$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Q0NysIrrm2zPacDGfegYSpYCaIQ.roa File: Q0NysIrrm2zPacDGfegYSpYCaIQ.roa (raw, json) Hash identifier: bPxWSEDnhBaJs1MuaL8waUYkURW4n3HXEGp44yQLL/M= Subject key identifier: 43:43:72:B0:8A:EB:9B:6C:CF:69:C0:C6:7D:E8:18:4A:96:02:68:84 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0159 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Q0NysIrrm2zPacDGfegYSpYCaIQ.roa Signing time: Tue 31 Mar 2026 07:48:02 +0000 ROA not before: Tue 31 Mar 2026 07:48:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2914 IP address blocks: 61.120.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 11:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:48:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=434372B08AEB9B6CCF69C0C67DE8184A96026884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:65:e9:66:47:13:04:0d:62:8f:20:df:24: 06:a4:a0:cf:79:0a:97:c8:5e:8f:82:6d:84:4a:15: 7f:03:23:38:ff:9c:24:fc:bd:49:48:54:54:24:d0: 4f:10:db:2e:20:19:f3:ee:39:bd:cd:83:07:22:b4: 95:e9:e4:af:1d:aa:9e:66:2a:67:03:c9:94:70:b2: e9:5c:c5:bf:10:3e:16:30:fc:45:33:97:57:59:cc: 2f:e8:9e:b9:df:6e:b4:75:91:d4:9a:93:54:94:4d: aa:e1:28:4c:cd:3f:09:dc:ba:7e:06:cf:59:57:9b: 1c:20:cb:1c:0f:c1:76:8b:cd:75:18:8a:2f:8b:13: 65:5f:d4:38:77:8c:d1:e9:bc:3d:f1:17:26:31:c4: 88:fd:db:29:db:d0:24:dc:7f:4f:ae:2d:ab:c7:89: 44:55:73:51:3f:62:4d:bb:df:6e:70:69:81:a4:cc: a7:17:98:c4:b7:11:d5:31:4a:68:16:6f:c7:c8:83: 31:8b:e1:70:d7:3a:cb:01:1a:63:21:76:38:ed:ad: ee:f6:db:56:37:c3:69:53:16:f1:8c:09:41:94:0e: b5:09:1b:5a:d7:05:de:be:f1:8d:a3:0d:ad:4d:cc: 34:18:ce:a8:0d:84:c9:8d:40:93:95:ab:4d:c1:2a: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:72:B0:8A:EB:9B:6C:CF:69:C0:C6:7D:E8:18:4A:96:02:68:84 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Q0NysIrrm2zPacDGfegYSpYCaIQ.roa sbgp-ipAddrBlock: critical IPv4: 61.120.152.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:39:bd:83:f3:49:38:39:6f:4e:82:61:fd:28:87:96:72:7d: ea:93:c6:87:66:7c:f6:67:8e:48:d9:c3:de:59:8e:46:c3:b7: da:3f:ce:ce:19:54:39:67:e8:75:c8:7d:80:15:3a:e0:c0:77: 7f:e1:05:79:f4:3d:15:1d:45:75:25:12:ed:50:99:a4:f2:ae: 43:77:dd:d9:b8:a7:d7:3b:fd:40:03:f8:65:b5:35:0a:36:1d: 5a:26:c4:14:62:2c:b7:c9:6a:10:03:8d:18:fd:66:e9:2e:8b: a1:7f:9c:2e:c7:3a:ed:46:3f:a9:02:d2:db:0c:97:2d:51:7a: 52:87:60:28:1f:b9:68:41:05:de:cf:2a:85:b3:f3:f1:3e:e8: fb:06:3f:55:ee:c5:e0:11:fc:bd:ac:f2:24:48:6b:e8:3a:f2: 14:3c:7d:ff:ad:e4:77:11:52:d4:d4:f3:38:7c:b0:21:11:72: a6:1d:9b:1b:1e:df:67:5e:3a:8b:ad:63:63:f2:2d:2a:32:ec: 40:42:fc:6f:0f:9b:a6:03:a3:46:a6:7c:f4:ed:f3:ac:e3:64: b7:87:fa:6e:53:e6:5a:21:a9:48:d8:23:68:79:bd:67:d2:f4: 4f:93:75:11:4d:89:3a:5f:80:97:23:54:a4:01:2e:c8:ea:38: 12:78:32:7c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ4MDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNDM3MkIwOEFFQjlC NkNDRjY5QzBDNjdERTgxODRBOTYwMjY4ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgMmXpZkcTBA1ijyDfJAakoM95CpfIXo+CbYRKFX8DIzj/nCT8 vUlIVFQk0E8Q2y4gGfPuOb3NgwcitJXp5K8dqp5mKmcDyZRwsulcxb8QPhYw/EUz l1dZzC/onrnfbrR1kdSak1SUTarhKEzNPwncun4Gz1lXmxwgyxwPwXaLzXUYii+L E2Vf1Dh3jNHpvD3xFyYxxIj92ynb0CTcf0+uLavHiURVc1E/Yk27325waYGkzKcX mMS3EdUxSmgWb8fIgzGL4XDXOssBGmMhdjjtre7221Y3w2lTFvGMCUGUDrUJG1rX Bd6+8Y2jDa1NzDQYzqgNhMmNQJOVq03BKv4VAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUQ0NysIrrm2zPacDGfegYSpYCaIQwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9RME55c0lycm0yelBhY0RHZmVnWVNwWUNhSVEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPXiYMA0GCSqGSIb3DQEBCwUA A4IBAQAtOb2D80k4OW9OgmH9KIeWcn3qk8aHZnz2Z45I2cPeWY5Gw7faP87OGVQ5 Z+h1yH2AFTrgwHd/4QV59D0VHUV1JRLtUJmk8q5Dd93ZuKfXO/1AA/hltTUKNh1a JsQUYiy3yWoQA40Y/WbpLouhf5wuxzrtRj+pAtLbDJctUXpSh2AoH7loQQXezyqF s/PxPuj7Bj9V7sXgEfy9rPIkSGvoOvIUPH3/reR3EVLU1PM4fLAhEXKmHZsbHt9n XjqLrWNj8i0qMuxAQvxvD5umA6NGpnz07fOs42S3h/puU+ZaIalI2CNoeb1n0vRP k3URTYk6X4CXI1SkAS7I6jgSeDJ8 -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:16 2026 by rpki-client