$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FwtqUWDFk5wc-9CEudCHqtY7kfY.roa File: FwtqUWDFk5wc-9CEudCHqtY7kfY.roa (raw, json) Hash identifier: NE2puwf9YwFsRKGrwVuZ1R7RDfnXojTvFB7KpZVMHLQ= Subject key identifier: 17:0B:6A:51:60:C5:93:9C:1C:FB:D0:84:B9:D0:87:AA:D6:3B:91:F6 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0298 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FwtqUWDFk5wc-9CEudCHqtY7kfY.roa Signing time: Tue 31 Mar 2026 07:34:25 +0000 ROA not before: Tue 31 Mar 2026 07:34:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Mar 31 07:34:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=170B6A5160C5939C1CFBD084B9D087AAD63B91F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:d3:32:f8:9d:fe:04:39:5d:c4:1f:cf:2b: 80:9e:c0:ae:43:03:24:24:9f:c2:f2:3d:8e:19:21: 3f:f4:0a:ca:32:4e:e5:cb:a0:b3:40:02:34:17:28: 1d:66:fb:8b:6d:1c:b9:39:58:2f:b9:09:c9:75:3e: cb:1b:9b:3a:98:f8:ce:16:ea:a1:4a:ee:58:6d:95: 28:ce:ec:28:96:61:72:cd:b4:56:2a:88:59:0c:8d: 1c:f0:88:d0:41:6b:ee:d4:e8:f9:f8:48:5b:25:68: 4f:a4:fa:83:b2:e7:65:66:be:43:cc:b2:d3:be:cc: b5:c3:0a:3f:9a:88:40:e4:ab:78:8f:d5:fb:0c:e5: a2:25:05:19:eb:9b:ad:88:be:71:31:f7:40:a7:2d: 8f:76:f1:1c:62:dc:64:13:fd:4c:95:03:7b:6f:ed: 2f:85:56:e3:c3:bf:4b:01:ae:c2:64:79:05:69:cb: 92:ad:80:93:55:1f:76:5b:41:83:0f:24:ab:6a:a5: bc:26:d4:18:6b:40:73:dd:a6:2f:88:83:2e:5a:59: 10:e7:05:94:2b:24:aa:10:d2:e9:c9:92:19:1c:67: 6c:b8:ab:6a:0e:76:c5:d4:25:81:f7:49:5b:3b:a4: cf:e5:be:e2:f0:b6:df:5a:31:68:8e:b5:d9:f2:0c: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:6A:51:60:C5:93:9C:1C:FB:D0:84:B9:D0:87:AA:D6:3B:91:F6 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FwtqUWDFk5wc-9CEudCHqtY7kfY.roa sbgp-ipAddrBlock: critical IPv4: 49.212.121.0/24 Signature Algorithm: sha256WithRSAEncryption 23:5b:fa:1a:67:2c:03:53:05:9f:68:ae:75:71:7c:69:a4:07: 1d:0b:a3:c3:7b:ff:1a:fb:3e:08:ba:86:5b:ce:86:87:39:fe: bc:75:e3:0f:fc:b5:d4:68:34:7e:40:87:69:75:7b:ee:29:5d: d2:76:da:eb:74:4b:a8:1a:c5:42:e4:42:b5:5c:2a:56:ab:6b: 9a:d6:0b:8a:1d:d3:a2:39:1a:ce:79:f0:ac:cf:a2:48:54:65: 17:87:45:d0:a1:a7:ba:6c:97:bc:40:f0:0d:3c:98:86:9e:b4: bd:32:e8:f2:24:2b:4a:37:84:77:ba:fd:56:5e:35:95:76:33: 61:14:2c:95:1c:66:7a:88:d2:b6:80:7b:73:71:88:d0:f4:c5: 32:04:a2:2e:7e:cb:da:c4:36:f1:70:35:cc:9e:7e:f5:aa:cb: f3:5d:bc:e6:a9:46:b7:f6:9c:9f:2d:35:83:31:97:8c:ba:7c: 55:6b:df:c2:09:4d:53:5a:6d:1d:e9:7e:03:2d:f9:dd:46:cb: 72:a5:05:a4:48:47:26:6d:82:29:d9:a6:ca:af:9d:2b:29:44: 39:d7:44:43:e0:4c:36:e5:b1:76:5a:ae:67:38:74:f0:3b:a9: cd:0e:ae:ac:a5:71:8b:a3:2d:ab:81:f4:34:31:7a:8d:da:15: d9:47:95:20 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICApgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw NzM0MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3MEI2QTUxNjBDNTkz OUMxQ0ZCRDA4NEI5RDA4N0FBRDYzQjkxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAXdMy+J3+BDldxB/PK4CewK5DAyQkn8LyPY4ZIT/0CsoyTuXL oLNAAjQXKB1m+4ttHLk5WC+5Ccl1PssbmzqY+M4W6qFK7lhtlSjO7CiWYXLNtFYq iFkMjRzwiNBBa+7U6Pn4SFslaE+k+oOy52VmvkPMstO+zLXDCj+aiEDkq3iP1fsM 5aIlBRnrm62IvnEx90CnLY928Rxi3GQT/UyVA3tv7S+FVuPDv0sBrsJkeQVpy5Kt gJNVH3ZbQYMPJKtqpbwm1BhrQHPdpi+Igy5aWRDnBZQrJKoQ0unJkhkcZ2y4q2oO dsXUJYH3SVs7pM/lvuLwtt9aMWiOtdnyDLz9AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUFwtqUWDFk5wc+9CEudCHqtY7kfYwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDI0Ny9Gd3RxVVdERms1d2MtOUNFdWRDSHF0WTdrZlkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdR5MA0GCSqGSIb3DQEBCwUA A4IBAQAjW/oaZywDUwWfaK51cXxppAcdC6PDe/8a+z4IuoZbzoaHOf68deMP/LXU aDR+QIdpdXvuKV3SdtrrdEuoGsVC5EK1XCpWq2ua1guKHdOiORrOefCsz6JIVGUX h0XQoae6bJe8QPANPJiGnrS9MujyJCtKN4R3uv1WXjWVdjNhFCyVHGZ6iNK2gHtz cYjQ9MUyBKIufsvaxDbxcDXMnn71qsvzXbzmqUa39pyfLTWDMZeMunxVa9/CCU1T Wm0d6X4DLfndRstypQWkSEcmbYIp2abKr50rKUQ510RD4Ew25bF2Wq5nOHTwO6nN Dq6spXGLoy2rgfQ0MXqN2hXZR5Ug -----END CERTIFICATE-----Generated at Fri Apr 17 04:33:32 2026 by rpki-client