$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gjrLMPN7zI66axjuBwEy0qiaa_Q.roa File: gjrLMPN7zI66axjuBwEy0qiaa_Q.roa (raw, json) Hash identifier: KADJq2mlbvJ7h9LRbx9hqdBuqT9ItyaSLFtjtyHefTg= Subject key identifier: 82:3A:CB:30:F3:7B:CC:8E:BA:6B:18:EE:07:01:32:D2:A8:9A:6B:F4 Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: E5 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gjrLMPN7zI66axjuBwEy0qiaa_Q.roa Signing time: Tue 31 Mar 2026 07:31:30 +0000 ROA not before: Tue 31 Mar 2026 07:31:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18126 IP address blocks: 123.1.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Mar 31 07:31:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=823ACB30F37BCC8EBA6B18EE070132D2A89A6BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:c1:2a:f6:0e:0e:96:9c:c7:57:7e:f0:72: 89:87:54:8f:40:63:6d:ed:b0:4c:ad:bd:da:2c:b2: 17:fa:4f:d5:2e:c1:55:c5:60:24:02:6f:13:86:b9: 54:29:8d:df:52:00:07:78:17:90:7c:9b:c9:7e:7b: 03:f2:3c:66:33:f4:24:b4:3d:09:63:18:ad:37:10: c3:10:0a:d8:b3:c9:91:dd:4e:55:65:28:2e:cc:22: d2:fa:0f:d9:b6:44:a1:b1:83:d9:c8:0a:7d:55:37: fd:30:f5:99:f7:3e:65:49:3d:0a:60:f8:2a:a4:84: 5f:c1:40:3c:2c:85:02:6b:77:01:0a:69:27:d3:ec: 30:40:c5:39:ab:46:d3:3d:0c:94:0e:65:01:8b:5c: 48:4a:6d:8b:87:52:31:94:8f:ec:68:63:60:5c:0d: 46:b7:da:cf:f9:bb:0b:a2:ea:e4:69:0f:90:4e:4b: d1:e6:fd:0e:37:60:c8:8e:ea:d3:5d:48:69:f4:35: d2:4c:4f:e7:e6:63:cf:48:24:71:96:09:66:d9:e2: ad:df:44:8b:a6:26:12:85:c0:96:dd:00:8a:d1:94: 78:5b:94:42:fd:2b:a7:0f:06:1a:37:c9:98:ab:26: 70:f0:26:80:6e:66:78:2c:6c:93:c7:7f:d4:d9:1d: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:CB:30:F3:7B:CC:8E:BA:6B:18:EE:07:01:32:D2:A8:9A:6B:F4 X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/gjrLMPN7zI66axjuBwEy0qiaa_Q.roa sbgp-ipAddrBlock: critical IPv4: 123.1.0.0/17 Signature Algorithm: sha256WithRSAEncryption 57:ce:0d:35:fc:96:46:81:12:fc:9f:c8:57:4d:8b:38:b4:e3: 00:28:e4:2d:b4:d7:79:d3:36:cb:f4:3f:13:2e:09:e0:e1:f7: b1:04:20:0c:b1:a6:5a:cb:d7:b1:07:39:06:cb:95:2e:61:86: 76:6e:76:3c:0f:4b:c6:63:7e:9c:9e:b8:48:58:b3:b1:0b:dd: 7f:97:4d:67:37:40:83:e8:85:ab:f8:f0:e9:fa:20:2f:19:d5: 03:3c:b2:75:09:b9:aa:d1:89:9b:50:39:0c:c2:6a:8f:36:45: c5:b1:c3:24:b1:75:5f:84:85:79:a3:64:30:f7:f4:77:8b:ce: 50:11:15:47:f3:e5:8d:e3:f6:d8:8a:71:48:b6:a1:12:81:1d: 58:14:5d:1f:db:d1:c2:bb:5e:ed:43:68:c5:bc:c6:bb:5b:7d: db:02:98:3a:9c:3a:b3:e2:ed:6c:93:4d:0a:c4:c3:20:c6:31: 72:da:c6:ba:ba:92:06:5c:81:e2:f6:34:70:77:f0:7d:05:b0: bc:d3:a5:cc:45:22:d3:32:c9:f4:69:6d:9f:70:e2:dc:2d:07: 59:09:b8:24:39:9b:49:a9:0b:d9:62:df:01:39:8f:f5:e0:16: 39:81:01:82:33:09:2d:06:3a:27:ca:54:e5:40:90:2f:93:27: 5c:16:23:f2 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNjAzMzEw NzMxMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyM0FDQjMwRjM3QkND OEVCQTZCMThFRTA3MDEzMkQyQTg5QTZCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUz8Eq9g4OlpzHV37wcomHVI9AY23tsEytvdosshf6T9UuwVXF YCQCbxOGuVQpjd9SAAd4F5B8m8l+ewPyPGYz9CS0PQljGK03EMMQCtizyZHdTlVl KC7MItL6D9m2RKGxg9nICn1VN/0w9Zn3PmVJPQpg+CqkhF/BQDwshQJrdwEKaSfT 7DBAxTmrRtM9DJQOZQGLXEhKbYuHUjGUj+xoY2BcDUa32s/5uwui6uRpD5BOS9Hm /Q43YMiO6tNdSGn0NdJMT+fmY89IJHGWCWbZ4q3fRIumJhKFwJbdAIrRlHhblEL9 K6cPBho3yZirJnDwJoBuZngsbJPHf9TZHSHbAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUgjrLMPN7zI66axjuBwEy0qiaa/QwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDE3My9nanJMTVBON3pJNjZheGp1QndFeTBxaWFhX1Eucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHewEAMA0GCSqGSIb3DQEBCwUA A4IBAQBXzg01/JZGgRL8n8hXTYs4tOMAKOQttNd50zbL9D8TLgng4fexBCAMsaZa y9exBzkGy5UuYYZ2bnY8D0vGY36cnrhIWLOxC91/l01nN0CD6IWr+PDp+iAvGdUD PLJ1Cbmq0YmbUDkMwmqPNkXFscMksXVfhIV5o2Qw9/R3i85QERVH8+WN4/bYinFI tqESgR1YFF0f29HCu17tQ2jFvMa7W33bApg6nDqz4u1sk00KxMMgxjFy2sa6upIG XIHi9jRwd/B9BbC806XMRSLTMsn0aW2fcOLcLQdZCbgkOZtJqQvZYt8BOY/14BY5 gQGCMwktBjonylTlQJAvkydcFiPy -----END CERTIFICATE-----Generated at Fri Apr 17 17:42:50 2026 by rpki-client