$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/cGMZL1NxOxZneRs4l86rScuBHEk.roa File: cGMZL1NxOxZneRs4l86rScuBHEk.roa (raw, json) Hash identifier: 00eOprRzWeuMSnO8/HgUhT1bppvgTpODw4/qzea/UG0= Subject key identifier: 70:63:19:2F:53:71:3B:16:67:79:1B:38:97:CE:AB:49:CB:81:1C:49 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0144 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/cGMZL1NxOxZneRs4l86rScuBHEk.roa Signing time: Tue 31 Mar 2026 07:47:50 +0000 ROA not before: Tue 31 Mar 2026 07:47:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2914 IP address blocks: 153.254.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 12:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7063192F53713B1667791B3897CEAB49CB811C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:c5:2d:53:e6:bd:bd:bf:35:ed:b6:48:c1: fd:b3:6f:54:21:bc:63:47:cc:67:84:77:aa:f8:6c: a5:3b:d9:25:4d:82:c1:a0:ed:61:12:56:d9:a3:bf: f4:b7:17:a3:95:2e:b6:7d:fb:5e:00:91:5c:e7:4a: d2:a2:7c:79:28:94:71:4c:c4:66:1b:aa:2a:22:c1: 36:ed:c6:a6:95:da:e3:9f:1e:87:af:7d:ec:10:2e: 3c:58:02:5c:aa:f2:9a:48:c3:0c:c8:02:be:75:80: c7:ba:2e:28:51:06:55:85:26:a6:43:e0:c7:08:81: 6e:85:f3:60:ef:4c:02:f9:85:16:65:1d:04:4f:ab: 4f:a8:62:93:40:67:87:2e:ae:9d:ab:f4:13:5e:a4: f4:23:a5:d4:0e:0e:80:ec:1f:8f:cc:a5:cc:86:2d: e5:7d:2d:5c:6b:8f:7b:2e:dc:3e:72:37:2a:94:fe: ce:bb:07:0b:ae:1a:46:f3:ce:dc:41:ab:ee:7f:92: aa:9e:04:ea:a6:fa:c6:fd:f4:19:32:40:e5:99:8e: e9:00:ee:44:9f:49:c7:03:13:a9:5e:1e:97:b6:25: 53:08:ae:f6:df:7a:12:6a:4a:82:a3:dc:15:56:9c: 9a:10:3f:7b:88:3e:26:77:cf:78:e2:b2:8f:ef:d4: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:63:19:2F:53:71:3B:16:67:79:1B:38:97:CE:AB:49:CB:81:1C:49 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/cGMZL1NxOxZneRs4l86rScuBHEk.roa sbgp-ipAddrBlock: critical IPv4: 153.254.90.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:45:a8:c8:ca:12:f3:e1:69:86:01:a5:4e:a8:45:f4:52:bd: fa:c7:0f:bf:c5:30:02:4f:bf:45:34:af:ae:0d:87:ea:0c:46: f4:f0:33:9b:72:d1:7e:44:e0:fa:6f:de:35:9b:bb:27:a7:88: da:8a:9d:16:9a:8e:58:22:c1:af:f1:c8:c1:43:79:8d:e5:be: 9c:a3:c3:a2:00:7e:9d:08:4c:fb:f9:40:e6:93:b5:5a:2b:4a: 59:cb:67:34:30:b2:d5:c3:11:8f:7d:16:db:5e:b8:97:0a:17: d4:92:65:16:a3:2c:da:75:60:d5:02:ce:9e:47:4b:64:e9:ec: 07:fc:7b:75:21:09:03:2c:6e:e4:c4:b0:83:2c:2b:6b:d0:6b: 43:02:2c:9d:02:94:51:56:75:34:d9:f2:04:97:36:e5:04:04: f9:e2:4a:3a:45:a2:d7:4d:8a:a5:c8:2b:8c:4c:32:b5:b0:ea: 93:71:5c:b1:c8:4a:29:63:27:50:f2:bc:85:9c:4c:ef:a1:4e: 59:be:b7:97:21:f9:bb:2b:f3:f4:4a:8f:7a:28:ab:ac:9e:a0: 00:de:9a:ff:2f:27:01:6e:e6:f9:d5:b6:6b:3d:df:8f:46:10: a8:f9:0b:12:b9:96:cf:b7:f6:31:47:fd:2c:05:32:ed:8f:75: 92:26:6b:ad -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwNjMxOTJGNTM3MTNC MTY2Nzc5MUIzODk3Q0VBQjQ5Q0I4MTFDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ+MUtU+a9vb817bZIwf2zb1QhvGNHzGeEd6r4bKU72SVNgsGg 7WESVtmjv/S3F6OVLrZ9+14AkVznStKifHkolHFMxGYbqioiwTbtxqaV2uOfHoev fewQLjxYAlyq8ppIwwzIAr51gMe6LihRBlWFJqZD4McIgW6F82DvTAL5hRZlHQRP q0+oYpNAZ4curp2r9BNepPQjpdQODoDsH4/MpcyGLeV9LVxrj3su3D5yNyqU/s67 BwuuGkbzztxBq+5/kqqeBOqm+sb99BkyQOWZjukA7kSfSccDE6leHpe2JVMIrvbf ehJqSoKj3BVWnJoQP3uIPiZ3z3jiso/v1BjxAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUcGMZL1NxOxZneRs4l86rScuBHEkwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9jR01aTDFOeE94Wm5lUnM0bDg2clNjdUJIRWsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmf5aMA0GCSqGSIb3DQEBCwUA A4IBAQAdRajIyhLz4WmGAaVOqEX0Ur36xw+/xTACT79FNK+uDYfqDEb08DObctF+ ROD6b941m7snp4jaip0Wmo5YIsGv8cjBQ3mN5b6co8OiAH6dCEz7+UDmk7VaK0pZ y2c0MLLVwxGPfRbbXriXChfUkmUWoyzadWDVAs6eR0tk6ewH/Ht1IQkDLG7kxLCD LCtr0GtDAiydApRRVnU02fIElzblBAT54ko6RaLXTYqlyCuMTDK1sOqTcVyxyEop YydQ8ryFnEzvoU5ZvreXIfm7K/P0So96KKusnqAA3pr/LycBbub51bZrPd+PRhCo +QsSuZbPt/YxR/0sBTLtj3WSJmut -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:14 2026 by rpki-client