$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TFPqKMo1y9CKHBtV_P9cNK_f_7o.roa File: TFPqKMo1y9CKHBtV_P9cNK_f_7o.roa (raw, json) Hash identifier: X1wbm9qYqQP2cjZVwG1il/geEIyB7yC4fxtiOALBe78= Subject key identifier: 4C:53:EA:28:CA:35:CB:D0:8A:1C:1B:55:FC:FF:5C:34:AF:DF:FF:BA Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 89 Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TFPqKMo1y9CKHBtV_P9cNK_f_7o.roa Signing time: Tue 31 Mar 2026 07:35:14 +0000 ROA not before: Tue 31 Mar 2026 07:35:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 157.17.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Mar 31 07:35:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4C53EA28CA35CBD08A1C1B55FCFF5C34AFDFFFBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:07:3d:ca:9c:e4:a0:24:17:f6:39:3f:9a: 3a:e0:2d:98:a2:5e:77:20:f1:56:0f:7a:dd:1f:e8: ca:c9:e9:f4:4f:20:be:d3:2e:5a:76:30:64:eb:ac: 9f:63:73:80:0a:6b:0c:41:ff:ef:fb:c4:55:f3:ac: 0e:ba:97:8d:5f:c6:bd:f1:4d:3d:5b:03:2a:16:24: a8:ba:c7:41:31:20:87:98:f5:34:f8:f4:b1:ed:d5: 5e:bf:0a:f3:f9:7b:55:e0:ad:56:3c:2d:13:78:8d: 1c:55:a1:1d:d4:2c:67:38:12:ae:a7:a0:c5:b6:8d: a7:a3:fb:66:82:d8:37:a8:12:90:1f:e6:ef:38:df: b6:36:44:34:d6:6a:dc:60:45:41:02:4c:b0:84:a0: a5:f0:9a:5a:80:3a:6f:7b:28:42:6d:7d:86:94:e2: fb:e0:99:0b:a2:25:5e:7c:f0:90:c5:85:98:d1:55: bf:96:dd:6e:0d:24:76:20:b9:5b:d4:35:25:d9:2f: 25:56:d0:da:5b:c7:67:41:53:f8:c4:d2:95:56:95: 5e:a7:0e:6b:4a:74:42:69:9f:fb:e2:ab:a1:f4:0b: 36:70:11:67:c8:51:ef:b1:80:ac:07:fc:80:71:e5: 8b:80:a9:cc:2c:65:f6:26:d1:3b:d3:0a:50:89:c7: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:EA:28:CA:35:CB:D0:8A:1C:1B:55:FC:FF:5C:34:AF:DF:FF:BA X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TFPqKMo1y9CKHBtV_P9cNK_f_7o.roa sbgp-ipAddrBlock: critical IPv4: 157.17.84.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:56:6b:d2:71:ee:dd:43:a8:cf:d1:3c:e5:51:72:6b:c9:b9: c2:f9:63:de:55:8f:21:aa:81:b7:7d:b2:68:2c:e2:75:f1:e4: 4d:c9:7b:d9:9c:f3:ae:97:f2:24:71:2c:a9:a5:96:a9:57:f0: eb:9b:f6:7c:c4:99:19:bb:51:16:bf:c3:6c:ef:c7:ff:f0:8d: 7a:5b:93:9d:90:62:4c:7f:85:15:1f:bd:76:f7:d4:75:69:35: 1c:24:37:d4:24:dc:89:65:8b:29:96:68:f2:28:e8:b6:02:7e: d4:a9:a4:c8:ee:84:a6:76:d8:75:63:52:50:43:4a:b4:d4:9e: ae:a4:14:7b:15:8d:9e:9b:31:f8:c2:6f:04:47:5e:c7:4d:d0: 74:7d:10:02:dd:d7:71:f2:4a:bf:5b:e0:df:fb:33:c2:6c:44: 07:6d:45:10:bf:e9:a9:1b:09:ff:c1:07:42:07:6d:33:f8:1c: 04:dc:b9:98:10:2c:11:27:db:f6:c1:64:77:b7:2b:d7:f4:64: 23:3d:00:74:67:be:cf:31:dd:dd:b3:4e:96:a7:df:b5:2b:ba: fc:9c:40:9e:58:26:0f:d4:54:de:9a:84:51:d9:6c:fe:70:ad: f5:d0:4e:df:3e:66:f8:a7:e4:fe:02:2e:1c:9f:34:3f:a3:8d: ca:bc:e5:a8 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD NDYyOTRBNUQ1NjQzN0UxOUExMUFFRjlGQjlCODc3NjkwMTQzRTAeFw0yNjAzMzEw NzM1MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDNTNFQTI4Q0EzNUNC RDA4QTFDMUI1NUZDRkY1QzM0QUZERkZGQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6IQc9ypzkoCQX9jk/mjrgLZiiXncg8VYPet0f6MrJ6fRPIL7T Llp2MGTrrJ9jc4AKawxB/+/7xFXzrA66l41fxr3xTT1bAyoWJKi6x0ExIIeY9TT4 9LHt1V6/CvP5e1XgrVY8LRN4jRxVoR3ULGc4Eq6noMW2jaej+2aC2DeoEpAf5u84 37Y2RDTWatxgRUECTLCEoKXwmlqAOm97KEJtfYaU4vvgmQuiJV588JDFhZjRVb+W 3W4NJHYguVvUNSXZLyVW0Npbx2dBU/jE0pVWlV6nDmtKdEJpn/viq6H0CzZwEWfI Ue+xgKwH/IBx5YuAqcwsZfYm0TvTClCJx22pAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUTFPqKMo1y9CKHBtV/P9cNK/f/7owHwYDVR0jBBgwFoAU+8RilKXVZDfhmhGu +fubh3aQFD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy04UmlsS1hWWkRmaG1oR3UtZnVi aDNhUUZENC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMTI0Ny9URlBxS01vMXk5Q0tIQnRWX1A5Y05LX2ZfN28ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnRFUMA0GCSqGSIb3DQEBCwUA A4IBAQA8VmvSce7dQ6jP0TzlUXJrybnC+WPeVY8hqoG3fbJoLOJ18eRNyXvZnPOu l/IkcSyppZapV/Drm/Z8xJkZu1EWv8Ns78f/8I16W5OdkGJMf4UVH71299R1aTUc JDfUJNyJZYsplmjyKOi2An7UqaTI7oSmdth1Y1JQQ0q01J6upBR7FY2emzH4wm8E R17HTdB0fRAC3ddx8kq/W+Df+zPCbEQHbUUQv+mpGwn/wQdCB20z+BwE3LmYECwR J9v2wWR3tyvX9GQjPQB0Z77PMd3ds06Wp9+1K7r8nECeWCYP1FTemoRR2Wz+cK31 0E7fPmb4p+T+Ai4cnzQ/o43KvOWo -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:33 2026 by rpki-client