$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/CnQ3pBA2YrAstRvEOiJP6Q1dYC4.roa File: CnQ3pBA2YrAstRvEOiJP6Q1dYC4.roa (raw, json) Hash identifier: m7LdBPauU5ExUc/nZ66Ir4Lsls9AWVG6Q3Ca8y3dAEk= Subject key identifier: 0A:74:37:A4:10:36:62:B0:2C:B5:1B:C4:3A:22:4F:E9:0D:5D:60:2E Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: B1 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/CnQ3pBA2YrAstRvEOiJP6Q1dYC4.roa Signing time: Tue 31 Mar 2026 07:52:37 +0000 ROA not before: Tue 31 Mar 2026 07:52:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 15830 IP address blocks: 218.219.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 22:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Mar 31 07:52:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0A7437A4103662B02CB51BC43A224FE90D5D602E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:6f:19:f2:5b:9c:1e:5e:ac:27:b6:10:59: 04:72:12:4c:b6:d4:10:90:68:71:d3:83:58:9e:c8: fe:cc:38:5f:51:b5:d7:1f:77:e2:99:c3:84:0b:a2: d7:18:9d:e8:b6:5d:e3:ae:c8:de:f8:9e:f5:fb:e3: 20:0c:d6:5b:f3:7e:b7:4c:07:a3:bf:a1:80:e6:42: 03:88:59:f6:1b:25:34:26:c9:eb:6d:b7:cb:54:9d: 52:64:db:8f:66:20:ef:b6:ed:31:75:ec:10:1d:3c: 65:91:16:ba:b3:77:69:42:5c:5b:8c:a8:37:08:d7: 1e:a7:d7:13:81:32:9e:82:2c:71:3b:0e:52:59:64: b4:13:3e:62:e0:05:03:26:d6:a0:67:94:cc:c2:2a: 69:11:43:15:83:11:1b:19:b0:cb:45:0a:87:12:61: 44:d4:0e:da:51:c2:5a:2c:d8:cb:54:9e:30:2c:60: 8f:2d:37:06:99:b4:c6:0f:34:4a:03:fd:f5:3f:b9: 2d:a6:73:e1:2c:41:96:1d:a7:9e:56:af:1c:c9:e0: c4:6f:29:ed:a3:8b:1f:09:45:13:b7:fc:43:3f:e0: 7e:16:1f:b5:2b:e9:ab:0a:81:3d:9e:c9:e8:97:6b: ec:62:c6:91:b8:59:25:5a:09:af:7c:f7:10:09:b3: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:74:37:A4:10:36:62:B0:2C:B5:1B:C4:3A:22:4F:E9:0D:5D:60:2E X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/CnQ3pBA2YrAstRvEOiJP6Q1dYC4.roa sbgp-ipAddrBlock: critical IPv4: 218.219.64.0/20 Signature Algorithm: sha256WithRSAEncryption 03:4c:6a:69:1e:e0:81:fc:0f:c4:d6:d0:17:e2:4f:af:62:90: 66:3d:da:ad:c5:ba:c2:2d:a9:83:a2:67:62:70:47:39:1d:ef: 7b:b4:e2:97:95:3a:b6:28:0f:80:79:30:45:55:71:ad:9f:43: ad:45:1a:f1:80:b1:2a:6a:74:8d:ba:f8:08:f2:65:07:5b:21: cf:a6:66:81:27:33:80:90:38:14:ae:af:6c:eb:30:63:69:9f: f5:f5:86:2a:01:03:15:50:37:06:c7:ea:b9:4e:0d:a4:d4:55: 35:f6:7f:a5:c1:b9:cf:cb:7a:6e:cc:a5:ab:d8:ad:11:87:30: 5e:95:c4:0a:06:9b:80:69:28:71:47:ff:b4:17:22:2c:73:ae: 5e:1b:21:ae:17:f8:5c:0a:cb:ab:e8:25:22:fd:bb:6b:85:78: ef:9e:a9:25:55:87:a5:f3:28:f8:03:cc:4d:e7:bc:a8:fe:06: 4c:77:b8:38:39:4e:f0:be:0b:6c:ea:47:a7:c7:c7:bf:02:90: 63:1f:56:39:ea:c1:ac:b4:15:91:e3:3f:ef:96:f6:e1:94:65: 83:2e:8d:1a:25:c0:14:99:fd:70:4e:df:ea:ed:d4:82:24:be: 87:bd:aa:c1:11:25:63:39:3f:de:4f:63:b3:26:14:97:53:cf: e7:a1:56:a9 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNjAzMzEw NzUyMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBNzQzN0E0MTAzNjYy QjAyQ0I1MUJDNDNBMjI0RkU5MEQ1RDYwMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyA28Z8lucHl6sJ7YQWQRyEky21BCQaHHTg1ieyP7MOF9Rtdcf d+KZw4QLotcYnei2XeOuyN74nvX74yAM1lvzfrdMB6O/oYDmQgOIWfYbJTQmyett t8tUnVJk249mIO+27TF17BAdPGWRFrqzd2lCXFuMqDcI1x6n1xOBMp6CLHE7DlJZ ZLQTPmLgBQMm1qBnlMzCKmkRQxWDERsZsMtFCocSYUTUDtpRwlos2MtUnjAsYI8t NwaZtMYPNEoD/fU/uS2mc+EsQZYdp55WrxzJ4MRvKe2jix8JRRO3/EM/4H4WH7Ur 6asKgT2eyeiXa+xixpG4WSVaCa989xAJs0wTAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUCnQ3pBA2YrAstRvEOiJP6Q1dYC4wHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA0Mi9DblEzcEJBMllyQXN0UnZFT2lKUDZRMWRZQzQucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ttAMA0GCSqGSIb3DQEBCwUA A4IBAQADTGppHuCB/A/E1tAX4k+vYpBmPdqtxbrCLamDomdicEc5He97tOKXlTq2 KA+AeTBFVXGtn0OtRRrxgLEqanSNuvgI8mUHWyHPpmaBJzOAkDgUrq9s6zBjaZ/1 9YYqAQMVUDcGx+q5Tg2k1FU19n+lwbnPy3puzKWr2K0RhzBelcQKBpuAaShxR/+0 FyIsc65eGyGuF/hcCsur6CUi/btrhXjvnqklVYel8yj4A8xN57yo/gZMd7g4OU7w vgts6kenx8e/ApBjH1Y56sGstBWR4z/vlvbhlGWDLo0aJcAUmf1wTt/q7dSCJL6H varBESVjOT/eT2OzJhSXU8/noVap -----END CERTIFICATE-----Generated at Sat Apr 18 00:57:18 2026 by rpki-client