$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa File: RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa (raw, json) Hash identifier: tAL3bs2X+81SsJUKgKIHiu4qULoV70ZxQ1vvh2qMlho= Subject key identifier: 44:D6:EC:6F:4A:A9:BB:74:85:DD:FB:35:5D:68:D7:00:E1:20:3D:3B Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: F8 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa Signing time: Tue 31 Mar 2026 07:31:13 +0000 ROA not before: Tue 31 Mar 2026 07:31:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18126 IP address blocks: 202.41.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Mar 31 07:31:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=44D6EC6F4AA9BB7485DDFB355D68D700E1203D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:d7:31:12:33:97:19:9e:a8:40:ab:c3:a1: 70:97:75:e0:b1:bb:e9:5c:4f:8f:6a:ef:30:70:21: e3:fa:df:30:6a:74:ef:66:8c:08:6f:ec:b2:5d:ac: d8:29:bc:b7:e2:00:d1:66:0c:a6:97:6e:ec:2c:23: c8:7c:e7:1f:5b:87:11:7f:ce:3e:e6:72:f0:a9:ef: f6:b3:5a:59:e2:08:7b:ac:a3:c5:4d:ec:6d:97:8c: 2a:27:13:4b:2d:79:db:b0:60:1b:1f:c6:9e:85:e8: 55:42:4b:a0:25:a2:8a:4d:54:fd:d3:9a:39:e0:20: 6c:3e:a1:05:3e:df:12:f4:6f:28:17:2e:9d:34:d6: 9b:71:43:64:48:b4:ff:0b:cd:6e:ea:06:69:5a:db: 7b:c7:1e:09:a4:eb:81:5e:aa:a6:2d:27:7c:27:19: f0:eb:1a:07:8a:66:52:19:76:59:6a:79:41:12:41: e3:3e:5c:66:52:b6:5d:9e:53:d0:33:54:c2:bc:d8: 12:51:fd:90:f1:a1:e8:84:fb:df:86:52:f8:f6:b2: 41:79:f5:b2:d5:09:6d:e5:e0:a2:b6:eb:e2:9f:6c: 8c:89:4a:dd:5b:86:f8:87:25:19:b5:6b:2e:1f:b9: 62:3b:d0:25:ce:8d:1a:f3:ef:b0:d3:a4:8e:c4:db: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D6:EC:6F:4A:A9:BB:74:85:DD:FB:35:5D:68:D7:00:E1:20:3D:3B X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa sbgp-ipAddrBlock: critical IPv4: 202.41.208.0/20 Signature Algorithm: sha256WithRSAEncryption 87:1e:dd:90:b3:8a:bf:6b:17:6d:0a:29:c6:98:a4:17:40:c1: f7:5c:3d:4d:ac:8b:df:bb:da:fa:dc:60:0d:b8:06:76:4c:ee: b3:ad:0b:e6:e5:f8:59:39:2f:b3:ab:f1:cb:42:49:1b:67:f3: 93:b5:3f:00:43:d7:cf:8b:7e:ac:26:c5:aa:48:a3:35:88:20: de:f3:8e:cf:70:e1:a1:bb:06:91:05:1e:6e:06:c7:3d:23:36: 73:83:eb:13:c0:88:95:91:d0:ef:45:b1:c5:71:8b:41:d6:d9: 39:49:b7:9f:4b:a1:8a:86:9a:03:e5:73:38:ae:dc:30:b8:83: 4b:bf:46:fd:62:a1:22:81:ec:88:86:8b:50:11:0c:9e:e5:1e: be:b8:3d:78:44:ed:7a:e8:07:e6:23:dd:ad:76:22:77:0c:7f: 55:2f:36:60:f5:da:0b:b9:b7:5d:2e:9b:02:41:48:93:7c:19: a1:07:58:cd:32:f0:5e:2f:6c:19:83:fd:02:c6:db:e5:e4:b3: b0:0e:5f:80:3c:9c:b0:a1:a6:b7:3f:58:3f:86:ab:37:40:dd: 04:f2:21:1d:e5:0e:0c:be:2c:0b:4a:72:94:10:c3:05:24:09: 41:ef:4c:67:1a:52:8f:1b:2e:a8:f5:62:49:5c:09:3b:a1:6c: b7:84:9b:1f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw NzMxMTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0RDZFQzZGNEFBOUJC NzQ4NURERkIzNTVENjhENzAwRTEyMDNEM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/dtcxEjOXGZ6oQKvDoXCXdeCxu+lcT49q7zBwIeP63zBqdO9m jAhv7LJdrNgpvLfiANFmDKaXbuwsI8h85x9bhxF/zj7mcvCp7/azWlniCHuso8VN 7G2XjConE0steduwYBsfxp6F6FVCS6AloopNVP3TmjngIGw+oQU+3xL0bygXLp00 1ptxQ2RItP8LzW7qBmla23vHHgmk64FeqqYtJ3wnGfDrGgeKZlIZdllqeUESQeM+ XGZStl2eU9AzVMK82BJR/ZDxoeiE+9+GUvj2skF59bLVCW3l4KK26+KfbIyJSt1b hviHJRm1ay4fuWI70CXOjRrz77DTpI7E27qnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQURNbsb0qpu3SF3fs1XWjXAOEgPTswHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTczL1JOYnNiMHFwdTNTRjNmczFYV2pYQU9FZ1BUcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKKdAwDQYJKoZIhvcNAQELBQADggEB AIce3ZCzir9rF20KKcaYpBdAwfdcPU2si9+72vrcYA24BnZM7rOtC+bl+Fk5L7Or 8ctCSRtn85O1PwBD18+LfqwmxapIozWIIN7zjs9w4aG7BpEFHm4Gxz0jNnOD6xPA iJWR0O9FscVxi0HW2TlJt59LoYqGmgPlcziu3DC4g0u/Rv1ioSKB7IiGi1ARDJ7l Hr64PXhE7XroB+Yj3a12IncMf1UvNmD12gu5t10umwJBSJN8GaEHWM0y8F4vbBmD /QLG2+Xks7AOX4A8nLChprc/WD+GqzdA3QTyIR3lDgy+LAtKcpQQwwUkCUHvTGca Uo8bLqj1YklcCTuhbLeEmx8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:46 2026 by rpki-client