$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa File: SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa (raw, json) Hash identifier: 75BSh6+Cdov5JlV0eutT83syyf7GxpfxR0Pp3xCnR6Y= Subject key identifier: 49:D0:7B:26:7B:D7:8D:0A:E6:C3:78:D9:24:B0:DE:E0:6D:DF:AB:9C Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: F3 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa Signing time: Tue 31 Mar 2026 07:31:10 +0000 ROA not before: Tue 31 Mar 2026 07:31:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18126 IP address blocks: 202.124.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Mar 31 07:31:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=49D07B267BD78D0AE6C378D924B0DEE06DDFAB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:ed:41:79:0d:f8:a0:4d:fc:b8:fa:c9:5e: e5:1f:d5:9a:21:b2:14:58:c5:43:d3:d1:6f:d4:02: c2:f3:1b:cb:aa:dc:41:b5:52:24:48:2f:d4:23:0c: e6:dc:9f:e6:19:de:af:45:5d:8b:f9:20:3c:5b:d6: ce:c6:de:f9:7d:e9:2e:ed:6a:5c:db:fe:76:bc:49: 09:7d:36:4a:c5:a5:c8:d4:72:77:56:1c:ca:73:81: 35:64:74:75:0f:ba:de:e6:d0:4d:ef:98:ec:6d:77: 55:2b:26:64:8f:d5:e4:e9:f8:94:cb:4f:4e:08:0f: 30:1f:78:f6:69:be:4e:4b:c0:9b:00:ae:74:59:92: 9b:8a:4b:ab:17:98:50:15:1e:51:d9:b3:f0:22:8d: 2b:21:a6:14:69:a1:90:af:f3:56:64:4f:69:f0:5f: f2:e2:83:8a:c0:da:f1:9e:34:a8:95:da:0f:a2:8a: 38:6a:4d:fb:3f:7a:33:f9:8d:30:e0:24:63:9b:1b: 04:be:b0:3d:ad:23:98:57:e0:30:aa:ae:39:1c:ee: 33:46:8f:fe:01:77:b0:0a:90:77:fe:0d:16:62:bb: 60:16:4f:76:3a:9e:95:90:73:d7:1f:ad:68:68:91: b2:72:93:19:30:57:f3:3d:b3:e4:88:fe:05:64:81: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:7B:26:7B:D7:8D:0A:E6:C3:78:D9:24:B0:DE:E0:6D:DF:AB:9C X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa sbgp-ipAddrBlock: critical IPv4: 202.124.208.0/20 Signature Algorithm: sha256WithRSAEncryption 53:cb:e3:7b:e7:44:81:bd:26:5d:3a:e7:bd:7e:18:21:dc:76: 12:7c:dc:ac:60:01:9f:61:fc:96:b2:32:49:36:2a:ad:f8:ff: 89:7b:05:b0:fe:90:d5:a2:af:bc:93:60:35:6b:e0:ef:8c:c0: 5a:59:b0:4b:59:6f:08:d8:da:41:79:14:a8:8a:59:1c:25:53: fa:4c:62:6c:87:7f:6f:66:c0:ec:10:72:2d:e1:32:73:e7:7a: c6:d4:25:c4:40:90:df:88:e2:6f:44:8d:ed:12:3a:10:cb:0a: 11:83:97:e6:07:a2:dd:45:a5:11:3d:33:41:1e:d7:fd:5e:e5: 03:35:f7:35:b9:43:a6:60:63:5c:88:c1:09:49:0c:63:e7:0b: e3:08:83:a8:d8:f2:49:52:86:7a:cb:a6:fb:27:a7:8d:39:b7: 76:e5:7a:94:f5:ea:1e:e5:c0:dd:2a:06:45:be:56:41:6e:9d: 96:11:14:2c:7b:58:be:87:a7:c6:19:cf:71:59:b5:64:79:dd: 6f:d2:fc:20:19:6b:9a:50:5e:8f:27:aa:f4:ac:97:c4:13:53: ef:75:d9:8b:e2:66:69:48:69:95:18:44:a1:9e:4b:e1:21:9b: a9:55:8e:4a:2b:50:81:3e:65:1b:76:02:c6:c1:da:ad:e7:c4: 49:d7:8f:71 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw NzMxMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5RDA3QjI2N0JENzhE MEFFNkMzNzhEOTI0QjBERUUwNkRERkFCOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2c+1BeQ34oE38uPrJXuUf1ZohshRYxUPT0W/UAsLzG8uq3EG1 UiRIL9QjDObcn+YZ3q9FXYv5IDxb1s7G3vl96S7talzb/na8SQl9NkrFpcjUcndW HMpzgTVkdHUPut7m0E3vmOxtd1UrJmSP1eTp+JTLT04IDzAfePZpvk5LwJsArnRZ kpuKS6sXmFAVHlHZs/AijSshphRpoZCv81ZkT2nwX/Lig4rA2vGeNKiV2g+iijhq Tfs/ejP5jTDgJGObGwS+sD2tI5hX4DCqrjkc7jNGj/4Bd7AKkHf+DRZiu2AWT3Y6 npWQc9cfrWhokbJykxkwV/M9s+SI/gVkgRyFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUSdB7JnvXjQrmw3jZJLDe4G3fq5wwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTczL1NkQjdKbnZYalFybXczalpKTERlNEczZnE1dy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKfNAwDQYJKoZIhvcNAQELBQADggEB AFPL43vnRIG9Jl06571+GCHcdhJ83KxgAZ9h/JayMkk2Kq34/4l7BbD+kNWir7yT YDVr4O+MwFpZsEtZbwjY2kF5FKiKWRwlU/pMYmyHf29mwOwQci3hMnPnesbUJcRA kN+I4m9Eje0SOhDLChGDl+YHot1FpRE9M0Ee1/1e5QM19zW5Q6ZgY1yIwQlJDGPn C+MIg6jY8klShnrLpvsnp405t3blepT16h7lwN0qBkW+VkFunZYRFCx7WL6Hp8YZ z3FZtWR53W/S/CAZa5pQXo8nqvSsl8QTU+912YviZmlIaZUYRKGeS+Ehm6lVjkor UIE+ZRt2AsbB2q3nxEnXj3E= -----END CERTIFICATE-----Generated at Fri Apr 17 17:43:00 2026 by rpki-client