$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2CGhvXZm5T87m5DoEpvOGgaH114.roa File: 2CGhvXZm5T87m5DoEpvOGgaH114.roa (raw, json) Hash identifier: xRXPx+QEXZP/yTR+3TcRkTJ9MGgIr4KMoYmCwOlsJnY= Subject key identifier: D8:21:A1:BD:76:66:E5:3F:3B:9B:90:E8:12:9B:CE:1A:06:87:D7:5E Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0296 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2CGhvXZm5T87m5DoEpvOGgaH114.roa Signing time: Tue 31 Mar 2026 07:34:24 +0000 ROA not before: Tue 31 Mar 2026 07:34:24 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9371 IP address blocks: 182.163.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Mar 31 07:34:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D821A1BD7666E53F3B9B90E8129BCE1A0687D75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:35:57:0c:f7:6e:96:f2:bf:bd:56:ef:27: d0:f6:2d:da:e3:a7:b3:5c:66:08:58:b0:ba:a6:a5: 40:bd:3d:ef:e1:6d:8f:88:ef:7c:ce:f6:85:98:6d: 97:d8:26:65:99:6f:4d:6a:06:3c:07:1d:68:20:7f: 5b:1f:12:56:4a:76:c8:1e:a1:bb:82:58:a9:d2:82: e9:c7:0d:a8:17:98:23:24:fc:20:b5:53:5f:22:30: ba:cc:73:d1:ee:d3:70:07:c1:4a:44:e4:f8:0f:71: 05:e3:17:b3:d7:5d:d9:18:97:43:40:4c:c3:37:0b: 18:49:0d:0c:c1:57:f7:37:19:19:b9:21:d6:82:ab: 6d:72:d8:2c:47:aa:61:5e:6f:a3:ef:d8:89:ad:84: 6a:9b:9b:3c:2d:8d:92:91:2b:00:e2:e4:90:9d:0e: 4f:cf:8b:b0:80:e9:3b:a5:f9:ac:1e:dd:a4:0a:bc: b8:8d:40:a4:9d:a5:45:a3:ca:66:a2:67:2f:5b:d9: 1f:a0:34:3c:8f:27:0c:cc:8f:7f:92:c9:7e:80:ea: f1:ac:22:ac:92:13:91:41:33:5a:df:f3:3d:b7:cb: 59:33:27:e8:f3:a7:0b:19:45:ae:f3:e6:09:22:8c: 60:dc:f2:57:68:e6:a5:19:bf:1d:c7:04:c5:29:1a: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:A1:BD:76:66:E5:3F:3B:9B:90:E8:12:9B:CE:1A:06:87:D7:5E X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2CGhvXZm5T87m5DoEpvOGgaH114.roa sbgp-ipAddrBlock: critical IPv4: 182.163.0.0/19 Signature Algorithm: sha256WithRSAEncryption c7:02:cf:1a:af:7f:6f:bf:07:51:e8:ff:87:dd:52:1e:89:c8: 87:87:21:59:a6:73:14:ce:7c:33:2c:f1:8a:21:af:af:f2:a1: 98:7f:97:8a:54:ae:06:b1:dd:6c:ef:4c:41:a0:b0:b1:88:49: d3:ed:cb:43:1d:96:de:6b:e4:5d:68:e4:fa:a8:50:ea:a0:89: 65:7d:ed:fe:e8:0c:b4:37:63:5d:70:0b:21:89:5a:a3:9f:42: 1e:21:cc:a7:42:a4:25:07:55:c7:93:e4:f1:f6:f2:9b:53:c6: ec:41:31:7a:a0:cb:75:80:42:a5:7e:21:1d:44:06:db:0d:66: 51:d2:47:1f:dc:cf:c4:3b:41:12:76:97:a7:9c:42:ec:dd:f4: 14:35:df:62:52:ce:12:bf:d6:79:15:12:ab:e7:e3:8c:13:28: 97:c5:8b:c5:9b:ef:90:f9:93:c8:b1:65:3e:eb:0c:a7:d9:13: 60:4e:dc:8e:85:b7:f4:16:12:26:9c:22:63:88:47:3b:ef:7b: 39:7d:5b:85:10:3a:e3:87:f8:ca:a4:dc:08:c4:c9:76:93:ab: 11:13:79:7f:6f:bb:ce:77:ab:7d:19:b3:1c:a2:21:04:d9:c6: 0a:99:e9:21:05:52:3c:e9:d4:99:6e:09:85:fb:78:76:37:20: 72:04:9a:19 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICApYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw NzM0MjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4MjFBMUJENzY2NkU1 M0YzQjlCOTBFODEyOUJDRTFBMDY4N0Q3NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZhDVXDPdulvK/vVbvJ9D2Ldrjp7NcZghYsLqmpUC9Pe/hbY+I 73zO9oWYbZfYJmWZb01qBjwHHWggf1sfElZKdsgeobuCWKnSgunHDagXmCMk/CC1 U18iMLrMc9Hu03AHwUpE5PgPcQXjF7PXXdkYl0NATMM3CxhJDQzBV/c3GRm5IdaC q21y2CxHqmFeb6Pv2ImthGqbmzwtjZKRKwDi5JCdDk/Pi7CA6Tul+awe3aQKvLiN QKSdpUWjymaiZy9b2R+gNDyPJwzMj3+SyX6A6vGsIqySE5FBM1rf8z23y1kzJ+jz pwsZRa7z5gkijGDc8ldo5qUZvx3HBMUpGmIpAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU2CGhvXZm5T87m5DoEpvOGgaH114wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDI0Ny8yQ0dodlhabTVUODdtNURvRXB2T0dnYUgxMTQucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFtqMAMA0GCSqGSIb3DQEBCwUA A4IBAQDHAs8ar39vvwdR6P+H3VIeiciHhyFZpnMUznwzLPGKIa+v8qGYf5eKVK4G sd1s70xBoLCxiEnT7ctDHZbea+RdaOT6qFDqoIllfe3+6Ay0N2NdcAshiVqjn0Ie IcynQqQlB1XHk+Tx9vKbU8bsQTF6oMt1gEKlfiEdRAbbDWZR0kcf3M/EO0ESdpen nELs3fQUNd9iUs4Sv9Z5FRKr5+OMEyiXxYvFm++Q+ZPIsWU+6wyn2RNgTtyOhbf0 FhImnCJjiEc773s5fVuFEDrjh/jKpNwIxMl2k6sRE3l/b7vOd6t9GbMcoiEE2cYK mekhBVI86dSZbgmF+3h2NyByBJoZ -----END CERTIFICATE-----Generated at Sun Apr 19 10:11:00 2026 by rpki-client