$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/IbJTF01oFKcrKDNjwXcyzhsHubY.roa File: IbJTF01oFKcrKDNjwXcyzhsHubY.roa (raw, json) Hash identifier: na4PvuIaTHpJ5Pz3d1z0ZqJeMafNlo7LNksgK8eFQH8= Subject key identifier: 21:B2:53:17:4D:68:14:A7:2B:28:33:63:C1:77:32:CE:1B:07:B9:B6 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: 0100 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/IbJTF01oFKcrKDNjwXcyzhsHubY.roa Signing time: Tue 31 Mar 2026 07:31:17 +0000 ROA not before: Tue 31 Mar 2026 07:31:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 19905 IP address blocks: 14.192.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Mar 31 07:31:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=21B253174D6814A72B283363C17732CE1B07B9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:6c:f3:cb:0f:a4:0f:04:fb:92:2b:61:79: d3:95:fd:58:63:1f:a7:7d:6a:a3:53:a4:51:00:4d: 80:ca:f0:f4:cc:ea:09:17:a3:21:91:62:a6:db:c4: 87:c9:2a:db:6f:ee:e0:7f:17:90:f9:59:e7:23:8b: 15:70:8a:88:d6:93:4f:86:cb:30:58:53:eb:c2:9e: 2b:a7:37:94:73:58:d9:a7:db:ce:77:79:28:bd:26: ad:87:49:29:77:ec:07:03:38:1c:55:7c:2d:04:c4: c7:36:b2:3a:b1:f4:71:18:76:23:93:3a:b3:fb:c2: 54:b7:96:e7:23:6f:c3:46:ce:4d:fc:76:bd:1f:d9: 46:e1:1a:26:c5:c7:f7:51:7e:ce:99:49:6f:f7:7c: 57:f9:45:1b:df:a6:0c:01:7a:d9:55:c5:f4:a6:90: ed:9c:66:fc:d6:cc:22:67:a6:17:4c:48:8c:87:48: 63:6d:e6:69:d1:88:c6:6c:86:5e:3c:37:f4:b3:28: eb:9c:cf:60:f8:51:76:ec:2c:fb:a3:7c:c6:b4:50: 66:e0:84:52:58:49:65:57:6c:16:55:e6:b3:af:f4: 43:22:0b:11:1d:af:eb:63:1c:7b:2f:05:70:c7:40: fc:42:3c:46:98:11:bc:42:3f:d0:f9:4b:a7:d4:f0: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B2:53:17:4D:68:14:A7:2B:28:33:63:C1:77:32:CE:1B:07:B9:B6 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/IbJTF01oFKcrKDNjwXcyzhsHubY.roa sbgp-ipAddrBlock: critical IPv4: 14.192.32.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:34:3a:1e:7e:8b:2f:63:04:b2:51:6f:60:20:92:68:73:59: 43:b3:a5:3d:96:52:4d:2d:f7:4e:2a:12:36:f4:87:7e:ee:ce: af:53:06:b0:96:19:d1:4d:64:cb:ee:33:73:33:5d:ca:3f:23: ae:44:14:79:22:d2:f3:14:95:59:30:f1:f0:48:97:56:1f:5c: f0:b0:f0:2a:27:99:5b:65:ad:44:24:8a:91:4e:1a:bd:bd:f9: 53:33:1e:80:ed:f3:8d:63:aa:7d:8f:c8:07:d9:f4:ee:60:77: 37:4f:1e:35:e3:c9:3e:2e:32:3f:b0:5b:9d:48:6d:0a:ea:24: 1a:20:c4:95:bf:7b:a2:0d:30:81:53:f8:98:75:78:66:0e:75: 18:e0:37:3c:1e:9d:56:8c:23:0d:bb:ed:46:f9:72:a6:e5:db: f4:d5:34:86:00:da:8e:8b:11:f2:da:58:0f:8b:8b:fb:86:fd: 72:59:c9:71:0e:1c:21:af:4e:42:5a:2e:61:31:a3:04:8c:ea: e8:39:d6:27:68:6b:97:80:2f:bf:20:ad:56:3a:9b:a5:f6:58: cd:65:82:29:e2:08:e0:73:41:e7:1c:bc:3d:e9:7f:d7:d4:6a: 3b:c1:10:c4:a6:dc:14:ca:36:d2:5d:9e:90:e6:28:f2:00:56: 28:f0:20:91 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw NzMxMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxQjI1MzE3NEQ2ODE0 QTcyQjI4MzM2M0MxNzczMkNFMUIwN0I5QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqWGzzyw+kDwT7kithedOV/VhjH6d9aqNTpFEATYDK8PTM6gkX oyGRYqbbxIfJKttv7uB/F5D5WecjixVwiojWk0+GyzBYU+vCniunN5RzWNmn2853 eSi9Jq2HSSl37AcDOBxVfC0ExMc2sjqx9HEYdiOTOrP7wlS3lucjb8NGzk38dr0f 2UbhGibFx/dRfs6ZSW/3fFf5RRvfpgwBetlVxfSmkO2cZvzWzCJnphdMSIyHSGNt 5mnRiMZshl48N/SzKOucz2D4UXbsLPujfMa0UGbghFJYSWVXbBZV5rOv9EMiCxEd r+tjHHsvBXDHQPxCPEaYEbxCP9D5S6fU8FlNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIbJTF01oFKcrKDNjwXcyzhsHubYwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTczL0liSlRGMDFvRktjcktETmp3WGN5emhzSHViWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQOwCAwDQYJKoZIhvcNAQELBQADggEB AC40Oh5+iy9jBLJRb2AgkmhzWUOzpT2WUk0t904qEjb0h37uzq9TBrCWGdFNZMvu M3MzXco/I65EFHki0vMUlVkw8fBIl1YfXPCw8ConmVtlrUQkipFOGr29+VMzHoDt 841jqn2PyAfZ9O5gdzdPHjXjyT4uMj+wW51IbQrqJBogxJW/e6INMIFT+Jh1eGYO dRjgNzwenVaMIw277Ub5cqbl2/TVNIYA2o6LEfLaWA+Li/uG/XJZyXEOHCGvTkJa LmExowSM6ug51idoa5eAL78grVY6m6X2WM1lginiCOBzQeccvD3pf9fUajvBEMSm 3BTKNtJdnpDmKPIAVijwIJE= -----END CERTIFICATE-----Generated at Fri Apr 17 03:34:30 2026 by rpki-client