$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XqGY6YeB5PHvZkofm1C2mlQUt3E.roa File: XqGY6YeB5PHvZkofm1C2mlQUt3E.roa (raw, json) Hash identifier: ENqLhXxcDl52A+zHPROmvEmyY82FZ191PM9VJF8p0eg= Subject key identifier: 5E:A1:98:E9:87:81:E4:F1:EF:66:4A:1F:9B:50:B6:9A:54:14:B7:71 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0172 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XqGY6YeB5PHvZkofm1C2mlQUt3E.roa Signing time: Tue 31 Mar 2026 07:48:16 +0000 ROA not before: Tue 31 Mar 2026 07:48:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2914 IP address blocks: 203.205.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 12:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:48:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5EA198E98781E4F1EF664A1F9B50B69A5414B771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:00:f3:18:f2:9c:6b:17:71:cc:67:0f:33: 1c:ec:b8:e7:a1:3d:50:93:ab:3d:50:28:9b:56:8d: 34:e3:56:e2:d1:8c:0a:01:5f:73:bf:60:0e:b7:f9: 3e:c8:1a:14:69:c0:b5:1c:1e:24:ff:e1:59:d8:67: 27:8e:67:13:12:71:b5:db:29:98:8e:1f:5d:ed:30: 76:68:27:63:56:ca:f5:7c:c4:85:12:a6:3b:3d:51: f4:99:fe:32:5c:81:6c:8a:22:05:ff:72:0a:6b:ef: ae:15:76:a1:35:91:08:e5:2a:5e:53:5b:b7:45:f3: c1:55:72:fc:12:ff:0e:79:b5:ad:f0:5d:2f:c7:45: 5d:b3:e2:58:21:b3:ae:fd:13:4a:94:b2:51:29:b0: 05:74:ca:0f:d3:1a:94:4b:0b:b2:bb:ef:6e:1b:cf: 3b:ca:e8:85:f3:9b:be:97:7f:ee:61:93:a1:3b:4c: be:58:24:19:37:e1:ae:62:e4:f4:9c:76:0e:e2:d4: b3:cb:f4:87:e6:14:da:a0:59:a6:6f:5b:3a:b6:6e: 39:48:3a:b8:f8:2c:97:93:f9:44:eb:13:01:46:d9: 55:f0:b0:d8:02:5e:fe:12:de:4c:98:13:f5:17:f2: 24:a9:c6:66:c7:2d:ce:94:9e:91:26:66:05:58:cb: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A1:98:E9:87:81:E4:F1:EF:66:4A:1F:9B:50:B6:9A:54:14:B7:71 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XqGY6YeB5PHvZkofm1C2mlQUt3E.roa sbgp-ipAddrBlock: critical IPv4: 203.205.112.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:c8:7e:cc:d5:4a:ce:a5:ce:09:4f:fb:d1:0e:fd:d1:cc:a6: bb:bd:20:62:a1:89:f4:96:7f:54:8d:38:c5:0b:0b:a2:a3:12: cb:89:ef:77:08:28:3f:9c:c0:24:c5:fd:13:fa:e4:26:6c:4f: 2c:30:c3:56:77:c3:48:5e:1f:e7:99:4e:7a:91:1b:76:88:5a: 94:c5:ce:fe:e9:20:a1:c1:f4:25:9d:2d:4c:c9:04:5a:4f:67: c5:26:52:8c:8b:ed:54:fd:8b:33:08:28:4d:f9:f9:8c:d8:a1: 3f:b5:41:a6:4b:04:2c:67:bc:a5:5f:1b:b4:ab:fd:54:89:8d: 01:1e:9f:d4:68:23:98:9c:02:eb:f3:22:30:df:71:80:ca:0e: d4:84:10:63:e4:7d:08:c9:d2:c9:47:12:72:e8:77:62:12:3e: 93:b2:ec:80:17:2c:e9:b8:36:b5:99:48:82:1d:f3:db:a9:9d: c6:0d:14:67:fb:b4:a6:9e:9a:7f:6f:7a:bf:1e:ee:02:e3:25: f7:97:13:ce:01:6a:e9:db:af:15:fa:de:d8:38:80:8d:ef:0a: ae:2d:c6:44:83:0a:a3:ff:af:cb:fe:71:37:f5:30:de:6c:10: 75:9b:e9:a8:19:d4:a2:d4:e3:b0:7c:42:70:67:7f:f7:0a:a4: b6:68:1f:78 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ4MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFQTE5OEU5ODc4MUU0 RjFFRjY2NEExRjlCNTBCNjlBNTQxNEI3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCisQDzGPKcaxdxzGcPMxzsuOehPVCTqz1QKJtWjTTjVuLRjAoB X3O/YA63+T7IGhRpwLUcHiT/4VnYZyeOZxMScbXbKZiOH13tMHZoJ2NWyvV8xIUS pjs9UfSZ/jJcgWyKIgX/cgpr764VdqE1kQjlKl5TW7dF88FVcvwS/w55ta3wXS/H RV2z4lghs679E0qUslEpsAV0yg/TGpRLC7K7724bzzvK6IXzm76Xf+5hk6E7TL5Y JBk34a5i5PScdg7i1LPL9IfmFNqgWaZvWzq2bjlIOrj4LJeT+UTrEwFG2VXwsNgC Xv4S3kyYE/UX8iSpxmbHLc6UnpEmZgVYyziPAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUXqGY6YeB5PHvZkofm1C2mlQUt3EwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9YcUdZNlllQjVQSHZaa29mbTFDMm1sUVV0M0Uucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy81wMA0GCSqGSIb3DQEBCwUA A4IBAQB+yH7M1UrOpc4JT/vRDv3RzKa7vSBioYn0ln9UjTjFCwuioxLLie93CCg/ nMAkxf0T+uQmbE8sMMNWd8NIXh/nmU56kRt2iFqUxc7+6SChwfQlnS1MyQRaT2fF JlKMi+1U/YszCChN+fmM2KE/tUGmSwQsZ7ylXxu0q/1UiY0BHp/UaCOYnALr8yIw 33GAyg7UhBBj5H0IydLJRxJy6HdiEj6TsuyAFyzpuDa1mUiCHfPbqZ3GDRRn+7Sm npp/b3q/Hu4C4yX3lxPOAWrp268V+t7YOICN7wquLcZEgwqj/6/L/nE39TDebBB1 m+moGdSi1OOwfEJwZ3/3CqS2aB94 -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:13 2026 by rpki-client