$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/juhVOAkFcOh1eXLOLx_0msYqmZs.roa File: juhVOAkFcOh1eXLOLx_0msYqmZs.roa (raw, json) Hash identifier: 4ytPT2ETwTcGxBLdhEA8BE5nb97P1GAUU1/dcdZ2q38= Subject key identifier: 8E:E8:55:38:09:05:70:E8:75:79:72:CE:2F:1F:F4:9A:C6:2A:99:9B Certificate issuer: /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Certificate serial: 27 Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/juhVOAkFcOh1eXLOLx_0msYqmZs.roa Signing time: Tue 31 Mar 2026 08:39:55 +0000 ROA not before: Tue 31 Mar 2026 08:39:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131926 IP address blocks: 69.6.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Validity Not Before: Mar 31 08:39:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8EE85538090570E8757972CE2F1FF49AC62A999B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:57:97:d1:23:5c:35:1e:8b:ae:26:f6:a6: 0a:a2:af:6d:dc:df:bd:1e:c9:92:55:63:da:14:e2: dd:b5:cf:fd:01:a0:15:8c:d7:d6:55:33:b9:31:e2: 64:22:c4:f3:1d:0f:7a:a7:87:1c:a7:96:27:88:42: 79:f2:53:71:b9:31:75:f4:e0:84:cf:0f:e1:44:da: cc:31:9b:4d:c7:a9:f6:b5:08:8a:7c:27:88:10:10: 72:41:0b:fe:d8:44:94:97:9f:a2:ed:d5:44:a0:ac: 47:64:49:68:53:68:6c:dc:8e:08:d5:61:64:e4:89: 59:25:3e:93:36:28:e6:57:df:28:49:12:1b:8e:c8: 3e:cd:66:5b:7e:22:af:43:55:9c:31:34:1a:22:94: b7:9c:e6:16:cc:b7:09:c9:a6:36:fb:62:b5:4f:33: 04:65:52:07:4f:21:7f:f5:2c:d7:90:36:a7:eb:ab: 66:de:a7:d4:71:7a:bd:9f:82:de:aa:3c:70:fb:87: 67:f8:6a:2c:91:74:49:ef:94:63:29:23:a4:21:59: 10:2d:45:e2:8d:dc:29:2f:bc:11:4c:02:63:0c:c4: e9:d8:8e:cc:19:0e:69:6c:fa:ba:60:87:3f:97:ab: 60:24:9a:fe:14:34:4e:37:ee:7e:5d:38:13:b3:0f: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:55:38:09:05:70:E8:75:79:72:CE:2F:1F:F4:9A:C6:2A:99:9B X509v3 Authority Key Identifier: keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/juhVOAkFcOh1eXLOLx_0msYqmZs.roa sbgp-ipAddrBlock: critical IPv4: 69.6.64.0/20 Signature Algorithm: sha256WithRSAEncryption 15:91:74:4c:71:6a:de:76:11:06:e7:3d:30:f8:96:2e:2a:e1: 9b:fb:f5:c6:20:f4:d4:ab:bd:e8:18:2a:96:01:c5:0f:4a:3a: 4b:56:b4:32:4e:56:82:f2:1f:70:f2:8e:4e:46:35:71:6a:3f: 7e:8a:50:d7:a7:39:9c:57:58:79:7e:6b:ae:f2:f3:e8:bc:a2: bb:b1:52:b8:25:27:55:ce:39:7d:68:54:49:7f:59:15:5a:a4: d2:ca:c7:03:13:84:bc:34:0d:0f:c9:99:34:08:ad:f0:d9:5b: 5d:21:29:80:56:13:f5:97:6e:06:00:4a:29:52:1b:e9:8d:2e: fb:e9:53:02:bb:b0:af:2c:85:89:ee:66:90:37:a8:45:2f:85: cd:9c:54:4f:13:77:a9:6c:75:17:f0:14:11:e7:23:b6:f9:f7: 3c:a8:2e:e9:df:f8:c6:57:11:e5:9d:6b:a8:1d:c1:ca:56:30: 84:be:db:80:a0:2e:d2:cb:81:28:33:1c:e1:98:3a:03:d0:ef: 16:37:a9:2a:72:fb:a8:f8:9f:33:55:7c:b1:2d:12:05:1a:17: 5f:ac:aa:fe:41:59:1b:66:a5:25:55:98:af:88:38:a2:91:3c: 73:af:4b:3a:24:49:03:c4:e4:8a:32:89:b6:d2:d6:83:5e:82: 73:ce:e4:cc -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQUJG NkQ5NURCMjU2ODE2RDI5NDIzNDZCOUZDMkVBMEMxQUZEODAzMB4XDTI2MDMzMTA4 Mzk1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEVFODU1MzgwOTA1NzBF ODc1Nzk3MkNFMkYxRkY0OUFDNjJBOTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKukV5fRI1w1HouuJvamCqKvbdzfvR7JklVj2hTi3bXP/QGgFYzX 1lUzuTHiZCLE8x0PeqeHHKeWJ4hCefJTcbkxdfTghM8P4UTazDGbTcep9rUIinwn iBAQckEL/thElJefou3VRKCsR2RJaFNobNyOCNVhZOSJWSU+kzYo5lffKEkSG47I Ps1mW34ir0NVnDE0GiKUt5zmFsy3CcmmNvtitU8zBGVSB08hf/Us15A2p+urZt6n 1HF6vZ+C3qo8cPuHZ/hqLJF0Se+UYykjpCFZEC1F4o3cKS+8EUwCYwzE6diOzBkO aWz6umCHP5erYCSa/hQ0Tjfufl04E7MPEMcCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSO6FU4CQVw6HV5cs4vH/SaxiqZmzAfBgNVHSMEGDAWgBTav22V2yVoFtKUI0a5 /C6gwa/YAzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNTMvMnI5dGxkc2xhQmJTbENOR3Vmd3VvTUd2MkFNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnI5dGxkc2xhQmJTbENOR3Vmd3Vv TUd2MkFNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDUzL2p1aFZPQWtGY09oMWVYTE9MeF8wbXNZcW1acy5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARFBkAwDQYJKoZIhvcNAQELBQAD ggEBABWRdExxat52EQbnPTD4li4q4Zv79cYg9NSrvegYKpYBxQ9KOktWtDJOVoLy H3Dyjk5GNXFqP36KUNenOZxXWHl+a67y8+i8oruxUrglJ1XOOX1oVEl/WRVapNLK xwMThLw0DQ/JmTQIrfDZW10hKYBWE/WXbgYASilSG+mNLvvpUwK7sK8shYnuZpA3 qEUvhc2cVE8Td6lsdRfwFBHnI7b59zyoLunf+MZXEeWda6gdwcpWMIS+24CgLtLL gSgzHOGYOgPQ7xY3qSpy+6j4nzNVfLEtEgUaF1+sqv5BWRtmpSVVmK+IOKKRPHOv SzokSQPE5IoyibbS1oNegnPO5Mw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:33:34 2026 by rpki-client