$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VzIaQAHLFTjFlejcUm3K1y4fLeo.roa File: VzIaQAHLFTjFlejcUm3K1y4fLeo.roa (raw, json) Hash identifier: 5vTbzTwYXusJYNFcrUE/F3jO8ugflDCSJX5SqDWa040= Subject key identifier: 57:32:1A:40:01:CB:15:38:C5:95:E8:DC:52:6D:CA:D7:2E:1F:2D:EA Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0297 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VzIaQAHLFTjFlejcUm3K1y4fLeo.roa Signing time: Tue 31 Mar 2026 07:34:24 +0000 ROA not before: Tue 31 Mar 2026 07:34:24 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Mar 31 07:34:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=57321A4001CB1538C595E8DC526DCAD72E1F2DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:f4:d9:b2:42:7f:69:50:2c:ce:92:c5:79: 4c:6c:cd:96:de:1f:97:1f:07:37:38:de:99:67:1c: fe:6c:b6:29:8a:30:02:69:8a:bd:d2:0b:9f:d1:c9: 5f:72:3c:89:e9:0c:6d:15:7e:e2:32:24:c6:c9:fd: bc:cd:52:57:fc:6f:55:7f:21:ae:12:31:b1:40:90: fe:f6:d0:58:fc:31:ec:3c:b9:82:02:bf:2f:d1:02: b8:7c:4c:6d:bb:f8:71:97:f0:3b:c8:f7:a7:3b:fd: 08:8c:06:47:e0:4f:46:3b:6f:80:72:df:b0:6c:96: 88:20:f6:29:b2:5a:21:76:01:61:70:34:73:13:17: c4:4d:cb:33:ae:c1:37:b7:1f:1d:40:99:d6:82:9f: 86:e1:68:39:7c:64:10:98:1d:12:74:55:64:4c:ab: de:26:90:41:43:cf:10:91:c3:1b:7c:14:21:a2:94: 04:e2:b7:52:46:ca:d3:ae:b3:a8:65:f3:a0:c3:ce: 9c:71:96:40:44:45:e2:e3:79:13:0a:0c:8c:cf:22: 69:2b:e9:ca:38:42:55:a1:48:e1:af:77:cc:a3:c8: 3d:dc:01:25:65:2c:91:4c:88:b6:1d:fe:fc:84:97: 4f:47:7a:b3:2a:f3:d5:ef:43:b5:a8:9c:0b:35:e7: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:1A:40:01:CB:15:38:C5:95:E8:DC:52:6D:CA:D7:2E:1F:2D:EA X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VzIaQAHLFTjFlejcUm3K1y4fLeo.roa sbgp-ipAddrBlock: critical IPv4: 49.212.65.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:20:45:53:b4:03:dc:53:02:79:ac:8a:21:b1:ff:1e:44:37: a4:7a:07:51:2e:87:bf:b2:8d:13:dd:0b:b1:02:67:13:f1:b2: ec:b9:16:a4:bb:0d:04:2d:80:61:5d:d3:48:21:19:f6:35:db: 49:be:96:ef:6c:b4:f9:40:f8:6c:f3:d2:28:72:27:a5:55:21: 9b:5b:c0:e7:dd:2d:ec:42:fc:78:9c:6f:2b:96:55:ba:df:b8: ed:5f:e9:5e:d5:fe:d3:45:41:10:00:90:9c:7b:12:07:7f:0e: 02:6e:86:8c:2b:ed:af:6f:b0:0c:75:c4:d1:08:c5:89:3e:06: 1f:48:b7:55:88:13:f5:42:86:8e:db:19:96:12:ff:b2:9c:08: 7b:ee:7a:f4:3d:f8:b1:69:4f:51:43:10:da:a8:0d:bf:61:55: 13:b4:f0:72:e5:4b:c4:07:3b:6c:99:01:58:eb:0b:3d:b3:49: 50:fb:3c:c2:f2:df:b3:cb:76:6b:de:ff:04:58:d6:25:6e:34: 63:ee:de:2f:ac:95:16:f9:5a:cc:9b:53:54:9b:63:42:61:64: 9d:67:d5:85:4a:94:bf:e7:d6:76:a2:ed:43:9f:34:94:55:f3: 91:fc:85:81:b3:42:6e:95:e0:ca:41:fc:78:3b:19:cc:03:18: a6:7f:fa:38 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICApcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw NzM0MjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU3MzIxQTQwMDFDQjE1 MzhDNTk1RThEQzUyNkRDQUQ3MkUxRjJERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCndfTZskJ/aVAszpLFeUxszZbeH5cfBzc43plnHP5stimKMAJp ir3SC5/RyV9yPInpDG0VfuIyJMbJ/bzNUlf8b1V/Ia4SMbFAkP720Fj8Mew8uYIC vy/RArh8TG27+HGX8DvI96c7/QiMBkfgT0Y7b4By37Bslogg9imyWiF2AWFwNHMT F8RNyzOuwTe3Hx1AmdaCn4bhaDl8ZBCYHRJ0VWRMq94mkEFDzxCRwxt8FCGilATi t1JGytOus6hl86DDzpxxlkBEReLjeRMKDIzPImkr6co4QlWhSOGvd8yjyD3cASVl LJFMiLYd/vyEl09HerMq89XvQ7WonAs152WbAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUVzIaQAHLFTjFlejcUm3K1y4fLeowHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDI0Ny9WeklhUUFITEZUakZsZWpjVW0zSzF5NGZMZW8ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdRBMA0GCSqGSIb3DQEBCwUA A4IBAQB7IEVTtAPcUwJ5rIohsf8eRDekegdRLoe/so0T3QuxAmcT8bLsuRakuw0E LYBhXdNIIRn2NdtJvpbvbLT5QPhs89IocielVSGbW8Dn3S3sQvx4nG8rllW637jt X+le1f7TRUEQAJCcexIHfw4CboaMK+2vb7AMdcTRCMWJPgYfSLdViBP1QoaO2xmW Ev+ynAh77nr0PfixaU9RQxDaqA2/YVUTtPBy5UvEBztsmQFY6ws9s0lQ+zzC8t+z y3Zr3v8EWNYlbjRj7t4vrJUW+VrMm1NUm2NCYWSdZ9WFSpS/59Z2ou1DnzSUVfOR /IWBs0JuleDKQfx4OxnMAximf/o4 -----END CERTIFICATE-----Generated at Fri Apr 17 03:33:22 2026 by rpki-client