$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/XcDe8gKccFCFMDhLXu_9XNcFuoY.roa File: XcDe8gKccFCFMDhLXu_9XNcFuoY.roa (raw, json) Hash identifier: XLcRQNWlsbN6FhbeUG3TwqJcr1n4v1IF0huvh2EpvZA= Subject key identifier: 5D:C0:DE:F2:02:9C:70:50:85:30:38:4B:5E:EF:FD:5C:D7:05:BA:86 Certificate issuer: /CN=03614EE9C263D41C4C6F4EC976B187217CB39112 Certificate serial: 4B Authority key identifier: 03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/XcDe8gKccFCFMDhLXu_9XNcFuoY.roa Signing time: Tue 31 Mar 2026 07:51:44 +0000 ROA not before: Tue 31 Mar 2026 07:51:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 138384 IP address blocks: 157.192.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03614EE9C263D41C4C6F4EC976B187217CB39112 Validity Not Before: Mar 31 07:51:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5DC0DEF2029C70508530384B5EEFFD5CD705BA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:6f:c3:7f:39:dc:85:9f:57:5d:9a:0d:6b: 6c:45:58:18:08:15:e3:87:c6:11:91:f9:d4:f2:49: 23:66:7f:84:0d:97:fd:b6:c4:6c:2f:f3:38:19:3f: 56:4c:e8:ed:7f:d8:f2:60:de:6e:51:6c:99:27:14: 60:54:26:b7:12:6e:6b:53:ae:e7:90:9b:04:3e:f5: cf:05:4b:c9:6e:33:a8:f0:56:a8:e1:cc:f8:93:9c: 9d:2a:d8:10:7b:cf:1c:90:46:04:c5:fe:0c:26:63: ef:97:57:70:a4:aa:e3:9f:40:2f:a2:12:77:88:da: 01:5a:c9:66:64:7b:a9:6a:a7:74:99:92:ff:21:c9: 50:81:ba:a4:2f:42:85:45:97:81:01:28:b7:35:14: f3:90:ea:c7:34:7a:e7:1d:65:90:c0:7f:10:6b:f7: 8f:6a:5f:93:d1:b2:cc:75:8e:87:a7:d2:e2:2b:f4: dc:5a:e5:fc:88:bf:48:48:1a:db:0d:83:14:d5:a9: aa:ed:28:ab:f2:70:67:c1:89:75:45:18:52:ea:1e: 1e:d1:40:cf:f6:13:71:46:f9:7e:1a:31:c7:9b:ef: 79:fc:23:67:9b:e8:18:54:b3:a5:fe:e8:f3:f4:bd: 0c:00:83:91:ba:9b:29:53:0c:e5:c0:32:16:41:4c: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C0:DE:F2:02:9C:70:50:85:30:38:4B:5E:EF:FD:5C:D7:05:BA:86 X509v3 Authority Key Identifier: keyid:03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/XcDe8gKccFCFMDhLXu_9XNcFuoY.roa sbgp-ipAddrBlock: critical IPv4: 157.192.0.0/16 Signature Algorithm: sha256WithRSAEncryption c0:14:be:6d:89:c8:28:12:3d:30:6b:3e:17:cc:81:9d:f2:c9: f6:4e:42:5a:db:26:8e:ca:6c:cc:2f:f7:3c:5e:bd:94:83:fe: 32:cc:97:fe:67:0c:f2:8e:f1:81:a2:c2:46:b4:69:a7:4f:c8: 2d:d4:12:45:f0:9f:42:5a:0d:fa:b0:80:9c:13:bc:e8:f6:24: b0:43:62:cd:b2:02:5e:5a:15:0c:1b:01:df:76:fc:26:f4:72: 3c:cd:49:e6:c3:6c:08:a6:7c:f6:66:e5:17:10:05:57:c1:6e: df:3f:d4:e2:47:f6:67:10:fb:63:1b:c6:7c:73:5f:7a:88:a4: 02:9a:23:a9:d0:00:2f:28:9a:16:40:02:9e:28:01:2c:81:59: 9d:02:b0:85:f4:d8:8b:f4:a1:2b:e3:2e:d2:53:3b:a4:52:e8: 85:ef:2a:87:7d:33:f9:99:36:d3:75:9c:1a:51:df:a7:51:a9: f1:90:61:d8:ea:86:97:86:e4:6b:cb:a6:ab:66:2a:0c:95:68: 42:79:ce:01:8e:73:52:e4:43:73:89:e3:8e:6a:b7:2c:10:b9: 57:ed:75:bd:85:2e:20:fd:28:0d:dc:2f:8b:f7:0b:78:a3:14: b2:1e:8a:9d:45:75:89:14:74:e7:26:fa:75:cd:bb:bd:0f:65: ba:b7:4d:28 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzYx NEVFOUMyNjNENDFDNEM2RjRFQzk3NkIxODcyMTdDQjM5MTEyMB4XDTI2MDMzMTA3 NTE0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNURDMERFRjIwMjlDNzA1 MDg1MzAzODRCNUVFRkZENUNENzA1QkE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOHvb8N/OdyFn1ddmg1rbEVYGAgV44fGEZH51PJJI2Z/hA2X/bbE bC/zOBk/Vkzo7X/Y8mDeblFsmScUYFQmtxJua1Ou55CbBD71zwVLyW4zqPBWqOHM +JOcnSrYEHvPHJBGBMX+DCZj75dXcKSq459AL6ISd4jaAVrJZmR7qWqndJmS/yHJ UIG6pC9ChUWXgQEotzUU85DqxzR65x1lkMB/EGv3j2pfk9GyzHWOh6fS4iv03Frl /Ii/SEga2w2DFNWpqu0oq/JwZ8GJdUUYUuoeHtFAz/YTcUb5fhoxx5vvefwjZ5vo GFSzpf7o8/S9DACDkbqbKVMM5cAyFkFMALkCAwEAAaOCAdwwggHYMB0GA1UdDgQW BBRdwN7yApxwUIUwOEte7/1c1wW6hjAfBgNVHSMEGDAWgBQDYU7pwmPUHExvTsl2 sYchfLOREjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODgvQTJGTzZjSmoxQnhNYjA3SmRyR0hJWHl6a1JJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTJGTzZjSmoxQnhNYjA3SmRyR0hJ WHl6a1JJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDg4L1hjRGU4Z0tjY0ZDRk1EaExYdV85WE5jRnVvWS5yb2Ew HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCdwDANBgkqhkiG9w0BAQsFAAOC AQEAwBS+bYnIKBI9MGs+F8yBnfLJ9k5CWtsmjspszC/3PF69lIP+MsyX/mcM8o7x gaLCRrRpp0/ILdQSRfCfQloN+rCAnBO86PYksENizbICXloVDBsB33b8JvRyPM1J 5sNsCKZ89mblFxAFV8Fu3z/U4kf2ZxD7YxvGfHNfeoikApojqdAALyiaFkACnigB LIFZnQKwhfTYi/ShK+Mu0lM7pFLohe8qh30z+Zk203WcGlHfp1Gp8ZBh2OqGl4bk a8umq2YqDJVoQnnOAY5zUuRDc4njjmq3LBC5V+11vYUuIP0oDdwvi/cLeKMUsh6K nUV1iRR05yb6dc27vQ9lurdNKA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:27:47 2026 by rpki-client