$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/C_tUtlt-R3yjmpO2h2WSMtfC5MY.roa File: C_tUtlt-R3yjmpO2h2WSMtfC5MY.roa (raw, json) Hash identifier: 8apdSJTY9Wex8zDzjg5RbjDLLK+uo1xM0tV6cXx7R4Y= Subject key identifier: 0B:FB:54:B6:5B:7E:47:7C:A3:9A:93:B6:87:65:92:32:D7:C2:E4:C6 Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC Certificate serial: 98 Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/C_tUtlt-R3yjmpO2h2WSMtfC5MY.roa Signing time: Tue 31 Mar 2026 08:30:42 +0000 ROA not before: Tue 31 Mar 2026 08:30:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37904 IP address blocks: 218.231.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 10:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC Validity Not Before: Mar 31 08:30:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0BFB54B65B7E477CA39A93B687659232D7C2E4C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:da:b5:72:cc:72:2f:e7:db:dc:56:4c:19:d8: 01:eb:df:1a:74:69:87:f1:11:60:f6:ac:2a:9f:27: 80:c0:41:1d:4c:3a:79:c6:ca:3b:5a:8f:7c:6d:1b: f7:48:30:11:1e:32:5c:28:7e:c2:2c:79:8c:50:ec: a3:26:32:de:08:a7:84:71:a8:6f:b6:0b:3c:eb:42: 0c:08:d4:27:f8:3f:85:4e:9a:41:9b:d9:ec:42:b7: 37:27:69:d8:bc:d3:4f:ba:09:55:27:96:f3:59:f7: 78:ed:8a:4c:e6:01:e6:ce:93:eb:4a:37:e6:bd:d3: 03:e6:76:11:a3:0e:ff:d8:ec:e3:b0:e3:b2:b4:71: e1:13:ab:6b:48:25:0b:17:8a:14:c4:43:d8:bd:78: 2c:95:02:9d:44:e9:21:02:bf:c1:5f:2b:a4:d8:da: 3f:c0:ca:0f:5a:b2:c0:5e:df:1d:48:f5:bc:8a:e0: f3:95:95:fa:ee:74:d6:4f:3e:d1:2d:dc:e6:36:46: 29:7b:a3:21:85:a1:c7:97:2a:dd:72:f1:85:e7:bf: 66:8f:3d:1d:bf:60:12:40:30:30:71:7f:a7:5a:9f: 4e:a8:42:ca:6f:61:14:c6:29:66:f2:64:26:a0:65: be:02:f2:c0:a4:2b:08:c3:e9:86:35:60:64:d8:9e: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:54:B6:5B:7E:47:7C:A3:9A:93:B6:87:65:92:32:D7:C2:E4:C6 X509v3 Authority Key Identifier: keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/C_tUtlt-R3yjmpO2h2WSMtfC5MY.roa sbgp-ipAddrBlock: critical IPv4: 218.231.248.0/23 Signature Algorithm: sha256WithRSAEncryption 08:b3:9a:1c:fc:63:8f:14:9a:94:07:14:10:b5:51:cf:7e:98: 19:da:ed:bf:21:f5:e5:92:f7:3d:58:eb:a1:db:8b:ca:1b:b4: 21:78:19:80:ba:0c:f5:5f:ed:73:cc:75:fc:c1:9f:54:40:c5: 76:04:f4:bd:8a:f6:7e:f0:e1:5c:b6:87:4d:90:ed:93:58:0e: 3c:0b:b5:40:03:ac:9a:7a:d6:c1:82:a2:7d:ad:76:f6:de:b9: 89:e3:dd:1e:e5:9e:87:35:d1:d1:b4:e4:ea:c6:f6:73:b4:56: 98:6e:a1:3a:b8:2f:83:33:87:4c:f3:2f:d8:ae:bc:4c:c2:8c: a8:5d:73:b3:3b:ac:77:46:7b:52:78:1f:5e:73:a1:45:d4:91: 44:3c:2c:6d:05:69:5d:bf:a1:c8:6c:7f:6a:39:67:cc:f3:48: a5:79:f7:90:14:cb:68:fc:16:bb:89:eb:81:c0:22:6a:85:66: 40:17:59:87:88:63:ea:db:f8:47:11:08:24:d8:80:50:39:52: 54:d5:b2:1f:be:75:63:29:b0:c1:25:9b:58:8e:8a:77:70:18: 7e:92:1b:2e:b9:5c:af:b9:84:f4:c9:fc:d1:9e:53:96:0e:ed: 0a:04:6f:6e:e9:b3:81:13:b9:5f:61:cd:b8:72:0d:ee:ca:ad: e8:f4:60:56 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFG NzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFCQzAeFw0yNjAzMzEw ODMwNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCRkI1NEI2NUI3RTQ3 N0NBMzlBOTNCNjg3NjU5MjMyRDdDMkU0QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD62rVyzHIv59vcVkwZ2AHr3xp0aYfxEWD2rCqfJ4DAQR1MOnnG yjtaj3xtG/dIMBEeMlwofsIseYxQ7KMmMt4Ip4RxqG+2CzzrQgwI1Cf4P4VOmkGb 2exCtzcnadi800+6CVUnlvNZ93jtikzmAebOk+tKN+a90wPmdhGjDv/Y7OOw47K0 ceETq2tIJQsXihTEQ9i9eCyVAp1E6SECv8FfK6TY2j/Ayg9assBe3x1I9byK4POV lfrudNZPPtEt3OY2Ril7oyGFoceXKt1y8YXnv2aPPR2/YBJAMDBxf6dan06oQspv YRTGKWbyZCagZb4C8sCkKwjD6YY1YGTYni+LAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUC/tUtlt+R3yjmpO2h2WSMtfC5MYwHwYDVR0jBBgwFoAUcfdvoHc19oWZH8iC yIXiHvuxYbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU5Ny9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2dXhZYncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2 dXhZYncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTk3L0NfdFV0bHQtUjN5am1wTzJoMldTTXRmQzVNWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHa5/gwDQYJKoZIhvcNAQELBQADggEB AAizmhz8Y48UmpQHFBC1Uc9+mBna7b8h9eWS9z1Y66Hbi8obtCF4GYC6DPVf7XPM dfzBn1RAxXYE9L2K9n7w4Vy2h02Q7ZNYDjwLtUADrJp61sGCon2tdvbeuYnj3R7l noc10dG05OrG9nO0VphuoTq4L4Mzh0zzL9iuvEzCjKhdc7M7rHdGe1J4H15zoUXU kUQ8LG0FaV2/ochsf2o5Z8zzSKV595AUy2j8FruJ64HAImqFZkAXWYeIY+rb+EcR CCTYgFA5UlTVsh++dWMpsMElm1iOindwGH6SGy65XK+5hPTJ/NGeU5YO7QoEb27p s4ETuV9hzbhyDe7Krej0YFY= -----END CERTIFICATE-----Generated at Mon Apr 6 13:52:00 2026 by rpki-client