$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/JBdCgQEBjYDf3YbAmT_NkcfJ890.roa File: JBdCgQEBjYDf3YbAmT_NkcfJ890.roa (raw, json) Hash identifier: 0ERdQklraGIF8tA3cR0xIgquvRa0TVQleVRotF9ZsHo= Subject key identifier: 24:17:42:81:01:01:8D:80:DF:DD:86:C0:99:3F:CD:91:C7:C9:F3:DD Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 75 Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/JBdCgQEBjYDf3YbAmT_NkcfJ890.roa Signing time: Tue 31 Mar 2026 07:37:45 +0000 ROA not before: Tue 31 Mar 2026 07:37:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 32787 IP address blocks: 103.28.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Mar 31 07:37:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2417428101018D80DFDD86C0993FCD91C7C9F3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:04:66:8c:19:f9:49:bf:6f:21:5b:eb:c0: 5c:bb:1e:bf:0b:a3:24:78:6b:c1:be:fc:67:c2:e5: 13:8b:b3:e5:44:d8:90:f6:15:d8:b6:4e:ef:1e:76: 9e:93:de:6c:84:1c:38:6e:e8:7c:9f:4e:a7:d2:4f: 7d:76:c8:0f:75:f1:8d:33:78:08:41:ce:79:48:27: cf:2d:a7:05:5b:93:67:65:f4:dc:7c:28:30:32:7b: 7c:a5:08:86:dc:36:8c:1d:46:37:d4:1d:1f:7a:db: e8:0f:45:c4:6f:ba:41:0e:69:7f:7d:fd:6b:63:e0: 08:e3:94:c8:71:58:1d:a6:e0:7f:a7:1c:2e:23:e4: 08:e6:75:3c:4b:3b:88:31:a3:91:9c:28:ce:6e:85: f5:9e:40:11:74:29:19:fc:8f:25:57:23:a6:cf:59: 35:49:67:1e:ae:87:49:7b:ff:53:71:3a:45:af:e9: fd:2d:70:e4:98:a3:cd:6a:83:c2:b1:b9:e0:5c:04: 2a:71:00:e5:8c:38:f3:25:b3:20:00:fe:dc:e5:f7: 54:e9:6c:6b:67:25:ee:3a:b7:79:9a:20:98:63:72: 56:e6:d9:f0:70:9b:1e:d3:74:87:99:5b:60:67:66: 64:c2:f1:5e:64:69:ef:0a:b3:bc:60:7a:2f:72:ab: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:17:42:81:01:01:8D:80:DF:DD:86:C0:99:3F:CD:91:C7:C9:F3:DD X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/JBdCgQEBjYDf3YbAmT_NkcfJ890.roa sbgp-ipAddrBlock: critical IPv4: 103.28.24.0/24 Signature Algorithm: sha256WithRSAEncryption 11:51:d2:6d:96:d5:1a:ed:a5:92:02:c9:6e:de:58:e5:f7:18: d5:1a:2f:0f:43:7f:7f:4b:fe:49:fc:33:1b:8d:6b:e4:28:9f: c3:5f:e3:45:f5:94:7c:61:61:15:f4:78:87:f1:89:a6:7b:c7: 17:7e:47:aa:73:b6:35:00:5a:ff:4d:55:07:22:46:b1:84:19: 5e:8f:f9:46:91:46:14:9c:be:e0:e9:6a:66:58:82:3d:3c:f9: 57:05:d2:17:5b:4b:cc:fe:84:43:e6:2b:1e:4a:96:cf:21:d2: ae:fe:15:27:d3:07:25:51:c3:a3:c6:26:f5:0a:c2:62:8d:e7: c0:df:ce:80:a3:36:a5:84:b1:db:a9:c9:8e:da:2b:af:4a:82: 2d:64:b5:9e:20:bb:62:79:a2:0e:17:e9:1a:aa:c7:4f:48:a5: 7c:3f:08:a4:55:77:31:e5:a2:bd:fa:1e:40:5c:93:f2:77:a7: a9:60:a2:88:fa:ff:71:8e:49:bc:c7:90:0f:b2:82:9f:78:65: 42:d1:ba:07:ab:f9:56:01:04:21:37:6d:0a:04:42:d9:48:45: 6b:82:3c:6f:8a:8d:1a:6f:fa:82:73:18:73:22:71:29:26:5a: 8e:0d:a9:f7:98:e6:63:22:cc:7d:74:7d:31:cf:e2:27:86:de: ed:68:1c:2b -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI2MDMzMTA3 Mzc0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjQxNzQyODEwMTAxOEQ4 MERGREQ4NkMwOTkzRkNEOTFDN0M5RjNERDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALvQBGaMGflJv28hW+vAXLsevwujJHhrwb78Z8LlE4uz5UTYkPYV 2LZO7x52npPebIQcOG7ofJ9Op9JPfXbID3XxjTN4CEHOeUgnzy2nBVuTZ2X03Hwo MDJ7fKUIhtw2jB1GN9QdH3rb6A9FxG+6QQ5pf339a2PgCOOUyHFYHabgf6ccLiPk COZ1PEs7iDGjkZwozm6F9Z5AEXQpGfyPJVcjps9ZNUlnHq6HSXv/U3E6Ra/p/S1w 5JijzWqDwrG54FwEKnEA5Yw48yWzIAD+3OX3VOlsa2cl7jq3eZogmGNyVubZ8HCb HtN0h5lbYGdmZMLxXmRp7wqzvGB6L3KrVukCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQkF0KBAQGNgN/dhsCZP82Rx8nz3TAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwNjAyL0pCZENnUUVCallEZjNZYkFtVF9Oa2NmSjg5MC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHBgwDQYJKoZIhvcNAQELBQAD ggEBABFR0m2W1RrtpZICyW7eWOX3GNUaLw9Df39L/kn8MxuNa+Qon8Nf40X1lHxh YRX0eIfxiaZ7xxd+R6pztjUAWv9NVQciRrGEGV6P+UaRRhScvuDpamZYgj08+VcF 0hdbS8z+hEPmKx5Kls8h0q7+FSfTByVRw6PGJvUKwmKN58DfzoCjNqWEsdupyY7a K69Kgi1ktZ4gu2J5og4X6Rqqx09IpXw/CKRVdzHlor36HkBck/J3p6lgooj6/3GO SbzHkA+ygp94ZULRuger+VYBBCE3bQoEQtlIRWuCPG+KjRpv+oJzGHMicSkmWo4N qfeY5mMizH10fTHP4ieG3u1oHCs= -----END CERTIFICATE-----Generated at Fri Apr 17 04:33:37 2026 by rpki-client