$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NMOjmsP0MsCwlV_FGayZP0Dl3TA.roa File: NMOjmsP0MsCwlV_FGayZP0Dl3TA.roa (raw, json) Hash identifier: SJm2pQ/g0xYPpE4rzQ3ezl8wHexislryQYVgDnap1Y8= Subject key identifier: 34:C3:A3:9A:C3:F4:32:C0:B0:95:5F:C5:19:AC:99:3F:40:E5:DD:30 Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Certificate serial: 7F Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NMOjmsP0MsCwlV_FGayZP0Dl3TA.roa Signing time: Tue 31 Mar 2026 07:30:15 +0000 ROA not before: Tue 31 Mar 2026 07:30:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7671 IP address blocks: 122.100.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8 Validity Not Before: Mar 31 07:30:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=34C3A39AC3F432C0B0955FC519AC993F40E5DD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:30:f3:dc:85:0b:83:8a:6d:46:4b:51:de: b1:07:16:44:16:1d:ce:ba:2d:ea:06:55:64:0c:73: 4e:39:e0:c7:fb:26:0e:46:c9:4a:8f:c8:a2:54:a7: 5c:a8:94:bc:93:65:2d:42:db:ca:77:3f:c9:42:ac: e6:37:1f:4a:49:66:e4:e9:a8:f4:65:a5:cb:11:e3: 98:3a:9a:93:3d:88:2a:21:73:23:6e:fc:a7:61:5c: ad:31:2c:d1:70:33:5f:c2:e5:b4:42:ea:cf:2d:58: 71:f3:bd:0c:9f:37:27:75:45:4f:4c:98:88:e2:cb: d5:e6:86:4f:47:b1:dc:19:a0:6a:13:01:2d:51:8b: 48:7d:3f:ef:6a:12:87:17:a1:f5:1f:f3:81:67:a7: ec:8d:f6:c5:b4:d1:36:44:79:bd:4a:50:19:0d:bf: 40:50:ad:db:fd:61:1d:98:23:ca:ac:b8:49:27:26: 65:ff:42:ef:82:29:cc:c7:2e:44:65:e4:b0:3a:16: 4f:92:3d:fb:3a:e6:6c:a4:e8:48:b0:46:f8:97:16: eb:38:98:8c:89:f2:17:8d:c0:eb:a0:2c:e8:a9:fe: a5:ec:5a:7b:a7:58:a0:48:fe:bb:37:4a:0d:4e:c3: 2f:6c:17:b5:23:a7:0c:f8:17:04:99:ff:3c:d6:1a: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C3:A3:9A:C3:F4:32:C0:B0:95:5F:C5:19:AC:99:3F:40:E5:DD:30 X509v3 Authority Key Identifier: keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/NMOjmsP0MsCwlV_FGayZP0Dl3TA.roa sbgp-ipAddrBlock: critical IPv4: 122.100.16.0/21 Signature Algorithm: sha256WithRSAEncryption 61:0d:cd:d7:c9:0f:6d:90:d9:94:8d:a3:c7:7a:52:73:c5:8c: 6e:71:85:78:88:f6:11:da:f9:de:40:f4:cc:c5:39:76:57:df: 72:62:dc:f0:a7:1b:2a:fb:5d:fd:1f:62:31:8e:4c:82:7d:45: 91:58:ec:11:51:08:d8:0c:14:e7:85:44:05:6f:2e:d8:1b:d6: 2e:3b:51:b7:9a:6e:84:7c:ca:e2:ed:7b:f1:2f:5e:35:e2:a1: e4:0f:a4:6a:02:2c:55:35:98:8b:1a:6f:0f:64:e9:6f:5e:59: 54:50:80:f5:63:72:a8:ae:81:78:65:ac:48:25:f6:81:46:b5: ad:7f:fc:11:cd:8a:d4:80:00:17:c2:8d:ad:83:4d:0f:dd:94: 9d:34:c2:5f:81:06:3b:e1:2e:a8:52:ee:56:04:16:a0:b5:0b: ed:46:86:e5:5a:6c:90:41:40:d7:ab:54:5d:c2:b1:4c:19:c5: e3:6a:2b:04:35:66:dd:1d:9a:f0:e9:91:e7:f0:b5:1c:76:f9: 11:a4:ed:7d:82:b2:9d:ba:f1:c5:46:cc:1b:28:90:c9:91:50: 57:c5:c9:7e:a4:24:20:1a:66:dc:af:fa:3e:4e:1a:65:12:25: e9:07:ce:cc:49:e0:de:a4:86:0a:83:67:56:c1:9f:9e:a9:61: 49:46:f1:db -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI2MDMzMTA3 MzAxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRDM0EzOUFDM0Y0MzJD MEIwOTU1RkM1MTlBQzk5M0Y0MEU1REQzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANljMPPchQuDim1GS1HesQcWRBYdzrot6gZVZAxzTjngx/smDkbJ So/IolSnXKiUvJNlLULbync/yUKs5jcfSklm5Omo9GWlyxHjmDqakz2IKiFzI278 p2FcrTEs0XAzX8LltELqzy1YcfO9DJ83J3VFT0yYiOLL1eaGT0ex3BmgahMBLVGL SH0/72oShxeh9R/zgWen7I32xbTRNkR5vUpQGQ2/QFCt2/1hHZgjyqy4SScmZf9C 74IpzMcuRGXksDoWT5I9+zrmbKToSLBG+JcW6ziYjInyF43A66As6Kn+pexae6dY oEj+uzdKDU7DL2wXtSOnDPgXBJn/PNYakK8CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQ0w6Oaw/QywLCVX8UZrJk/QOXdMDAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwNjk5L05NT2ptc1AwTXNDd2xWX0ZHYXlaUDBEbDNUQS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6ZBAwDQYJKoZIhvcNAQELBQAD ggEBAGENzdfJD22Q2ZSNo8d6UnPFjG5xhXiI9hHa+d5A9MzFOXZX33Ji3PCnGyr7 Xf0fYjGOTIJ9RZFY7BFRCNgMFOeFRAVvLtgb1i47UbeaboR8yuLte/EvXjXioeQP pGoCLFU1mIsabw9k6W9eWVRQgPVjcqiugXhlrEgl9oFGta1//BHNitSAABfCja2D TQ/dlJ00wl+BBjvhLqhS7lYEFqC1C+1GhuVabJBBQNerVF3CsUwZxeNqKwQ1Zt0d mvDpkefwtRx2+RGk7X2Csp268cVGzBsokMmRUFfFyX6kJCAaZtyv+j5OGmUSJekH zsxJ4N6khgqDZ1bBn56pYUlG8ds= -----END CERTIFICATE-----Generated at Fri Apr 17 05:53:23 2026 by rpki-client