$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/4cX9a-s2NK7W5_cIqXvfV46LZcc.roa File: 4cX9a-s2NK7W5_cIqXvfV46LZcc.roa (raw, json) Hash identifier: +XUlPN320BgqdEvdIn39ZoEsfvjIUxZlB5260yDGxh0= Subject key identifier: E1:C5:FD:6B:EB:36:34:AE:D6:E7:F7:08:A9:7B:DF:57:8E:8B:65:C7 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0446 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4cX9a-s2NK7W5_cIqXvfV46LZcc.roa Signing time: Tue 31 Mar 2026 08:12:11 +0000 ROA not before: Tue 31 Mar 2026 08:12:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23788 IP address blocks: 175.111.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 12:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E1C5FD6BEB3634AED6E7F708A97BDF578E8B65C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:40:14:70:26:e3:94:e7:2e:71:b4:1d:34: bb:c6:ad:cd:2c:5b:e8:4e:51:79:c5:4a:60:8d:c3: db:96:2b:fb:8a:d5:d9:32:5e:00:ac:b1:22:f4:ec: cd:fd:cf:c7:8e:8d:c0:ac:23:e9:76:1e:13:0f:a2: c7:1c:dd:27:6c:3d:8b:45:87:1e:ce:17:5e:dc:68: e4:2b:87:bd:5c:37:0b:cc:67:0b:3f:80:e7:10:90: 88:2b:20:9a:24:3d:9b:2b:3c:83:d6:b9:fd:39:d1: 34:ee:9b:8b:ec:68:a3:78:7e:e2:ed:ad:93:b5:56: 0f:03:a9:10:a5:a4:95:3d:50:1a:5d:a8:e2:d3:08: cf:21:9e:8a:65:a7:41:da:81:03:6e:e4:a5:bd:76: f7:69:9e:a7:34:f2:70:70:0d:01:60:ba:1e:d6:e1: c1:19:c6:4b:94:da:bf:73:6f:ee:a6:29:88:f1:02: f7:e6:03:36:1f:2b:b1:99:90:47:fc:8e:d2:1b:c9: 4c:f1:0f:6b:20:06:77:dc:75:70:0e:09:4a:7b:47: 36:c5:27:11:62:d2:28:a4:cd:0b:b3:1c:62:80:7a: 0b:87:30:62:5d:b6:f2:f8:7a:ff:02:eb:bb:2a:26: 37:8f:1d:b0:00:c2:1a:3d:19:87:d7:ac:71:90:b2: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C5:FD:6B:EB:36:34:AE:D6:E7:F7:08:A9:7B:DF:57:8E:8B:65:C7 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4cX9a-s2NK7W5_cIqXvfV46LZcc.roa sbgp-ipAddrBlock: critical IPv4: 175.111.120.0/21 Signature Algorithm: sha256WithRSAEncryption 39:ef:13:af:d2:8e:46:42:02:90:2e:42:2c:51:f1:a9:63:4a: b0:f6:5e:01:d7:36:d6:b0:ac:ef:fe:6e:1d:ab:22:53:b6:50: c0:ae:81:a3:b8:e1:8a:99:a1:80:2a:ab:c3:7c:e9:02:0a:4a: 32:c2:24:0b:7f:88:ea:ee:37:5c:14:16:63:da:ad:ef:69:82: 61:d7:b6:f3:79:a4:44:2f:8e:0d:b9:b8:5d:0f:ac:15:5f:65: dd:9e:4b:19:05:8c:b3:26:52:89:a4:b8:f3:91:fd:21:db:0a: 3d:9e:b5:a5:cb:ee:df:d7:6f:40:d9:ff:e6:8d:1a:8d:e7:6f: 55:ad:f7:12:7c:1b:dc:e1:3f:d8:c8:8f:fa:4b:c4:b5:c9:07: f5:bc:c9:15:e3:a3:6d:f8:31:90:a5:43:11:64:89:72:f3:3d: ba:0a:95:a6:c1:11:1e:39:c4:48:98:08:90:24:3f:1f:bb:8d: 20:a1:5e:cc:fa:4a:5f:42:3c:b3:13:a4:5a:23:c6:90:29:53: d2:a7:71:a7:4b:78:c8:6b:ac:bc:b4:c5:65:e2:ad:09:0c:9a: 59:66:c0:21:c6:5a:53:58:d1:0b:26:32:17:e2:2f:d3:32:b4: 49:b2:94:38:0c:f6:c9:45:f5:82:0e:a9:61:e1:05:93:2e:36: b9:eb:88:a5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyMTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxQzVGRDZCRUIzNjM0 QUVENkU3RjcwOEE5N0JERjU3OEU4QjY1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChEkAUcCbjlOcucbQdNLvGrc0sW+hOUXnFSmCNw9uWK/uK1dky XgCssSL07M39z8eOjcCsI+l2HhMPoscc3SdsPYtFhx7OF17caOQrh71cNwvMZws/ gOcQkIgrIJokPZsrPIPWuf050TTum4vsaKN4fuLtrZO1Vg8DqRClpJU9UBpdqOLT CM8hnoplp0HagQNu5KW9dvdpnqc08nBwDQFguh7W4cEZxkuU2r9zb+6mKYjxAvfm AzYfK7GZkEf8jtIbyUzxD2sgBnfcdXAOCUp7RzbFJxFi0iikzQuzHGKAeguHMGJd tvL4ev8C67sqJjePHbAAwho9GYfXrHGQsho/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4cX9a+s2NK7W5/cIqXvfV46LZccwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxLzRjWDlhLXMyTks3VzVfY0lxWHZmVjQ2TFpjYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOvb3gwDQYJKoZIhvcNAQELBQADggEB ADnvE6/SjkZCApAuQixR8aljSrD2XgHXNtawrO/+bh2rIlO2UMCugaO44YqZoYAq q8N86QIKSjLCJAt/iOruN1wUFmPare9pgmHXtvN5pEQvjg25uF0PrBVfZd2eSxkF jLMmUomkuPOR/SHbCj2etaXL7t/Xb0DZ/+aNGo3nb1Wt9xJ8G9zhP9jIj/pLxLXJ B/W8yRXjo234MZClQxFkiXLzPboKlabBER45xEiYCJAkPx+7jSChXsz6Sl9CPLMT pFojxpApU9KncadLeMhrrLy0xWXirQkMmllmwCHGWlNY0QsmMhfiL9MytEmylDgM 9slF9YIOqWHhBZMuNrnriKU= -----END CERTIFICATE-----Generated at Mon Apr 6 15:40:14 2026 by rpki-client