$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CUc8i7oAyKW8teCVg5RByLe0uWo.roa File: CUc8i7oAyKW8teCVg5RByLe0uWo.roa (raw, json) Hash identifier: tbL44lu5FfpEgobt038ElL6mv9o8XSamVudd08FHPAo= Subject key identifier: 09:47:3C:8B:BA:00:C8:A5:BC:B5:E0:95:83:94:41:C8:B7:B4:B9:6A Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 02CB Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CUc8i7oAyKW8teCVg5RByLe0uWo.roa Signing time: Tue 31 Mar 2026 07:34:48 +0000 ROA not before: Tue 31 Mar 2026 07:34:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 112.78.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Mar 31 07:34:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=09473C8BBA00C8A5BCB5E095839441C8B7B4B96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:8b:03:31:ec:a6:c3:d0:62:37:2c:f4:a7: 2e:05:ad:d9:6e:c4:8c:64:f6:7e:6c:b6:b2:ef:7c: 57:82:ba:9b:f7:ef:03:99:50:98:e6:7c:f5:42:0d: 53:cf:65:3e:4e:43:15:79:ac:6c:74:ff:5c:4d:11: 01:10:f9:8c:03:1c:9e:de:98:fa:ab:0d:95:6b:d2: 71:d3:f0:e1:46:b3:56:de:e4:21:73:1a:7a:70:37: 1a:1d:19:d6:42:6e:70:89:d2:1b:17:fc:1b:3c:93: 7a:73:f1:ab:8e:d8:41:be:ba:a9:eb:fd:7a:51:7f: b7:9a:b0:49:db:78:d4:0f:a8:e7:49:16:16:64:e6: b0:0c:14:a8:e8:5f:32:54:bf:dd:c5:3d:93:80:70: 97:08:48:44:20:7a:05:02:5d:d7:38:b7:ad:da:6e: db:51:6d:98:24:63:c3:2b:f1:85:9b:f4:11:26:f4: 89:09:1b:e6:eb:73:d3:ed:ea:4c:de:7a:d5:30:84: 48:29:44:03:be:8e:6d:ab:74:c2:14:f7:83:61:1b: 23:31:30:f5:71:07:39:52:ab:ed:e6:02:71:68:80: a1:93:b4:8f:82:30:b2:de:8a:9d:e8:b1:64:47:76: d7:19:e2:f3:4b:c3:78:d9:a4:c0:b3:66:93:af:55: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:47:3C:8B:BA:00:C8:A5:BC:B5:E0:95:83:94:41:C8:B7:B4:B9:6A X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/CUc8i7oAyKW8teCVg5RByLe0uWo.roa sbgp-ipAddrBlock: critical IPv4: 112.78.220.0/24 Signature Algorithm: sha256WithRSAEncryption 65:cc:88:bf:ed:88:42:bf:10:25:7b:3e:84:8c:74:f3:42:68: dd:ee:cb:be:8e:3e:04:c3:5d:db:d9:fe:73:8f:4d:c4:e9:31: 94:25:1d:aa:64:f8:37:ce:79:0b:98:af:3a:27:6b:ea:06:84: d5:15:dc:b2:96:a5:5f:fc:62:c2:cf:43:72:5d:ff:96:0a:31: d1:d3:10:d7:72:5e:05:16:69:52:7c:a0:8b:a1:bd:89:f8:6e: 91:59:0e:29:9f:4a:b4:6f:1e:15:70:33:0c:21:14:6c:c7:3d: ec:84:43:48:00:70:61:79:7f:73:56:35:2e:94:37:fb:9a:85: d0:98:1d:75:46:5c:3f:42:17:c4:8e:d2:06:ab:62:6e:67:99: 19:82:ff:08:25:62:80:e5:e8:56:e7:ce:cd:8c:e7:5a:17:31: d4:55:7b:17:4c:99:07:1a:d2:5a:b0:e8:63:fd:d0:03:ea:9c: 79:5a:0f:b7:3d:e8:fc:b6:b1:a3:dc:0d:d2:45:df:c9:d5:c8: e9:e0:6e:22:38:12:57:c0:79:8a:c3:3d:f6:5b:d2:e0:d2:dc: 45:cd:34:54:4e:14:1c:8e:b7:68:27:17:fe:49:67:29:f1:95: 15:0e:16:e7:a8:75:f3:3e:e3:2d:86:0b:cc:8c:89:cd:6e:6a: 90:8f:6d:35 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw NzM0NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5NDczQzhCQkEwMEM4 QTVCQ0I1RTA5NTgzOTQ0MUM4QjdCNEI5NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLl4sDMeymw9BiNyz0py4FrdluxIxk9n5strLvfFeCupv37wOZ UJjmfPVCDVPPZT5OQxV5rGx0/1xNEQEQ+YwDHJ7emPqrDZVr0nHT8OFGs1be5CFz GnpwNxodGdZCbnCJ0hsX/Bs8k3pz8auO2EG+uqnr/XpRf7easEnbeNQPqOdJFhZk 5rAMFKjoXzJUv93FPZOAcJcISEQgegUCXdc4t63abttRbZgkY8Mr8YWb9BEm9IkJ G+brc9Pt6kzeetUwhEgpRAO+jm2rdMIU94NhGyMxMPVxBzlSq+3mAnFogKGTtI+C MLLeip3osWRHdtcZ4vNLw3jZpMCzZpOvVcIxAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUCUc8i7oAyKW8teCVg5RByLe0uWowHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDI0Ny9DVWM4aTdvQXlLVzh0ZUNWZzVSQnlMZTB1V28ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcE7cMA0GCSqGSIb3DQEBCwUA A4IBAQBlzIi/7YhCvxAlez6EjHTzQmjd7su+jj4Ew13b2f5zj03E6TGUJR2qZPg3 znkLmK86J2vqBoTVFdyylqVf/GLCz0NyXf+WCjHR0xDXcl4FFmlSfKCLob2J+G6R WQ4pn0q0bx4VcDMMIRRsxz3shENIAHBheX9zVjUulDf7moXQmB11Rlw/QhfEjtIG q2JuZ5kZgv8IJWKA5ehW587NjOdaFzHUVXsXTJkHGtJasOhj/dAD6px5Wg+3Pej8 trGj3A3SRd/J1cjp4G4iOBJXwHmKwz32W9Lg0txFzTRUThQcjrdoJxf+SWcp8ZUV DhbnqHXzPuMthgvMjInNbmqQj201 -----END CERTIFICATE-----Generated at Fri Apr 17 05:57:43 2026 by rpki-client