$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/QMfsmRVK13kXy8CXEfjOdbnt2tc.roa File: QMfsmRVK13kXy8CXEfjOdbnt2tc.roa (raw, json) Hash identifier: sehKu3BNBKR5vOZNuPJhx2SgSuQCUaBIjmI/ptufraE= Subject key identifier: 40:C7:EC:99:15:4A:D7:79:17:CB:C0:97:11:F8:CE:75:B9:ED:DA:D7 Certificate issuer: /CN=4BDFDC09783493BE1DD0F6F71AB331B61944A1F2 Certificate serial: 20 Authority key identifier: 4B:DF:DC:09:78:34:93:BE:1D:D0:F6:F7:1A:B3:31:B6:19:44:A1:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S9_cCXg0k74d0Pb3GrMxthlEofI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/QMfsmRVK13kXy8CXEfjOdbnt2tc.roa Signing time: Tue 31 Mar 2026 07:32:43 +0000 ROA not before: Tue 31 Mar 2026 07:32:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2907 IP address blocks: 192.174.128.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/S9_cCXg0k74d0Pb3GrMxthlEofI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/S9_cCXg0k74d0Pb3GrMxthlEofI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S9_cCXg0k74d0Pb3GrMxthlEofI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BDFDC09783493BE1DD0F6F71AB331B61944A1F2 Validity Not Before: Mar 31 07:32:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=40C7EC99154AD77917CBC09711F8CE75B9EDDAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:be:27:41:b3:99:c9:47:82:ac:ad:57:1c: 6b:c4:65:1f:c3:0b:f6:7d:af:04:7d:74:9d:12:aa: dc:30:b0:62:65:50:15:f4:80:fb:18:de:9f:13:3a: b1:26:63:50:a7:88:5e:46:24:46:07:24:e7:77:94: c9:b6:0b:f3:5b:c6:18:86:ca:4d:82:d7:0d:50:64: 90:96:e5:2f:37:6f:b2:5f:bc:e4:65:5e:c8:d5:79: db:08:fc:37:7f:16:c1:36:be:6d:58:07:99:33:13: 3f:2d:7a:a5:f0:30:de:fa:71:46:02:19:85:6d:9e: 2d:4c:e0:65:f3:31:e4:25:23:0c:58:d0:e5:08:3c: c1:ea:93:cf:b4:b4:21:da:65:ca:fb:58:90:14:4d: d2:48:53:42:00:d3:06:b2:56:fa:5a:02:a2:bb:fb: 9a:80:b2:ac:2f:ae:66:1d:61:76:b2:f6:c6:42:97: af:c8:6e:e4:47:9a:5e:6f:4a:90:29:d4:17:74:9c: 0c:a4:5a:a5:92:1c:19:bc:d0:27:73:f8:8d:21:9b: 17:13:3f:49:ea:54:dc:66:b5:ff:fc:22:ae:c4:e7: 7a:5f:51:92:bd:65:19:3d:b7:b7:ac:d4:0e:8f:7f: f9:0e:21:78:bc:df:cc:26:7a:ee:de:44:1e:be:d6: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C7:EC:99:15:4A:D7:79:17:CB:C0:97:11:F8:CE:75:B9:ED:DA:D7 X509v3 Authority Key Identifier: keyid:4B:DF:DC:09:78:34:93:BE:1D:D0:F6:F7:1A:B3:31:B6:19:44:A1:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/S9_cCXg0k74d0Pb3GrMxthlEofI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S9_cCXg0k74d0Pb3GrMxthlEofI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/QMfsmRVK13kXy8CXEfjOdbnt2tc.roa sbgp-ipAddrBlock: critical IPv4: 192.174.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8a:a1:9c:1f:38:f5:ae:ac:83:b3:09:68:ff:98:c6:df:35:2f: 90:c5:48:59:a9:bb:49:9b:3e:7e:47:29:89:e1:f5:27:6e:bf: 12:3e:da:fd:43:50:2f:ba:16:35:74:de:5c:3b:f3:6a:65:35: f4:89:68:fe:1c:af:9e:17:43:3e:cd:88:41:da:fd:94:ac:0f: 17:41:52:33:1d:af:c7:d7:a1:c0:0c:0b:7f:6d:5b:6a:a4:18: e8:48:ae:b0:91:09:de:5e:e1:35:38:97:b4:a0:62:4c:01:6d: 3e:5d:ed:f2:c7:3b:7c:ad:cd:f2:a1:2d:25:84:69:82:bc:c3: 94:6f:a0:2e:e5:54:fa:60:22:59:ed:02:f4:e0:d3:a1:84:56: b0:6c:ab:27:b2:4a:00:2c:b0:7c:9d:df:42:e1:73:03:b2:39: 1c:49:d3:3e:cb:23:b3:93:91:8b:70:c1:6c:25:67:39:da:05: 99:48:26:bb:8f:f3:c8:02:e3:c7:1e:c5:6c:b4:a1:76:f4:49: 65:87:c3:13:e2:84:41:83:06:4b:7d:f2:1f:de:fb:3f:bf:b7: 56:d5:41:70:7b:4c:6d:6a:d2:0c:a8:3f:37:67:cf:5a:e5:27: d3:21:f2:aa:63:06:86:f3:1d:c3:ab:a7:af:3b:b8:2b:e9:9f: 3e:d8:9a:51 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkRG REMwOTc4MzQ5M0JFMUREMEY2RjcxQUIzMzFCNjE5NDRBMUYyMB4XDTI2MDMzMTA3 MzI0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDBDN0VDOTkxNTRBRDc3 OTE3Q0JDMDk3MTFGOENFNzVCOUVEREFENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL5mvidBs5nJR4KsrVcca8RlH8ML9n2vBH10nRKq3DCwYmVQFfSA +xjenxM6sSZjUKeIXkYkRgck53eUybYL81vGGIbKTYLXDVBkkJblLzdvsl+85GVe yNV52wj8N38WwTa+bVgHmTMTPy16pfAw3vpxRgIZhW2eLUzgZfMx5CUjDFjQ5Qg8 weqTz7S0IdplyvtYkBRN0khTQgDTBrJW+loCorv7moCyrC+uZh1hdrL2xkKXr8hu 5EeaXm9KkCnUF3ScDKRapZIcGbzQJ3P4jSGbFxM/SepU3Ga1//wirsTnel9Rkr1l GT23t6zUDo9/+Q4heLzfzCZ67t5EHr7W+gMCAwEAAaOCAdcwggHTMB0GA1UdDgQW BBRAx+yZFUrXeRfLwJcR+M51ue3a1zAfBgNVHSMEGDAWgBRL39wJeDSTvh3Q9vca szG2GUSh8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvUzlfY0NYZzBrNzRkMFBiM0dyTXh0aGxFb2ZJLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUzlfY0NYZzBrNzRkMFBiM0dyTXh0aGxF b2ZJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEyL1FNZnNtUlZLMTNrWHk4Q1hFZmpPZGJudDJ0Yy5yb2EwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAfAroAwDQYJKoZIhvcNAQELBQADggEBAIqh nB849a6sg7MJaP+Yxt81L5DFSFmpu0mbPn5HKYnh9SduvxI+2v1DUC+6FjV03lw7 82plNfSJaP4cr54XQz7NiEHa/ZSsDxdBUjMdr8fXocAMC39tW2qkGOhIrrCRCd5e 4TU4l7SgYkwBbT5d7fLHO3ytzfKhLSWEaYK8w5RvoC7lVPpgIlntAvTg06GEVrBs qyeySgAssHyd30LhcwOyORxJ0z7LI7OTkYtwwWwlZznaBZlIJruP88gC48cexWy0 oXb0SWWHwxPihEGDBkt98h/e+z+/t1bVQXB7TG1q0gyoPzdnz1rlJ9Mh8qpjBobz HcOrp687uCvpnz7YmlE= -----END CERTIFICATE-----Generated at Sun Apr 19 12:53:05 2026 by rpki-client