$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/CUDHfi7whz0thjIX7lNNDlFmJPY.roa File: CUDHfi7whz0thjIX7lNNDlFmJPY.roa (raw, json) Hash identifier: lG9GCUtN1twvT1rg5v6+Y2pVWR0Zc+UGBY67ig+Q2rI= Subject key identifier: 09:40:C7:7E:2E:F0:87:3D:2D:86:32:17:EE:53:4D:0E:51:66:24:F6 Certificate issuer: /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82 Certificate serial: 77 Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/CUDHfi7whz0thjIX7lNNDlFmJPY.roa Signing time: Tue 31 Mar 2026 07:27:08 +0000 ROA not before: Tue 31 Mar 2026 07:27:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 38639 IP address blocks: 103.2.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82 Validity Not Before: Mar 31 07:27:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0940C77E2EF0873D2D863217EE534D0E516624F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:fe:a8:9c:ee:15:8a:fd:23:f2:0f:32:72: 6e:9b:48:08:d8:a5:e5:5f:b2:04:53:32:df:b9:83: 6f:79:2d:c0:d1:20:94:18:b7:d1:99:ad:74:64:25: 64:69:a5:bb:99:3c:a8:02:4e:bc:1e:45:36:03:66: f6:3a:f0:9b:88:f4:29:69:01:09:97:71:31:0c:f4: 19:c2:b9:d3:5f:40:ae:c4:89:a9:7d:2e:ab:5c:19: 20:91:11:b6:f1:fd:11:90:ab:ba:40:b6:17:ab:e4: 6a:48:2d:2c:ed:71:47:c2:6d:63:5b:06:d4:c4:50: e8:8a:34:26:3f:ec:9e:02:0d:c7:b3:f6:38:ed:38: a5:9e:5a:26:85:b7:b0:b5:09:e5:47:6a:c7:52:9a: 10:55:fc:b2:af:5f:f0:b2:71:97:94:b8:cc:bc:07: 8a:ed:c0:cc:be:69:66:41:0f:cb:3a:ec:d5:a7:07: 38:d2:9b:9e:e5:ab:4d:2f:da:f3:5b:0b:38:b6:11: 07:9a:5d:f4:b6:8c:2e:f7:66:96:ed:eb:0a:9d:fc: 17:b5:02:aa:d4:ec:3e:2e:3f:f5:34:fb:1f:37:c3: 5c:a7:a2:21:bf:53:c9:a6:0e:f2:c7:21:2d:ec:6d: a0:91:b9:b8:25:a0:e2:9a:7e:f0:70:18:09:56:a3: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:C7:7E:2E:F0:87:3D:2D:86:32:17:EE:53:4D:0E:51:66:24:F6 X509v3 Authority Key Identifier: keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/CUDHfi7whz0thjIX7lNNDlFmJPY.roa sbgp-ipAddrBlock: critical IPv4: 103.2.128.0/22 Signature Algorithm: sha256WithRSAEncryption 30:4b:ed:eb:ca:fe:c6:12:85:4a:3a:99:d7:52:bc:50:82:78: 1d:0f:dd:ae:32:a1:d5:c9:61:28:24:05:09:8a:1f:2e:a3:04: b1:7e:08:59:7a:e1:76:ed:37:e3:1c:3d:81:c3:04:5a:ef:18: 55:38:44:bb:ff:b5:f0:88:08:a2:9a:f7:85:94:d7:4f:19:67: 26:a1:67:d6:a8:cd:58:ae:24:49:ba:8e:76:da:74:bf:c1:c3: 14:c1:1d:f9:e9:d8:b6:c4:5b:66:2d:41:28:c9:d5:8c:7f:c6: 7f:5d:d3:10:54:b0:52:fa:db:d6:96:45:c9:05:37:c8:fe:4a: 6f:78:82:e6:b4:01:68:59:d2:05:07:4c:83:e0:9a:42:cc:00: c0:2c:d5:cc:89:71:66:70:3a:48:04:de:4d:1f:58:32:00:52: a7:b4:57:f7:22:11:6c:2a:72:1f:2e:e7:44:44:22:4f:03:b2: 45:d8:4b:5a:f2:86:1e:f5:0b:a0:1a:19:05:29:53:be:ad:2b: df:d7:bb:8d:a5:2e:c9:89:52:76:7e:2e:13:a7:d0:c3:a2:26: 4c:1a:ae:b2:c8:b7:6e:02:cc:41:1e:ba:03:e3:3a:71:83:31: 3e:63:3a:d2:30:49:01:4b:8f:e1:e1:48:67:cc:05:04:11:70: 15:b8:72:61 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTI2MDMzMTA3 MjcwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDk0MEM3N0UyRUYwODcz RDJEODYzMjE3RUU1MzREMEU1MTY2MjRGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANP4/qic7hWK/SPyDzJybptICNil5V+yBFMy37mDb3ktwNEglBi3 0ZmtdGQlZGmlu5k8qAJOvB5FNgNm9jrwm4j0KWkBCZdxMQz0GcK5019ArsSJqX0u q1wZIJERtvH9EZCrukC2F6vkakgtLO1xR8JtY1sG1MRQ6Io0Jj/sngINx7P2OO04 pZ5aJoW3sLUJ5Udqx1KaEFX8sq9f8LJxl5S4zLwHiu3AzL5pZkEPyzrs1acHONKb nuWrTS/a81sLOLYRB5pd9LaMLvdmlu3rCp38F7UCqtTsPi4/9TT7HzfDXKeiIb9T yaYO8schLextoJG5uCWg4pp+8HAYCVajaSsCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQJQMd+LvCHPS2GMhfuU00OUWYk9jAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2 X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEzMTMxL0NVREhmaTd3aHowdGhqSVg3bE5ORGxGbUpQWS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnAoAwDQYJKoZIhvcNAQELBQAD ggEBADBL7evK/sYShUo6mddSvFCCeB0P3a4yodXJYSgkBQmKHy6jBLF+CFl64Xbt N+McPYHDBFrvGFU4RLv/tfCICKKa94WU108ZZyahZ9aozViuJEm6jnbadL/BwxTB Hfnp2LbEW2YtQSjJ1Yx/xn9d0xBUsFL629aWRckFN8j+Sm94gua0AWhZ0gUHTIPg mkLMAMAs1cyJcWZwOkgE3k0fWDIAUqe0V/ciEWwqch8u50REIk8DskXYS1ryhh71 C6AaGQUpU76tK9/Xu42lLsmJUnZ+LhOn0MOiJkwarrLIt24CzEEeugPjOnGDMT5j OtIwSQFLj+HhSGfMBQQRcBW4cmE= -----END CERTIFICATE-----Generated at Sun Apr 19 09:29:26 2026 by rpki-client