$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4a8RiBEU9MdM5bE5QI5AalHx1vQ.roa File: 4a8RiBEU9MdM5bE5QI5AalHx1vQ.roa (raw, json) Hash identifier: XSg3kd+y1oPZ2JqM82WSOIEMBsr6+ncP5MX1MZe5RMo= Subject key identifier: E1:AF:11:88:11:14:F4:C7:4C:E5:B1:39:40:8E:40:6A:51:F1:D6:F4 Certificate issuer: /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Certificate serial: 50 Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4a8RiBEU9MdM5bE5QI5AalHx1vQ.roa Signing time: Tue 31 Mar 2026 07:52:51 +0000 ROA not before: Tue 31 Mar 2026 07:52:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 216.255.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Validity Not Before: Mar 31 07:52:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E1AF11881114F4C74CE5B139408E406A51F1D6F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:cf:8d:ee:75:54:72:f5:e3:b2:9f:fb:79: d0:0d:6d:ab:75:9f:52:b4:b4:a7:c6:fa:2e:61:bb: 08:70:a2:73:56:79:77:e6:7d:dc:11:cc:bc:7c:1e: 6f:83:45:a1:10:ec:46:9d:38:f0:b3:97:19:1d:32: 66:cf:77:96:95:68:ee:6b:b2:af:e2:0e:0f:5e:fa: 26:7b:96:88:45:eb:2f:58:d7:5c:ee:07:6e:e4:ef: 33:13:ed:ca:6e:8e:ea:81:a4:34:5a:ec:b7:cf:fd: 2e:29:76:38:c2:e7:8c:95:49:42:ba:39:51:a7:3b: 5c:7c:2f:20:94:86:dd:d3:35:bd:47:b5:f4:f6:e4: 0c:62:3b:ce:76:06:e0:23:b6:06:5f:61:af:d8:b5: 6e:52:eb:9e:f3:b5:85:04:c9:83:73:60:92:82:b2: e0:cc:02:fa:22:da:9c:50:be:a8:6f:c3:0c:e6:93: 1b:ba:0f:8d:db:ec:6b:97:46:a6:01:0a:4e:30:48: 59:ab:fe:90:31:92:15:af:bd:6f:52:63:13:d3:b1: 52:f4:f9:16:b5:2c:98:12:12:12:60:1a:12:47:14: 6f:e4:59:d3:eb:50:5d:9b:82:30:14:74:11:08:75: 0d:04:25:76:15:dd:d1:ed:32:ce:e0:46:35:80:a9: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:11:88:11:14:F4:C7:4C:E5:B1:39:40:8E:40:6A:51:F1:D6:F4 X509v3 Authority Key Identifier: keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4a8RiBEU9MdM5bE5QI5AalHx1vQ.roa sbgp-ipAddrBlock: critical IPv4: 216.255.224.0/20 Signature Algorithm: sha256WithRSAEncryption 54:28:ba:ac:78:d6:3b:54:60:24:f0:fd:a9:cf:36:d6:83:a8: 1e:71:41:0f:34:bc:94:69:4b:21:4a:63:6f:a2:ae:5d:e8:94: e8:44:e0:fb:99:71:23:03:ca:1f:b3:96:8c:4c:63:a6:c7:0a: 95:95:56:d1:29:ef:4d:69:5a:81:40:1b:8f:b0:31:6c:c0:55: c7:b2:78:c8:1e:f5:f0:94:c0:8c:1a:b0:22:07:d4:bd:f5:eb: bc:f1:60:d7:8a:42:5d:dd:32:19:0a:6c:88:78:ec:89:68:8d: 03:e9:83:18:71:1b:95:60:2f:05:ad:ff:c0:e7:81:5c:72:c6: 66:e4:47:e8:3a:fe:37:5e:6f:e3:73:5a:e9:e9:d2:32:cd:6d: 96:0a:a8:c1:49:c3:3d:d8:37:0e:9d:fe:6a:a7:91:3e:7f:af: 69:77:64:8e:2d:39:3a:9c:6e:32:01:0c:9f:7c:24:40:e0:d2: 79:81:44:d6:d2:f1:77:8c:e0:61:65:23:d4:06:75:9c:b5:0d: ac:7c:5c:e5:2c:d6:0d:3d:34:d4:09:b4:d0:87:72:61:1a:5b: 92:b0:a5:fb:2e:82:0f:da:7b:57:ca:5f:a7:f8:de:db:92:4d: ce:26:8c:a1:a1:fc:31:ec:12:a8:13:6d:29:5d:b4:c3:23:f0: ec:01:f5:b5 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTQx NUZFOTM3N0YzRjRCOEVBODM4QzY2MkM0QkNEOERDRkNGMUJBMB4XDTI2MDMzMTA3 NTI1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTFBRjExODgxMTE0RjRD NzRDRTVCMTM5NDA4RTQwNkE1MUYxRDZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdrz43udVRy9eOyn/t50A1tq3WfUrS0p8b6LmG7CHCic1Z5d+Z9 3BHMvHweb4NFoRDsRp048LOXGR0yZs93lpVo7muyr+IOD176JnuWiEXrL1jXXO4H buTvMxPtym6O6oGkNFrst8/9Lil2OMLnjJVJQro5Uac7XHwvIJSG3dM1vUe19Pbk DGI7znYG4CO2Bl9hr9i1blLrnvO1hQTJg3NgkoKy4MwC+iLanFC+qG/DDOaTG7oP jdvsa5dGpgEKTjBIWav+kDGSFa+9b1JjE9OxUvT5FrUsmBISEmAaEkcUb+RZ0+tQ XZuCMBR0EQh1DQQldhXd0e0yzuBGNYCpKYMCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBThrxGIERT0x0zlsTlAjkBqUfHW9DAfBgNVHSMEGDAWgBSpQV/pN38/S46oOMZi xLzY3PzxujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODMvcVVGZjZUZF9QMHVPcURqR1lzUzgyTno4OGJvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcVVGZjZUZF9QMHVPcURqR1lzUzgy Tno4OGJvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDgzLzRhOFJpQkVVOU1kTTViRTVRSTVBYWxIeDF2US5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATY/+AwDQYJKoZIhvcNAQELBQAD ggEBAFQouqx41jtUYCTw/anPNtaDqB5xQQ80vJRpSyFKY2+irl3olOhE4PuZcSMD yh+zloxMY6bHCpWVVtEp701pWoFAG4+wMWzAVceyeMge9fCUwIwasCIH1L3167zx YNeKQl3dMhkKbIh47IlojQPpgxhxG5VgLwWt/8DngVxyxmbkR+g6/jdeb+NzWunp 0jLNbZYKqMFJwz3YNw6d/mqnkT5/r2l3ZI4tOTqcbjIBDJ98JEDg0nmBRNbS8XeM 4GFlI9QGdZy1Dax8XOUs1g09NNQJtNCHcmEaW5Kwpfsugg/ae1fKX6f43tuSTc4m jKGh/DHsEqgTbSldtMMj8OwB9bU= -----END CERTIFICATE-----Generated at Wed Apr 1 15:58:26 2026 by rpki-client