$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hXIrB97VX7MjIDHO-dch_DCwxoQ.roa File: hXIrB97VX7MjIDHO-dch_DCwxoQ.roa (raw, json) Hash identifier: 5N+zTnHjVcWztULgTHSh5F1xPIkDlc4NCAyLRnXctXQ= Subject key identifier: 85:72:2B:07:DE:D5:5F:B3:23:20:31:CE:F9:D7:21:FC:30:B0:C6:84 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0432 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hXIrB97VX7MjIDHO-dch_DCwxoQ.roa Signing time: Tue 31 Mar 2026 08:11:59 +0000 ROA not before: Tue 31 Mar 2026 08:11:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18134 IP address blocks: 202.57.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:11:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=85722B07DED55FB3232031CEF9D721FC30B0C684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:39:84:d2:66:b4:23:9c:1e:01:7f:a9:95:c3: 28:f9:ac:7f:d4:59:0e:17:77:cf:70:d1:e3:fc:d9: 12:54:c6:1e:05:d1:b9:95:f4:87:5f:86:dc:1b:29: ad:95:42:fe:2f:30:40:d0:07:09:f3:48:65:7e:6f: 87:cc:fe:9b:23:01:14:55:18:a9:a7:1a:f0:c7:07: b4:cc:68:85:d8:03:fe:08:26:1d:96:50:a0:70:87: af:67:a5:a4:39:ce:6b:87:c5:84:c1:0d:04:ca:04: 2d:df:d9:34:fd:94:1b:9a:a1:8d:73:0c:7a:d4:10: de:85:d2:98:0c:a8:fb:86:7c:3f:e6:d4:bb:f4:bd: 45:30:2d:73:27:1f:a8:73:0e:61:da:79:c5:44:de: b1:d6:d9:1f:78:f9:17:d2:b7:ec:f1:bc:c2:4d:0e: 23:19:d7:c3:d6:f1:03:88:e2:96:0d:a6:90:86:09: c7:97:d8:13:4b:d2:c3:ac:ea:05:cc:b5:99:af:81: 5e:42:72:d8:0d:5b:c2:cc:34:08:f5:99:1a:79:bf: 17:73:da:39:0f:39:15:92:d1:02:f2:35:2d:da:fb: e7:57:09:6b:04:86:e9:a9:eb:36:9b:b5:2c:5c:2c: 0a:e1:92:2b:39:64:83:7a:ef:09:8f:5e:8f:94:65: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:2B:07:DE:D5:5F:B3:23:20:31:CE:F9:D7:21:FC:30:B0:C6:84 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hXIrB97VX7MjIDHO-dch_DCwxoQ.roa sbgp-ipAddrBlock: critical IPv4: 202.57.224.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:5e:8e:ae:f5:85:59:01:3b:10:73:66:2b:5e:af:c2:da:1b: 30:78:a5:5a:8e:88:ad:3f:e8:74:57:c2:28:a2:32:c0:d0:6a: 91:09:53:3d:d6:94:1f:5a:77:e7:d0:d7:eb:64:40:37:54:39: 4c:0d:96:9c:f7:58:ba:03:4b:4f:1b:cc:25:37:94:0b:3f:1b: ba:0d:6a:79:47:00:5d:c0:8d:80:dc:da:e9:80:79:62:cb:fb: fd:46:70:5c:99:ac:ca:24:ea:b5:36:17:61:f7:5c:cb:1c:02: 78:47:b2:0f:70:aa:f0:8f:7c:5b:12:52:fb:86:be:c5:b7:dc: 30:c7:79:35:cc:b8:c2:ee:bf:71:f4:ce:c3:3c:01:f6:14:9b: 9a:7c:0b:19:a3:7a:1b:2c:5a:4e:65:b3:cc:42:4d:8b:fe:64: f5:36:16:22:2d:99:09:b8:91:f6:f3:18:c0:a2:ac:8f:d4:5b: f0:a9:f2:0b:38:c1:84:71:f7:8f:27:f7:9b:6d:55:9a:72:39: 57:82:1c:14:9e:fa:c1:51:f6:48:dc:87:9e:25:6b:ad:96:61: d4:ad:16:24:36:89:ba:d8:e4:79:30:e3:62:14:b3:f3:19:20: bf:6b:23:e2:c8:e7:4b:03:d0:08:05:07:77:52:3e:29:b5:ff: 32:62:f1:27 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODExNTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1NzIyQjA3REVENTVG QjMyMzIwMzFDRUY5RDcyMUZDMzBCMEM2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyOYTSZrQjnB4Bf6mVwyj5rH/UWQ4Xd89w0eP82RJUxh4F0bmV 9IdfhtwbKa2VQv4vMEDQBwnzSGV+b4fM/psjARRVGKmnGvDHB7TMaIXYA/4IJh2W UKBwh69npaQ5zmuHxYTBDQTKBC3f2TT9lBuaoY1zDHrUEN6F0pgMqPuGfD/m1Lv0 vUUwLXMnH6hzDmHaecVE3rHW2R94+RfSt+zxvMJNDiMZ18PW8QOI4pYNppCGCceX 2BNL0sOs6gXMtZmvgV5CctgNW8LMNAj1mRp5vxdz2jkPORWS0QLyNS3a++dXCWsE hump6zabtSxcLArhkis5ZIN67wmPXo+UZcSnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhXIrB97VX7MjIDHO+dch/DCwxoQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL2hYSXJCOTdWWDdNaklESE8tZGNoX0RDd3hvUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKOeAwDQYJKoZIhvcNAQELBQADggEB AG9ejq71hVkBOxBzZiter8LaGzB4pVqOiK0/6HRXwiiiMsDQapEJUz3WlB9ad+fQ 1+tkQDdUOUwNlpz3WLoDS08bzCU3lAs/G7oNanlHAF3AjYDc2umAeWLL+/1GcFyZ rMok6rU2F2H3XMscAnhHsg9wqvCPfFsSUvuGvsW33DDHeTXMuMLuv3H0zsM8AfYU m5p8CxmjehssWk5ls8xCTYv+ZPU2FiItmQm4kfbzGMCirI/UW/Cp8gs4wYRx948n 95ttVZpyOVeCHBSe+sFR9kjch54la62WYdStFiQ2ibrY5Hkw42IUs/MZIL9rI+LI 50sD0AgFB3dSPim1/zJi8Sc= -----END CERTIFICATE-----Generated at Mon Apr 6 15:39:48 2026 by rpki-client