76Y= Subject key identifier: 0B:84:EC:E7:6B:AE:A0:C2:31:A4:BF:BD:CF:2D:1D:B1:57:29:19:A5 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: AF Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/C4Ts52uuoMIxpL-9zy0dsVcpGaU.roa Signing time: Tue 31 Mar 2026 07:52:36 +0000 ROA not before: Tue 31 Mar 2026 07:52:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 15830 IP address blocks: 202.53.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 22:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Mar 31 07:52:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0B84ECE76BAEA0C231A4BFBDCF2D1DB1572919A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f2:25:83:ed:0d:62:c5:99:00:60:48:a4:84: da:3e:d6:4e:16:88:31:c6:b3:f4:36:fc:0f:93:c0: f6:8e:51:e2:40:c7:99:90:d3:22:6a:58:ad:e2:f3: b3:14:72:38:96:a7:63:e3:5d:f5:36:c8:0a:c5:fa: 4e:c4:1d:fb:3d:08:fe:7d:39:73:d7:b2:31:38:38: c3:df:ac:f1:54:0f:74:16:bd:06:58:3c:0c:be:fe: 17:39:ee:66:a7:09:7f:48:c5:67:55:82:18:bb:f3: 16:df:82:3a:04:eb:1f:db:ff:5f:5f:cd:40:17:ad: e2:91:77:c3:2e:b8:7e:22:c9:d2:b4:a2:66:2d:d9: 92:a9:51:37:55:be:c1:ce:4b:c1:9e:e0:e7:f4:d0: 34:b9:10:bd:ff:09:35:8e:81:8c:db:58:ac:65:26: a3:fd:47:fb:0b:b2:ec:27:36:1f:61:56:c9:23:ca: 4f:97:04:d1:91:63:52:89:24:14:c1:8f:fd:ea:24: 32:e7:49:19:17:78:1e:f0:1b:69:e9:09:1a:c8:cf: 13:e9:ed:c2:fa:26:59:f8:3b:01:fc:60:1a:ca:25: 09:4c:ec:61:ca:e4:1b:bd:76:f6:1b:36:ca:3f:67: 98:3d:8f:92:84:de:89:c5:c5:a1:e6:d7:dc:91:1a: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:EC:E7:6B:AE:A0:C2:31:A4:BF:BD:CF:2D:1D:B1:57:29:19:A5 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/C4Ts52uuoMIxpL-9zy0dsVcpGaU.roa sbgp-ipAddrBlock: critical IPv4: 202.53.16.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:12:82:9f:c9:61:4e:94:67:7d:46:df:97:f3:d6:2d:d6:6c: 5e:4f:19:93:81:45:70:f1:12:22:0c:df:18:fc:4c:30:c1:a8: 4d:d7:f7:6b:db:c3:97:5b:d8:b1:64:d1:4a:1e:7b:93:17:7c: 98:07:fe:9d:7a:66:18:43:2a:6c:a1:92:d2:3f:c6:4f:77:c8: 93:df:ea:40:65:cd:a0:b5:5a:58:9e:9b:ac:33:3c:d6:77:1f: a3:1d:74:7f:85:a5:bd:21:05:28:f8:96:09:36:71:a6:70:2a: a8:e1:22:8a:79:81:f4:34:88:6a:c0:f1:d0:e3:6b:2b:9c:ab: c0:66:fd:3a:b1:c8:12:01:55:15:b1:8c:9e:11:46:0a:58:78: 6e:de:0a:9b:da:60:76:c3:38:b6:4b:30:b2:b5:77:67:43:f1: 28:21:20:12:67:ff:d3:0e:a5:ab:0e:77:7d:90:c3:f6:31:8c: 8c:93:8e:52:c7:94:13:07:f4:1e:b3:30:5f:5a:68:fb:f0:00: 1e:a8:41:11:18:58:ad:e3:e0:81:22:bb:ec:43:1d:62:27:30: f0:ec:cd:dc:cb:98:ac:68:00:c9:a5:3e:d0:ba:c4:75:08:89: 6a:d5:7a:05:87:cd:05:3b:3e:5b:29:a7:c6:1b:00:f4:2d:7f: 25:1c:7e:e6 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNjAzMzEw NzUyMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCODRFQ0U3NkJBRUEw QzIzMUE0QkZCRENGMkQxREIxNTcyOTE5QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl8iWD7Q1ixZkAYEikhNo+1k4WiDHGs/Q2/A+TwPaOUeJAx5mQ 0yJqWK3i87MUcjiWp2PjXfU2yArF+k7EHfs9CP59OXPXsjE4OMPfrPFUD3QWvQZY PAy+/hc57manCX9IxWdVghi78xbfgjoE6x/b/19fzUAXreKRd8MuuH4iydK0omYt 2ZKpUTdVvsHOS8Ge4Of00DS5EL3/CTWOgYzbWKxlJqP9R/sLsuwnNh9hVskjyk+X BNGRY1KJJBTBj/3qJDLnSRkXeB7wG2npCRrIzxPp7cL6Jln4OwH8YBrKJQlM7GHK 5Bu9dvYbNso/Z5g9j5KE3onFxaHm19yRGo5TAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUC4Ts52uuoMIxpL+9zy0dsVcpGaUwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA0Mi9DNFRzNTJ1dW9NSXhwTC05enkwZHNWY3BHYVUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyjUQMA0GCSqGSIb3DQEBCwUA A4IBAQBMEoKfyWFOlGd9Rt+X89Yt1mxeTxmTgUVw8RIiDN8Y/EwwwahN1/dr28OX W9ixZNFKHnuTF3yYB/6demYYQypsoZLSP8ZPd8iT3+pAZc2gtVpYnpusMzzWdx+j HXR/haW9IQUo+JYJNnGmcCqo4SKKeYH0NIhqwPHQ42srnKvAZv06scgSAVUVsYye EUYKWHhu3gqb2mB2wzi2SzCytXdnQ/EoISASZ//TDqWrDnd9kMP2MYyMk45Sx5QT B/QeszBfWmj78AAeqEERGFit4+CBIrvsQx1iJzDw7M3cy5isaADJpT7QusR1CIlq 1XoFh80FOz5bKafGGwD0LX8lHH7m -----END CERTIFICATE-----Generated at Sat Apr 18 00:57:18 2026 by rpki-client