$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/IDX5FPZcShBj2yiX6WSrnyzzq8E.roa File: IDX5FPZcShBj2yiX6WSrnyzzq8E.roa (raw, json) Hash identifier: z0y6dv5scdZU0HBSytGq0SR8xl8td4CsdXQ4/xaEgxY= Subject key identifier: 20:35:F9:14:F6:5C:4A:10:63:DB:28:97:E9:64:AB:9F:2C:F3:AB:C1 Certificate issuer: /CN=3024C5FA9AA2CF32D968AF745201A993494D34F2 Certificate serial: 21 Authority key identifier: 30:24:C5:FA:9A:A2:CF:32:D9:68:AF:74:52:01:A9:93:49:4D:34:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IDX5FPZcShBj2yiX6WSrnyzzq8E.roa Signing time: Wed 29 Jul 2026 04:49:42 +0000 ROA not before: Wed 29 Jul 2026 04:49:42 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 2519 IP address blocks: 165.100.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3024C5FA9AA2CF32D968AF745201A993494D34F2 Validity Not Before: Jul 29 04:49:42 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=2035F914F65C4A1063DB2897E964AB9F2CF3ABC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:28:30:3f:0f:ca:c4:78:9b:11:4b:dd:8f: 2d:16:cb:47:72:ad:dc:95:e9:b0:ae:e7:1f:15:e7: ea:93:fc:57:c7:75:1f:2f:ce:26:1a:47:95:21:6d: 49:60:da:2f:87:0d:8d:cd:58:ae:e4:32:3b:ca:1f: 66:bc:96:aa:2c:ac:e8:74:68:19:3e:0b:bb:37:26: 70:d3:02:22:7d:97:d9:53:5c:1f:55:da:3c:70:14: 6c:1d:f1:0a:c3:e5:56:47:44:49:d3:94:df:a7:eb: b8:17:33:34:a6:3d:00:60:fa:e7:61:d3:16:09:72: e0:60:d2:4e:91:a0:4e:cd:f1:cb:d6:43:32:2c:a7: 7f:ba:24:24:75:f8:91:f5:3d:97:4d:3e:fd:77:0c: ea:e6:49:ae:3f:a2:2a:e3:57:c2:a5:48:73:ba:e1: 23:d2:58:69:c0:52:6e:3d:b2:75:5d:7d:fa:c5:f1: 4d:42:2e:3f:72:39:37:27:ef:7a:46:fb:a8:44:f9: 69:5c:c9:4a:63:d4:0f:84:c4:9c:e8:33:58:e0:63: 89:2c:80:60:e8:bb:52:83:35:76:c8:b3:2d:4d:f2: af:ec:0e:d4:f2:b0:56:59:07:db:95:c3:c2:25:19: f6:b8:d3:4d:31:df:5f:23:6e:92:d9:a0:32:51:59: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:F9:14:F6:5C:4A:10:63:DB:28:97:E9:64:AB:9F:2C:F3:AB:C1 X509v3 Authority Key Identifier: keyid:30:24:C5:FA:9A:A2:CF:32:D9:68:AF:74:52:01:A9:93:49:4D:34:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/MCTF-pqizzLZaK90UgGpk0lNNPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MCTF-pqizzLZaK90UgGpk0lNNPI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IDX5FPZcShBj2yiX6WSrnyzzq8E.roa sbgp-ipAddrBlock: critical IPv4: 165.100.176.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:5f:25:1a:e8:22:b6:bf:8b:74:ce:92:6e:c3:a7:36:4b:a5: 23:4d:f9:0f:34:26:9d:88:3a:9e:23:55:d6:0f:db:c3:c1:b4: 0c:e1:87:c6:a6:f7:e3:3d:62:4b:16:7b:0b:f1:24:bc:8e:ef: 5e:eb:2c:bf:62:7a:e5:af:d4:2a:c3:87:e1:e7:bd:13:74:a3: fc:93:f8:cc:13:97:d1:aa:05:ec:34:23:43:f8:e0:4b:06:8d: ee:d3:33:31:e7:61:09:5f:36:e5:4c:76:2d:53:3b:b8:34:89: ca:4d:ce:f6:a0:92:fe:7a:80:1c:98:b2:ed:8f:4b:62:a5:40: c1:31:53:a7:13:06:0b:2f:a8:05:75:44:9d:17:d2:f2:6b:7b: ae:3f:21:27:91:a6:99:f2:71:16:94:36:4d:b8:9d:dd:7b:ef: 8c:17:10:b3:b8:68:a3:58:d4:e0:67:7b:d8:69:97:09:ff:48: b3:5b:d5:3b:d0:89:72:d2:9b:fd:b8:56:31:ba:ed:46:5c:74: f5:3b:f1:0e:0b:4f:00:59:af:91:e4:aa:79:a9:1b:01:e3:43: 0b:b6:02:d9:4b:d7:68:64:af:40:51:01:7f:08:1d:67:28:87: 32:71:7d:b6:99:d4:76:78:e4:a8:de:3c:ba:af:92:08:03:4d: f4:f1:c3:e9 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMDI0 QzVGQTlBQTJDRjMyRDk2OEFGNzQ1MjAxQTk5MzQ5NEQzNEYyMB4XDTI2MDcyOTA0 NDk0MloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMjAzNUY5MTRGNjVDNEEx MDYzREIyODk3RTk2NEFCOUYyQ0YzQUJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4OKDA/D8rEeJsRS92PLRbLR3Kt3JXpsK7nHxXn6pP8V8d1Hy/O JhpHlSFtSWDaL4cNjc1YruQyO8ofZryWqiys6HRoGT4LuzcmcNMCIn2X2VNcH1Xa PHAUbB3xCsPlVkdESdOU36fruBczNKY9AGD652HTFgly4GDSTpGgTs3xy9ZDMiyn f7okJHX4kfU9l00+/XcM6uZJrj+iKuNXwqVIc7rhI9JYacBSbj2ydV19+sXxTUIu P3I5Nyfvekb7qET5aVzJSmPUD4TEnOgzWOBjiSyAYOi7UoM1dsizLU3yr+wO1PKw VlkH25XDwiUZ9rjTTTHfXyNuktmgMlFZ5K8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQgNfkU9lxKEGPbKJfpZKufLPOrwTAfBgNVHSMEGDAWgBQwJMX6mqLPMtlor3RS AamTSU008jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDUyL01DVEYtcHFpenpMWmFLOTBVZ0dwazBsTk5QSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL01DVEYtcHFpenpMWmFLOTBVZ0dwazBs Tk5QSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80NTIvSURYNUZQWmNTaEJqMnlpWDZXU3JueXp6cThFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKVksDANBgkqhkiG9w0BAQsFAAOCAQEA m18lGugitr+LdM6SbsOnNkulI035DzQmnYg6niNV1g/bw8G0DOGHxqb34z1iSxZ7 C/EkvI7vXussv2J65a/UKsOH4ee9E3Sj/JP4zBOX0aoF7DQjQ/jgSwaN7tMzMedh CV825Ux2LVM7uDSJyk3O9qCS/nqAHJiy7Y9LYqVAwTFTpxMGCy+oBXVEnRfS8mt7 rj8hJ5GmmfJxFpQ2Tbid3XvvjBcQs7hoo1jU4Gd72GmXCf9Is1vVO9CJctKb/bhW MbrtRlx09TvxDgtPAFmvkeSqeakbAeNDC7YC2UvXaGSvQFEBfwgdZyiHMnF9tpnU dnjkqN48uq+SCANN9PHD6Q== -----END CERTIFICATE-----Generated at Wed Aug 19 20:12:16 2026 by rpki-client